• 2FA (Two-Factor Authentication) : This is a process where a user verifies their identity by providing two different authentication factors. 2FA is a form of multi-factor authentication.
• Authentication Factors : There are three types of authentication factors:
  1. Something you know : This is information that only the user knows, such as a username-password or a PIN code.
  2. Something you have : This refers to an item that only the user possesses, like a SIM card, a cryptographic device, or a device that generates one-time passwords (OTP device).
  3. Something you are : This is the user’s biometric data, such as their face or fingerprints.
     

  Why use MFA?

  • To provide a higher level of security than using only a password.
  • To reduce the risk of account attacks or hacking, as the account cannot be used without the additional authentication factor, even if the password is known.
  • The KU ALLLogin system supports and enforces MFA to maintain security standards.

  Supported 2FA Methods for KU ALL-Login
  The system primarily supports the following 2-factor authentication methods :

  1. Google Authenticator app (available for iOS and Android).
  2. WebAuthn, which includes using a YubiKey or Touch ID on macOS.

  Steps for Setting up MFA
     Step 1: Install the app

  • Download Google Authenticator from the App Store (iOS) or Play Store (Android).
  • Installation guides for Google Authenticator:
    • For iOS [ VDO CLIP ]
    • For Android [ VDO CLIP ]

     Step 2: Configure MFA

  • Access KU ALL-Login with your KU network user account.
  • Scan the QR code to link Google Authenticator.
  • Guide for configuring MFA on the KU ALL-Login system.
    [ VDO CLIP ]

     Alternative MFA Configuration for KU ALL-Login

  • Touch ID on macOS. | [ VDO CLIP ]
  • Google Chrome profile | [ VDO CLIP ]
  • Using a YubiKey security key. | [ VDO CLIP ]
  • Using a phone or tablet. | [ VDO CLIP ]

Troubleshooting

• Forgot your phone?
  • Users can request a temporary cancellation of MFA usage by contacting the Helpdesk during business hours.
  • Users can also temporarily cancel MFA themselves online at https://mfa.ku.ac.th (limited to 4 times per month).
    • Guide for self-cancellation of Multi-Factor Authentication (MFA). [ VDO CLIP ]
• Changed your phone?
  • Users can handle this process themselves through the system.

Login Examples

• Example of logging into KU-Google with KU ALL-Login. [ VDO CLIP ]
• Example of logging into KU-Office365 with KU ALL-Login. [ VDO CLIP ]