MobilePASS/MobilePASS+ Enrollment
Table of Contents
About MobilePASS/MobilePASS+ | Back to Top |
The lab uses the SafeNet MobilePASS / MobilePASS+ app as another means of multi-factor authentication (MFA). This MFA method can be used to connect to the Virtual Private Network (VPN), login nodes (such as login.jlab.org, acclogin.jlab.org, scilogin.jlab.org, hallgw.jlab.org) to get to Farm and QCD interactive nodes, and when logging into jlab.org on the web.
To enroll in MobilePASS, you please first email helpdesk@jlab.org requesting access. Your JLab Supervisor/Sponsor may be required to approve your access first. Once approved, within 30 minutes of helpdesk enrolling you in MobilePASS, a token will be assigned to you. You will receive an email from 2factor@jlab.org to your JLab email address with instructions on installing the required app and activating your token. This email must be opened on your smartphone or enrollment device.
Setting Up Your MobilePASS/MobilePASS+ Token | Back to Top |
1. Open the enrollment link from the SafeNet Authentication Service Self-enrollment email
(2. - 3.) Click this dropdown to see a visual setup guide
2. Install MobilePASS
Go to your app store and install the SafeNet MobilePASS app
3. Click the 'Enroll your MobilePASS token' link (or paste the string into the app)
The link referenced in this email will open on your phone's browser. The webpage will look something like the one below. Pay close attention to the instructions on selecting 'Automatic Enrollment' and pasting the string into MobilePASS.
4. Set your PIN
You will be asked to name your token (the name is up to you). Then, you can hit 'Activate' and create a 6-8 digit numeric PIN, then re-enter it for confirmation. This pin will be active for 6 months, after which, users will have to reset the pin.
5. OTP codes should start generating
When you're done, select your JLab token from the list and you should see your auto-generated one-time-password/passcode (OTP) as pictured below:
How do I sign in using MobilePASS? | Back to Top |
Username: JLab CUE Username
Password: MobilePASS PIN, followed by OTP from the app
Whether you're accessing the hallgw or VPN, your username will be the same, but your "password" will be the PIN that you set followed by the auto-generated OTP on the screen. No spaces in between.
Related Articles | Back to Top |
- Connecting to Farm and QCD Interactive Nodes
- Connecting using VPN
- Connecting to the VPN on Mac
- Remote Work
- MFA (Multi-Factor Authentication)
- Web-Based MFA: If your SafeNet/MobilePass token has been reset
- Different Types of Smartcards and Multi-Factor Authentication
Acronyms
- MFA: multi factor authentication
- Systems using MFA require you to present two or more verification factors to access them
- CUE: common user environment
- Your JLab CUE username and password are the ones you use to sign into jlab.org
- OTP: one-time-passcode
- This is the 6-digit code generated by your MFA token
- (OTP) PIN: one-time-passcode personal identification number
- Each MFA token you set up will have a 6-8 digit PIN associated with it
- While PINs may have the same numbers, they are each distinct, and distinct from your Smart Card login PIN(s)