How do I enroll in Desktop 2FA?

As an SCC Employee, you are required to use Desktop 2FA to access all college owned machines.

You will be required at login to provider your Password + Swipe Card or Password + One Time Password(OTP)

Items Required:

To enroll in Desktop 2FA, you will need the following items:

NFC Card Reader plugged into Computer
Cell Phone with Google Authenticator or compatible OTP App
College Issued Swipe Card

This guide will assume the use of the Google Authenticator application for all instructions. Follow your OTP App's instructions if using a different compatible application.

For more information on why SCC Uses 2FA, and the differences between Desktop 2FA and Online Services 2FA, click here.

Enrolling in Desktop 2FA - First Time

Enrollment will only occur once per account. The first time an SCC Employee attempts to sign onto a machine, the Desktop 2FA Enrollment process will begin, courtesy of HID Digital Persona. Once enrolled, you will be able to use any SCC computer with Desktop 2FA.

IF YOU DO NOT SUCCESSFULLY ENROLL: If you do not successfully enroll when its prompts you, you will be unable to sign in to any SCC Device. It will require you to visit the IT Office so that we can manually enroll you in the process.

If you do not automatically receive the enrollment screen upon login, select the "First Time Using HID Persona?" Button that appears below the password box.

To begin, simply enter in your username and your password at the login screen. The HID Digital Persona registration process will then begin, prompting you to enter in your password once more (See Fig 1)

Fig 1. Enter in your Password

Swipe Card Enrollment

Once you've entered in your password, you'll be presented with the Credential Manager screen, where you can add / change / and remove your enrollments. For now, you will want to select the center option, "Cards", to enroll your Swipe Card (See Fig 2)

Fig 2. Select the "Cards" option in the center

With no cards registered, you will see the "Enroll" button in the center of the screen. Select it (See Fig 3A).

NOTE: If you do not have a card reader (Fig 3B) attached to your computer, you will be told to plug in the reader to continue the enrollment process (Fig 3C). If you do not have one, place an Equipment Service Request from the Help Desk portal to obtain one.

Fig 3A - Select the "Enroll" Option

Fig 3B - NFC Card Reader

Fig 3C - Connect the Card Reader error

When the program is ready, it will prompt you to place your Swipe Card on the Card Reader (Fig 4).

Fig 4 - Place or Tap the card on Reader.

Congratulations, your Swipe Card is now enrolled as a Desktop 2FA token. To give yourself more options, please continue on and enroll a One Time Password(OTP) by pressing the "Done" button in the bottom right hand corner.

One-Time Password Enrollment

At the main screen, select the "One-Time Password" option to begin enrollment.

Fig 5 - One-Time Password Enrollment

The One-Time Password Enrollment screen will open with a QR Code already generated for you to scan with Google Authenticator (Fig 6).
Fig 6 - Scan the QR Code with the Google Authenticator App

Scan the QR Code, which will generate an entry in Google authenticator named:

Crossmatch: Altus:<email@salemcc.edu>

Enter the six digit code it generates in the "Verification Code from the phone" field (Fig 6).

Click "Save".

Congratulations, you have now enrolled an OTP for Desktop 2FA!

Once you have finished enrollment, simply select the "X" in the upper right hand corner.

If you do not have an OTP or Card enrolled at this point, do not close the enrollment window. You will be unable to log in until you visit IT in Tillis 208.

Sign-in Options

Now when you sign into a machine, you will see a clickable button called "Sign-in options". This will allow you to select a variety of different authentication methods (Fig 7) to use.

NOTE: SCC Only Accepts Passwords, OTP, and Contact Cards as acceptable forms of Sign-In.

Fig 7 - Sign-in Options

Lost Swipe Card

If you ever lose your Swipe Card, please review this support article.

Lost One-Time Passwords

If you have lost access to your One-Time Passwords, please review this support article.