Setting up and signing in using a security key (FIDO2)

What to look for when purchasing

• A FIDO2-certified security key (which works like a USB stick).
  • Purchase from Amazon or other technology retailers.
  • FIDO2 or FIDO Certified must be included in the product description.
  • USB‑A or USB‑C connectors should be selected based on the ports available on your device.
  • Lower‑cost options are often larger and may take up more space next to other ports.

⚠️Student support: If a student does not have a mobile device and needs a security key to sign in, it is up to the Program to work with that student to obtain one. 

You can use security keys as your main sign-in method whenever you sign in, but they cannot technically be set as defaults. This means you will need to choose "use a security key" each time you sign in to bypass the other sign-in methods.
 

You will need another way to sign in first

You can use an existing secondary sign-in method or get a temporary access passcode sent to you from our IT Service Desk.

• If you need a temporary access passcode, see the Sign-in troubleshooting information page and submit a ticket. You will need to complete the setup within four hours of getting the temporary access passcode.
   

How to set up your USB security key

1. Get your security key.
2. Go to https://myprofile.microsoft.com on your computer.
3. Enter your Sask Polytech username (e.g., user@saskpolytech.ca).
4. Click Next.
   
    
5. Enter your temporary access passcode or secondary sign-in option.
   
    
6. Click Sign in.
7. Go to the Security info page.
8. Click on Security info.
9. Click on Add sign-in method.
   
    
10. Click Choose a Method.
11. Click Security Key.
    
12. Click Add. 
13. Click Next.
14. Sign in again using your temporary access passcode or secondary sign in option.
    
     
15. Select USB device.
    
     
16. Select Windows Hello or external security key under Create a passkey.
    
     
17. Click OK.
18. Click OK.
19. Insert your security key.
    
     
20. Click Next.
21. Enter a PIN. 
    1. The PIN must be at least four alphanumeric characters. You will need to use this PIN every time you sign in. 
       
        
22. Place your finger on the key sensor for touch authentication.
    
     
23. Enter a meaningful name for your security key. 
24. Click Next.
    
     
25. Click Done. 

You can use security keys as your main sign-in method whenever you sign in, but they cannot technically be set as defaults. This means you will need to choose "use a security key" each time you sign in to bypass the other sign-in methods. Multiple sign-in screens may appear depending on different scenarios. Below are three possible sign-in screen scenarios you may come across. 

Screen scenario 1

1. Open a Sask Polytech service or app, e.g., go to the mySaskpolytech portal.
2. Follow the sign-in prompt. 
3. Click on "Face, fingerprint, PIN or security key". 
4. Click "security key".
5. Follow the prompts to insert your key, enter your PIN, and touch the key.
    

Screen scenario 2

1. Open an Sask Polytech service or app, e.g., go to the mySaskpolytech portal.
2. Follow the sign-in prompt.
3. Click "Sign in another way" if prompted to enter a code or number.
4. Click on "Face, fingerprint, PIN or security key".
5. Click "security key".
6. Follow the prompts to insert your key, enter your PIN, and touch the key.
    

Screen scenario 3

1. Enter your Sask Polytech username when prompted (e.g., user@saskpolytech.ca).
2. Click Sign-in options.
   
3. If you see the Enter Temporary Access Pass screen to appear, click on Other ways to sign in.
4. Click Use a security key.
5. Insert your security key.
6. Enter your PIN. 
7. Touch the security key on the sensor.
8. Click OK. 

You can either change your Security Key PIN if you know the current PIN or reset it if you've forgotten it.

To change your security key PIN

1. Open Settings on your Windows device.
2. Select Accounts > Sign-in options.
3. Under Security Key, select Manage.
4. Insert your USB security key or tap your NFC security key.
5. In the Security Key PIN section, select Change. (If a PIN has not been set up previously, select Add.)
6. Enter your current PIN, then enter and confirm your new PIN.
7. Select OK to save your changes.

If you forgot your PIN

If you no longer remember your PIN, you'll need to reset the security key.

1. Connect the security key to your Windows computer.
2. Open Settings > Accounts > Sign-in options > Security Key > Manage.
3. Insert the security key and follow the on-screen prompts to reset it.