Versions Compared

Old Version 87

changes.mady.by.user Tap L

Saved on

compared with

New Version Current

changes.mady.by.user Tap L

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Deck of Cards
idInstall Google Authenticator
tabLocationleft
Card
labelInstall Google Authenticator and add MFA token on Android
1

On your mobile device, find the Google Authenticator application in the Google Play Store.

Install and open the app.


no image

2On your mobile device, tap "Begin setup".

3

On your mobile device, tap "Scan a barcode" and leave it here and go to your computer.

Tip

If you are missing a "Barcode Scanner", the app will prompt you to install a suggested app. Tap "Install" to install. After installation has completed, click "Scan a barcode" once more on Google Authenticator.

4

On your computer, go to https://identity.lbl.gov/mfa to add a token and create a barcode.

You must generate a barcode at the above link to continue installation. This step must be done on a computer, as you will need to scan the barcode with your mobile device.

Click the "Add an LBL token" link.




4a

Select the method by which you can receive an authorization code.

Select either:

  • Email: <personal email address on record>
  • SMS (text message): <personal phone number on record>

Click the "Start" button to receive a text or email with the authorization code.

4b

Type the authorization code you received in your email or mobile device into the "Enter Authorization Code" field on the computer and give the registered device a meaningful nickname in the "Token Name" field. We recommend including the month, year, and model to easily identify the device. Example: Jay's iPhone 11, August 2020

Click "Add Token." Note, there is a time limit that you must complete this step by.

If time has expired, "Cancel" and retrieve a re-issued token.

4c

You will see a QR code on the computer screen that you must scan with Google Authenticator on your mobile device.

Note

You only have ONE CHANCE to scan this code. Do not close this window until you have successfully scanned the code.

no image
5

If the barcode scan is successful, you will see the 6-digit OTP (One-Time-Password) on your mobile device.

This code is valid for 30-seconds only. As the time limit approaches, you may see the code turn red. If you cannot enter it immediately, then wait a few seconds until the next code appears.

Once you scanned the code, click on I have scan the code next to the QR code

Card
labelInstall Google Authenticator and add MFA token on iOS Device

Click to expand the instruction you want to see:

1. Install Google Authenticator
Expand
title1. Install Google Authenticator
title
Excerpt
Show If
startDateTime2023-09-29T00:00:00
user[email protected]
HTML
<iframe src="https://drive.google.com/file/d/
1QoPjYltukLqoDOzN1RREtn9uFslkCOPg
1fqXLWkOBLNz8SHwnlYhV_XIijAOo-zna/preview" width="640" height="480" allow="autoplay"></iframe>
Expand
Get will change to Open
1
On your iOS device (iPhone/iPad), open the App Store
Image Modified
2
At the bottom, click the Search icon
Image Modified
3
In the search field, type inGoogle Authenticator
Image Modified
4
Click Search
5
In the result, click Get or the Image Added icon for Google Authenticator
Image Modified
6
Once it is finished downloading
, the link 
. Click on Open and continue to 2. Setup MFA Token section of the instruction
Image Modified
 Expand
title2. Setup MFA TokenAdd an MFA token
 Show If
startDateTime2023-09-29T00:00:00
user[email protected]
 HTML
<iframe src="https://drive.google.com/file/d/17NI0adz46Ix7MX4Opxk5oze5yM40lSHL/preview" width="640" height="480" allow="autoplay"></iframe>
1
On a computer with internet access go to https://identity.lbl.gov/mfa. If you are prompted to log in with your Berkeley Lab Identity account, do so
no image
2
In the Multifactor Authentication (MFA) Management page,click Add an LBL token in the bottom left corner of the page
Image Modified
3
Select your preferred Authorization Method that is available to you using the drop-down menu:
  • Email
  • SMS
  • StrongID
Be sure you have access to the Authorization Method you selected
Image Modified
4
Click Start
5
Provide the Authorization Code you received from Step 3
6
Type in a Token Name you would like to use. For example:
  • Pixel6
  • iphone12
  • Uranus
  • Pizza
Note: the name acts as an identifier for you to know which device is the token on
7
Click Add Token
8
A QR code will appear
Image Modified
9
If you have not launched the Google Authenticator app, go ahead and launch the Google Authenticator app on your iPhone/iPad
Note:
 if 
 If you do not have the Google Authenticator app installed, see previous section, 1. Install Google Authenticator section
Image RemovedImage Added
10
Select Use Authenticator without an account
Image Added
11
Click the colorful plus icon at the bottom right or Get Started first then the colorful plus icon
Image Modified
11
12
Select Scan a QR code to activate the camera
Note: you may be prompted to give Google Authenticator app permission to access your phone, follow the prompt to allow it
Image Modified
12
13
Point the camera at the QR code, and make sure you adjust the camera so the QR code is within the green indicator box. It will automatically scan 
 and you will see a 
the QR code and the new token 
 called 
for Lawrence Berkeley National Laboratory with a 6-digit code will appear in your Google Authenticator app on your phone
Image Modified
13
14
Click I have scanned the code
Image Modified
15
On the Multifactor Authentication (MFA) Management page, you will see your new token listed
Image Added
16
14
You're done
no image
 Card
labelTest Google Authenticator
1Go to https://identity.lbl.gov/mfa/ to verify if your OTP is working by clicking on the "Test" link below your device's nickname.
Image Modified
2
Enter the Google Authenticator's OTP from your device into the "One-Time Password" field and click "Test Now".
 Note
Only the newest OTP should be entered into the field for verification, expired codes will not work.
Image Modified
3
You should see a Success! You can test again or click "Done" message if successful.
If there is a problem, you may restart the registration or call the help desk at x4357.
Image Modified
 Card
labelRemove Google Authenticatora Token
 Warning
Ensure you have another form of MFA setup before removing a token.
1
Go to https://identity.lbl.gov/mfa/ and identify the device that you want to permanently stop using.
 Note
Ensure you have another form of OTP to use before removing your device. This does not remove the requirement for OTP on certain logins.
Image Modified
2Click "Delete" to confirm the deletion.
Image Modified











 Pop away