Those who have secured Microsoft SSO with multi-factor authentication (optional for employees, mandatory for students outside TUnet) can choose from a very limited selection of second factors. These include SMS and entering an OTP code. After activating Windows Hello or with the current Microsoft Authenticator app, all Windows devices and smartphones are additionally available as a second factor via passkeys.

You can connect any number of Windows devices to your TU account and, provided they meet the current security standards, use them as a second factor for authentication. This allows the second factor to be used with fingerprint or facial recognition, eliminating the need to type in codes.

In addition, the current Microsoft Authenticator app on Android and iOS can be used as a FIDO token. You can therefore install a passkey on your smartphone and complete authentication on all devices with Bluetooth via your mobile phone. This also eliminates the need to type in codes.

You can find a description of how to set this up on our documentation page, opens an external URL in a new window.