MobilePASS Enrollment


MobilePASS Enrollment

 

 

About MobilePASS

Back to Top

 

The lab uses the SafeNet MobilePASS app as another means of multi-factor authentication (MFA). This MFA method can be used to connect to the Virtual Private Network (VPN), login nodes (such as login.jlab.org, acclogin.jlab.org, scilogin.jlab.org, hallgw.jlab.org)  to get to Farm and QCD interactive nodes, and when logging into jlab.org on the web. 

To enroll in MobilePASS, please first email helpdesk@jlab.org requesting access. A token will be assigned to you and you will receive an email from 2factor@jlab.org to your JLab email address with instructions on installing the required app and activating your token. This email must be opened on your smartphone or enrollment device.

 

Setting Up Your MobilePASS Token

Back to Top

 

1. Install MobilePASS

 Go to your app store and install the SafeNet MobilePASS app

 

2. On your phone, open the enrollment link from the SafeNet Authentication Service Self-enrollment email 

SafeNet-Enrollment-Email

 

3. Click the 'Enroll your MobilePASS token' link (or paste the string into the app)

The enrollment link referenced from the SafeNet Authentication Service Self-enrollment email will open a webpage like the one below in your phone's browser. Here you can enroll the token by either clicking the blue link or pasting the long string into your MobilePASS app.

 

4. Set your PIN

You will be asked to name your token (the name is up to you). Then, you can hit 'Activate' and create a 6-8 digit numeric PIN, then re-enter it for confirmation. Despite the displayed instructions, this PIN can only be 6-8 digits.  

Naming-Token-And-Setting-PIN

5. OTP codes should start generating

When you're done, select your JLab token from the list and you should see your auto-generated one-time-password/passcode (OTP) as pictured below:

MobilePASS-OTP

 

 

How do I sign in using MobilePASS?

Back to Top

 

Username: JLab CUE Username

Password: MobilePASS PIN, followed by OTP from the app

You username will be the same one you use for wifi and jlab.org, but your "password" will be the PIN that you set followed by the auto-generated OTP on the screen. No spaces in between.

 

 

Acronyms

  • MFA: multi factor authentication
    • Systems using MFA require you to present two or more verification factors to access them
  • CUE: common user environment
    • Your JLab CUE username and password are the ones you use to sign into jlab.org
  • OTP: one-time-passcode
    • This is the 6-digit code generated by your MFA token
  • (OTP) PIN: one-time-passcode personal identification number
    • Each MFA token you set up will have a 6-8 digit PIN associated with it
    • While PINs may have the same numbers, they are each distinct, and distinct from your Smart Card login PIN(s)