Setting up and signing in using a security key (FIDO2)

authenticator mfa sign-in login multi-factor authentication

Learn how to set up and sign in using a security key (FIDO2). There are four ways to sign in to Sask Polytech using passwords, codes, PINs or touch. Everyone must create a password and will be required to set up a second option at first sign-in. The technical term for this process is called multi-factor authentication (MFA). Having multiple sign-in options provides better password recovery and crucial account security.

⚠️To use a security key as a sign-in method it must be with you at all times. It must be plugged into the device you are using.

How to set up security key sign-in

What you need

An existing secondary sign-in method or a temporary access passcode
- If you need a temporary access passcode, see the Sign-in troubleshooting information page and submit a ticket. You will need to complete the setup within four hours of getting the temporary access passcode.
A FIDO2-certified security key (which works like a USB stick). Prices range from $12 to $70+.
- Recommended FIDO2 key: HYPERFIDO Pro Mini (amazon.ca)
- Purchase through regular purchasing procedures.

What to do

Get your security key.
Go to https://myprofile.microsoft.com on your computer.
Enter your Sask Polytech username (e.g., user@saskpolytech.ca).
Click Next.
Enter your temporary access passcode or secondary sign-in option.
Click Sign in.
Go to the Security info page.
Click on Security info.
Click on Add sign-in method.
Click Choose a Method.
Click Security Key.
Click Add.
Click Next.
Sign in again using your temporary access passcode or secondary sign in option.
Select USB device.
Select Windows Hello or external security key under Create a passkey.
Click OK.
Click OK.
Insert your security key.
Click Next.
Enter a PIN.
1. The PIN must be at least four alphanumeric characters. You will need to use this PIN every time you sign in.
Place your finger on the key sensor for touch authentication.
Enter a meaningful name for your security key.
Click Next.
Click Done.

How to make the security key your default sign-in

Go to the Security info page.
Enter your Sask Polytech username (e.g., user@saskpolytech.ca).
Click on Security info.
Click Change next to Default sign-in method.
Select App based authentication or hardware token - code under Which method would you like to use to sign in?
Click Confirm.
Check Authenticator app or hardware token – code is showing as the default sign-in method.

How to sign in using a security key

Enter your Sask Polytech username when prompted (e.g., user@saskpolytech.ca).
Click Sign-in options.
If you see the Enter Temporary Access Pass screen to appear, click on Other ways to sign in.
Click Use a security key.
Insert your security key.
Enter your PIN.
Touch the security key on the sensor.
Click OK.

⚠️ The FIDO2 key can be removed once authenticated. Please remember to not leave your key plugged into the computer.

To review all your sign-in options, see Changing your Sask Polytech multi-factor authentication sign-in options or Microsoft’s article Change your two-step verification method and settings. To learn more about multi-factor authentication, see Your options to sign in to Sask Polytech.

⚠️You will be prompted to confirm sign-in at least every seven days. Ensure you have security with you when you are accessing Sask Polytech services.

Requirements	Audience	Cause
Purchase a FIDO2 security key, ability to sign-in with your existing MFA method, must have your security key with you at all times to access Sask Polytech services.	Staff, students.	Students/staff without a mobile device can still gain access to Sask Polytech services.

0 reviews

Print Article

Updating...

Setting up and signing in using a security key (FIDO2)

Related articles

Related Articles (4)

Related Services / Offerings (1)

Deleting...