Find On your mobile device, find the Google Authenticator application in the Google Play Store.

Install and open the app.

Go On your computer, go to https://identity.lbl.gov/mfa to add a token and create a barcode.

You must generate a barcode at the above link to continue installation. This step must be done on a computer, as you will need to scan the barcode with your phonemobile device.

Click the "Add an LBL token" link.

Select the method by which you can receive an authorization code.

Select either:

• Email: <personal email address on record>
• SMS (text message): <personal phone number on record>

Click the "Start" button to receive a text or email with the authorization code.

Type the authorization code you received in your email or mobile device into the "Enter Authorization Code" field on the computer and give the registered device a meaningful nickname in the "Token Name" field. We recommend including the month, year, and model to easily identify the device. Example: Jay's iPhone 11, August 2020

Click "Add Token." Note, there is a time limit that you must complete this step by.

If time has expired, "Cancel" and retrieve a re-issued token.

If the barcode scan is successful, you will see the 6-digit OTP (One-Time-Password) on your mobile device.

This code is valid for 30-seconds only. As the time limit approaches, you may see the code turn red. If you cannot enter it immediately, then wait a few seconds until the next code appears.

Once you scanned the code, click on I have scan the code next to the QR code

https://identity.lbl.gov/mfa

. If you are prompted to log in with your Berkeley Lab Identity account, do so

no image

2

In the Multifactor Authentication (MFA) Management page,click Add an LBL token in the bottom left corner of the page

Image Added

3

Select your preferred Authorization Method that is available to you using the drop-down menu:

• Email

• SMS

• StrongID

Be sure you have access to the Authorization Method you selected

Image Added

4

Click Start

5

Provide the Authorization Code you received from Step 3

6

Type in a Token Name you would like to use. For example:

• Pixel6

• iphone12

• Uranus

• Pizza

Note: the name acts as an identifier for you to know which device is the token on

7

Click Add Token

8

A QR code will appear

Image Added

9

If you have not launched the Google Authenticator app, go ahead and launch the Google Authenticator app on your iPhone/iPad

Note: If you do not have the Google Authenticator app installed, see previous section, 1. Install Google Authenticator section

Select Use Authenticator without an account

11

Click the colorful plus icon at the bottom right or Get Started first then the colorful plus icon

Image Added

12

Select Scan a QR code to activate the camera

Note: you may be prompted to give Google Authenticator app permission to access your phone, follow the prompt to allow it

Image Added

13

Point the camera at the QR code, and make sure you adjust the camera so the QR code is within the green indicator box. It will automatically scan the QR code and the new token for Lawrence Berkeley National Laboratory with a 6-digit code will appear in your Google Authenticator app on your phone

Image Added

14

Click I have scanned the code

Image Added

15

On the Multifactor Authentication (MFA) Management page, you will see your new token listed

Image Added

16

You're done

no image