Passkeys are a phishing-resistant alternative to conventional
passwords. You can authenticate yourself by using your smartphone and
setting up a PIN or biometrics.
The next steps demonstrate how you can set up a passkey as an authentication token for TH AB.
This can only be used to authenticate a second device with your smartphone if both devices have Bluetooth.
1) Visit mfa.th-ab.de
After the usual Shibboleth registration with login and password, you can log in to eduMFA with your university ID:
2) Erstellen sie einen Passkey
Select “Enroll token” in the menu (1) and the token type “WebAuthn” in the drop-down menu (2).
In
the Description field, you can enter brief information for this
authentication token in order to be able to better understand yourself
on which device you saved this token in the future.
By clicking on the button (3) “Enroll token” you will be forwarded to the next step.
3. follow the instructions on your smartphone:
If you do not yet use passkeys on your device and do not save any passwords, you must first confirm your lock screen PIN.
4. Using passkeys
4.2 Using a passkey for another device
You can
also use the passkey stored on the smartphone for authentication on
another device; both devices must support Bluetooth for this.
Under
Windows 10, this only works with Chrome and Chromium-based web browsers
(Edge, Opera, Brave, Vivaldi, ...) but not Firefox; from Windows 11
onwards, the functionality is available with any web browser.
4.2.1 Chrome and Chromium-based browsers (Edge, Opera, Opera GX, Brave, Vivaldi, ....) on Windows 10
Select the option “Other smartphone, other tablet or other ...”
4.2.2 Windows 11
4.1 Use passkey on your smartphone
To use the saved passkey, click on the “Passkeys” button on the login screen and follow all further instructions.