Multi-factor authentication (MFA)

Security for your login

You will need an additional factor to login name and password to be able to log in to many important BOKU IT servicessuch as

  • BOKUonline, BOKUlearn
  • VPN, BOKUflow
  • and other applications with BOKU Single Sign-on (SSO) login

Frequently Asked Questions, FAQ

What is MFA?

MFA stands fo Multi Factor Authentication.

You can find more detailed information at:

What is the Keycloak account management?

In the Keycloak account management you can set up additional factors that you will need in addition to the password when logging in.

You can access the Keycloak account management with :

You can also find a link to the Keycloak account management on your BOKUonline business card.

Step-by-step instructions for setting up these additional factors can be found at:

How do I set up additional factors?

Step-by-step instructions for setting up these additional factors can be found at:

I do not have a smartphone, how do I deal with this?

If you need to log in to BOKU IT services when you are not at your own PC, the following options are available:

  • Authenticator app on your smartphone
  • Recovery codes (printed out on paper or in a password safe)
  • FIDO2 key

If you do not have a smartphone, you still have the options of recovery codes and FIDO2 key.

What about services without SSO login (e.g. GroupWise, Filr, BOKUdrive, ... ) ?

For technical reasons, not all services are currently integrated into MFA.
GroupWise, Filr, BOKUdrive and all applications where you do not currently receive an SSO login will be integrated at a later date.

What exactly can I expect at the beginning of March 2024?

If you have already set up MFA now, you have done everything necessary and you will not notice any changes in March.

If you have not yet set up MFA, you will be asked to set up MFA factors every time you log in to SSO.
After a two-week transition period, SSO login will no longer be possible if you still have not set up additional MFA factors.

For GroupWise, Filr, BOKUdrive and all applications where you currently do not receive an SSO login, you will also not notice any changes in March, as these services will not be integrated until a later date.