Enabling Two-factor authentication
The PUESC portal allows you to further secure your user account by enabling two-factor authentication using the Google Authenticator app.
To enable this additional level of security, select "Enable" in the "My data" section of the "Two-factor authentication" section.
To enable two-factor authentication, confirm it with your password.
The system then displays a brief instruction on how to link your user account with the Google Authenticator app.
To link, you must:
- Download the Google Authenticator app to the user's mobile device.
- Launch the Google Authenticator app on your mobile device and then scan the QR code or enter the linking code. After scanning the QR code or entering the linking code correctly, the Google Authenticator app will display a verification code.
- On the PUESC portal, enter the code displayed in the Google Authenticator app in the "Verification code" field and confirm the action by clicking "Send."
After correctly linking the PUESC account with the Google Authenticator application, the portal in the "My data" view in the "Two-factor login" section will present a list of trusted devices and a button to disable two-factor login (the disabling operation must be confirmed with the user's password).
Managing trusted devices
For each trusted device, the user can perform the following actions:
- Remove – This action allows the device to be removed from the list of trusted devices. If the device is removed, logging in to that device will require entering a verification code.
- Edit name – This action allows the user to enter a unique name for the trusted device.
Logging in after enabling two-factor authentication
If a user has enabled two-factor authentication on their account, after successfully authenticating with their username and password, an additional window with a verification code will be displayed. In this window, the user enters the verification code generated in the associated Google Authenticator app. Additionally, this window allows the user to specify whether to add the device being logged in to their trusted devices.
Note: If a user has two-factor authentication enabled and is logging in on a trusted device, entering the verification code is not required after successfully authenticating with their username and password.
Google Help with 2-Step Verification - Google Account Help (the page opens in a new window)
Losing Access to the Google Authenticator App
If you lose access to the one-time login codes generated in the Google Authenticator app, when logging in on an untrusted device, you can use an emergency code sent to the user's email address.
To use emergency access after entering the correct username and password, in the "Login Confirmation" view, select "I don't have access to the Google Authenticator app." Selecting this option will take you to the one-time login code generation view. In this window, select the "Generate one-time code" button. After selecting this option, the system sends the user a message with the login code, which must be entered in the "Enter one-time code" window and confirmed by clicking "Confirm."
If the code is correct, a screen will appear informing you about the option to disable the second factor. Selecting this option allows you to disable the second factor. This option can be re-enabled in the "My Data" view.
Note: Emergency login can only be used once per day. If this limit is reached, the system will display a message stating that another code cannot be generated. If you need to receive another code, please contact the Help Desk SISC.
Please note: The code sent is a one-time use and is valid for 10 minutes from the time of sending. After this time, the code expires and cannot be used to log in.