Body
Overview
A biometric authenticator uses your existing device to verify your identity with biometric traits such as fingerprints or facial features. Touch ID, Face ID, or Windows Hello can be leveraged as a biometric authenticator which uses the WebAuthn standard.
Technology Services only recommends using a biometric authenticator as a supplemental security method since support for WebAuthn is not universal across all browsers. Further, every web browser that you would like to use to log in will require separate enrollment. A biometric authenticator configured in one browser will not allow you to verify your login when using a different device or browser to log in.
Technology Services recommends setting up Okta Verify or Google Authenticator as your primary security method.
How to get a biometric authenticator
In order to set up a biometric authenticator for MFA, you will need a device with a biometric sensor and a browser that supports WebAuthn. If you have a compatible configuration, follow the instructions below to set it up for your Puget Sound account.
How to set up a biometric authenticator
The exact steps to set up a biometric authenticator will vary depending on what device, operating system, and browser you are using.
Note: Windows Hello on university-managed devices is not currently supported.
General instructions
- Log in to your Puget Sound account at login.pugetsound.edu.
- Click your name in the upper-right corner then click Settings.
- In the Security Methods section, click Set up or Set up another next to the Security Key or Biometric Authenticator security method.
- If prompted, re-authenticate to proceed.
- Click Set up or Set up another under the Security Key or Biometric Authenticator option.
- Click Set up on the next screen.
- Follow the on-screen prompts from your browser to complete the setup.
- This generally involves allowing your browser to use Touch ID, Face ID, Windows Hello, or similar biometric login with login.pugetsound.edu.
Step-by-step example
Set up Touch ID in Chrome on MacOS (click to expand section)
Set up Touch ID in Chrome
The instructions below are only an example. The exact steps will vary depending on your device, operating system, and browser. The following example is using Touch ID on MacOS Sequoia in the Chrome browser.
If you are prompted to set up MFA when logging in, skip to step #5.
- Log in to your Puget Sound account at login.pugetsound.edu.
- Click your name in the upper-right corner then click Settings.
- In the Security Methods section, click Set up or Set up another next to the Security Key or Biometric Authenticator security method.
- If prompted, re-authenticate to proceed.
- Click Set up or Set up another under the Security Key or Biometric Authenticator option.
- Click Set up on the next screen.
- A dialog box will appear to create a passkey. Click Continue.
- Place your finger on the fingerprint reader on your computer.
- You have finished setting up a biometric authenticator in this browser!
- Once you successful set up this method, it can only be used on the same browser/device to verify your login. Therefore, we strongly recommend setting up another security method such as Okta Verify or Google Authenticator.
How to use a biometric authenticator to log in
The exact steps to log in using a biometric authenticator will vary depending on what device, operating system, and browser you are using.
General instructions
- In a browser, go to login.pugetsound.edu.
- Type in your Puget Sound username and password then click Sign in.
- Select Security Key or Biometric Authenticator.
- Note: If Security Key or Biometric Authenticator is not presented as an option, select Verify with something else.
- Follow the on-screen prompts from your browser to verify the login.
- This generally involves placing your finger on the fingerprint reader or displaying your face to the camera.
Step-by-step example
Use Touch ID in Chrome on MacOS (click to expand section)
Use Touch ID in Chrome
The instructions below are only an example. The exact steps will vary depending on your device, operating system, and browser. The following example is using Touch ID on MacOS Sequoia in the Chrome browser.
- In a browser, go to login.pugetsound.edu.
- Type in your Puget Sound username and password then click Sign in.
- Select Security Key or Biometric Authenticator.
- Note: If Security Key or Biometric Authenticator is not presented as an option, select Verify with something else.
- Place your finger on the fingerprint reader on your computer.