MFA and passkey under Windows

Attention:

  • If a computer is used by several people, it is essential that each user has their own local user account.
  • No MFA login may be set up with a technical account.

Please note!

Create passkey on the first device

To roll out the passkey on your first computer, open the website https://getpasskey.iam.uni-bamberg.de/ with your BA-Number and the corresponding password.

After successfully registering, follow the instructions starting from the Roll out token.

Roll out token

Note!

Rolling out the token fails if you are using the Chrome browser and are logged into your Google account in the browser. In this case, you must use a different browser, such as Firefox or Edge.

Select the menu item Roll out token.

As you have to roll out a passkey for each device, it is advisable to define a description accordingly. Therefore, assign a corresponding name under Description, such as “Laptop login”. Confirm this with Roll out token.

If the passkey has been successfully stored, you will receive the message The token has been rolled out in the next window.

Note!

Once the passkey has been rolled out, you can tick the box for Always use automatic login with passkey when logging in to Shibboleth. This means you no longer need to enter your BA-Number and password before you can use the passkey.

Manage passkey

Passkeys are managed via the IAM portal (iam.uni-bamberg.de). You can deactivate or delete your passkeys under the menu item Manage Passkeys. Please note that the corresponding passkey must be deleted immediately if the device is lost or stolen.

Have you any futher questions?

IT-Support
Telephone: +49 951 863-1333
E-Mail: it-support(at)uni-bamberg.de