MFA / multi-factor authentication

Information & Instructions

Everyone is familiar with the multi-factor authentication (MFA) process from withdrawing money at an ATM: The first factor is the bank card, the second factor is the PIN. In online banking, a combination of log-in data and transaction number (TAN) is used. Customers receive the TAN, which is only valid once, as an SMS (smsTAN) or app notification (pushTAN) on their smartphone, or they generate it themselves using a TAN generator and chip card (chipTAN).

Transferred to the Deggendorf University of Technology, your first factor is the already known username-password combination, which you already needed daily to log in to Windows or to web services PLUS in the future a second factor via an app release or a security key (the latter mainly for staff).

Why multi-factor authentication?

Access data can quickly fall into the wrong hands. On the one hand, attackers exploit the ignorance and credulity of many Internet users to steal login information. Classic e-mails (phishing) are often used here, which simulate a supposedly valid and secure site in order to steal data. On the other hand, cybercriminals gain direct access to inadequately secured provider databases containing thousands or even millions of credentials.

However, multi-factor authentication protects an account even if credentials have been compromised. This is because attackers cannot gain access to the account with a user name and password alone, because they lack the MFA key as an additional factor for proving identity.

How do I set up multi-factor authentication?

Staff

A USB security key from the company Yubico is available for THD staff.

So that you can deposit the security key, you must have deposited another second factor in advance.
Important: Therefore, please be sure to follow the steps in the order of Step 1 and Step 2!

Instructions:

Recommended standard variant:

1. step: Microsoft Authenticator Applikation
2. step: Security-Key

How do I use the second factor in the registration process?

Instructions for using the second factor (USB security key, Microsoft Authenticator app, or telephony) can be found here.

Students

As a primary second factor in addition to the already known username/password combination, we recommend that students use the smartphone app "Microsoft Authenticator" (or any other OATH/TOTP app such as Google Authenticator).

As of October 1, 2026, 2FA/MFA authentication via phone call or SMS is no longer available.

To prevent being locked out after changing phones, we recommend setting up a backup for your current smartphone. As a fallback solution, we recommend a security key (hardware token). The following are supported:

Producer	Models
Yubico	YubiKey 5 (A/C/NFC/Nano), Security Key Series
Nitrokey	Nitrokey 3 (A/C, NFC), Nitrokey Passkey
Swissbit	iShield Key Pro, iShield Key 2
Token2	PIN+ Serie, T2F2 Bio2
Feitian	ePass FIDO, BioPass, AllinPass
Thales	SafeNet eToken FIDO, IDPrime FIDO
HID Global	Crescendo Key, Crescendo C2300
Google	Titan Security Key
Kensington	VeriMark Guard / DT

If you need to visit our Service Desk due to issues with the authenticator, please be sure to bring both your phone and a second device (e.g., laptop or tablet).

Instructions:

Recommended standard variant: Initial Setup - Microsoft Authenticator App

What should I do if I can no longer access my Authenticator?

If you ever find yourself unable to access your Authenticator app – whether because you’ve changed your smartphone, it’s been damaged or you’ve lost it – please feel free to contact our IT support team at It-support@th-deg.de.

You’ll need a smartphone to use the Microsoft Authenticator app.