Zentraler Informatikdienst

Setting up Google Authenticator as second factor for VPN

For:  students    employees

This user guide will help you set up the Google Authenticator app as a second factor for multi-factor authentication for VPN.

You will then need to configure the VPN software before you can establish a VPN connection.

Requirements

  • a device (i.e. laptop) on which you want to use VPN with multi-factor authentication
  • a mobile device with Android or iOS, iPadOS and a precisely set time for the app Google Authenticator

  1. Install Google Authenticator
  2. Open Google Authenticator
  3. Plus symbol – Scan a QR code
  4. Form Setting up second factor – Setting up TOTP authentication app – scan QR code
  5. Display one-time password
  6. Enter one-time password

Detailed user guide

1. Installing Google Authenticator

Download and install the Google Authenticator App from:

How do you download and install an app? To the basic user guide Installing smartphone or tablet app

2. Opening Google Authenticator

  1. Open Google Authenticator and tap Get started.
  2. You will be prompted to log in with a Google account. When you log in, the VPN account will also be saved in your Google account. If you do not want this, select Use without an account.

3. Adding account

  1. Tap Scan a QR code.
  2. Allow the app to access the camera, or allow it to take pictures and videos.

4. Scanning QR code

  1. In the browser of your other device (i.e. laptop) that you want to use VPN on, open the form Setting up second factor.
  2. Click Setting up TOTP authentication app.
  3. Scan the QR code displayed there with your mobile device.

5. Displaying one-time password

  1. An account with the name ZID: UserID (example: ZID: doej99) has now been added to the authentication app.
  2. Below it, a one-time password is displayed, which is renewed every 30 seconds. The fill level of the circle on the right-hand side indicates how long the one-time password is still valid.

6. Entering one-time password

  1. Enter this one-time password in the One-time password field of the form.
  2. Click OK before the time expires.