By Louis Pelosi |

Initial Login

password_login

First-time enrollment

  • Upon initial login, you will be asked to scan a QR code on the page, and to enter a one-time code from your OTP application within a two-minute period.

  • If you do not enter the one-time code within this two-minute window, the TOTP creation will fail, and the page will restart with the login form.

totp_login

  • Upon successful OTP code verification, a success page will verify that "Your OTP enrollment is complete".
  • Within a few minutes of verification, your token will be replicated to other SDCC systems and application for OTP use.

otpenroll

Using MFA

After initial enrollment, you can use MFA to access many SDCC resources. When prompted for a two-factor authentication code, enter the one-time code from your OTP application within a two-minute period.

  • If you do not enter the one-time code within this two-minute window, or if you enter an incorrect or previous code, the TOTP creation will fail, and the page will restart with the login form.

Token Handling

  • Mobile Apps:
    Note: If you need to re-scan your QR code, Google Authenticator will detect the same user token in your code and ask to replace the old token, but FreeOTP will require you to manually delete the old token and rescan, which is a manual step.
  • Browser Extensions:
    Authenticator plugins can also be activated as an extension to the browser as an alternative choices of mobile apps, for example: Authenticator 
  • OS based apps:
    WinOTP for Windows

Self-service deletion of existing tokens

Please use the following link to delete your own tokens.

https://www.sdcc.bnl.gov/information/getting-started/self-service-mfa-deletion-portal