How to set up one-time password (TOTP)（Google Authenticator）

TUT Information media center

Our university has introduced two-factor authentication (TOTP authentication) using
one-time passwords which based on time to ensure identity and prevent unauthorized using ofimportant systems. This authentication requires one-time passwords in addition to the user nameand password which user remembered to achieve strong authentication. A one-time password canbe generated only on the smartphone which user owns.
Therefore, it is necessary to install an application for using TOTP authentication on yoursmartphone in advance and register it with University's user authentication system. This section
describes the procedure for registering the one-time password application ‘Google Authenticator’in the authentication infrastructure system.
The authentication method is switched depending on the type of access source network (on-campus
or off-campus). For example, on-campus networks can be authenticated only with a user name andpassword, but off-campus networks require TOTP authentication in addition to that. In thisclassification, the following networks are classified as "off-campus".
Connection from off-campus by VPNWired guest network (Village Tenaku etc.)Wireless network SSID: eduroamWireless network SSID: tutguest

Procedure of installation and registration of One-time password application
1.

Connect your PC and smartphone for the setting to the campus network.

2.

Check the date and time on your PC and smartphone are correct.

3.

Install ‘Google Authenticator’ on your smartphone.
Google Authenticator
iOS: https://apps.apple.com/jp/app/google-authenticator/id388497605
Android: https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2

1

4.

Display "User Profile Maintenance" page in the PC browser.
To display the "User Profile Maintenance" page, click "Change password" in quick menu on
the home page of the Information Media Center (https://imc.tut.ac.jp/).

5.

Click “Register the one-time password generator” on the User Profile Maintenance page.

The "Register the one time password generator" page cannot be accessed from offcampus network.
6.

QR code will be displayed on the PC browser. Start Google Authenticator installed on thesmartphone and scan the QR code.

※ There is some possibility of being displayed "Registered" sign, even if you have notregistered the one-time password application. In that case, click the "Reissue" button.

2

Follow the steps below on the Google Authenticator app.
① Tap 「設定を開始」(Start the setting)② Tap 「バーコードをスキャン」(Scan the bar code)③ The「バーコードをスキャン」(Scan the bar code) screen will appear. Scan the QR
code displayed on the browser.

3

When the QR code is displayed ingreen frame, it will be scanned
automatically and a 6-digit number
will be displayed as shown below.

7.

If you’re successful with the scan, a 6-digit number will be displayed. Enter the number inthe entry field of the PC browser and click the "Register" button.

6-digit number displayed by the one-time password app

8.

Registration is completed when the PC browser displays "Processing completed

successfully". Click the "OK" button.

4