Skip to main content

MFA is coming to the University of Siegen

The University of Siegen is introducing MFA!

MFA stands for multi-factor authentication. This will provide even better protection for services that require you to log in with your USI ID credentials. Here you can find out which services are affected.

You can learn more about what this entails and why MFA is being introduced on this information page.
 

Go directly to the eduMFA portal
Hände vor einem Laptop mit einer Login-Maske. Neben der Tastatur schwebt ein Verteidigungsschild mit der Überschrift "MFA" und einem grünen Haken.


MFA is becoming mandatory—set up two-factor authentication now!

After October 31, 2026, multi-factor authentication (MFA) will be mandatory for employees; for students, it will be mandatory after November 13, 2026.

Set up your two-factor authentication now so you can continue to access the University of Siegen's services.

What is MFA?

Multi-factor authentication (MFA) is a security procedure that enhances the security of accessing an account or system.
In addition to a password, at least one other factor, known as a "token," is required. This factor can be a one-time code from an app or text message, a fingerprint, or a special USB drive, for example.

Using multiple factors prevents unauthorized users from accessing an account or system with only a password. This makes common phishing attempts significantly more difficult.

Would you like to learn more about MFA? Here you'll find an interactive, web-based demo designed to educate users. It was developed by Abdullah Abbas, a graduate of the University of Siegen.

 

Who is affected, and starting when?

  • ZIMT employees (mandatory since 2025)
  • Central administration and management (mandatory since 2025)
  • Employees (mandatory transition by October 31, 2026)
  • Students (mandatory transition by November 13, 2026)

 

Reach Your Goal Quickly

e-book

How does it work?

Go to the tutorials
FAQ

Any other questions?

Go to the FAQs
multi-factor

Roll out tokens

Go to the eduMFA portal

Types of Tokens

Choose the method that works best for you to log in.

Smartphone, das in einer Hand liegt und auf dem Bildschirm eine Push-Nachricht der eduMFA-App zeigt
For Android and iOS

PUSH

Log in via smartphone app confirmation
Just tap "Accept" or "Decline"
Ideal for quick confirmations in everyday work life
TOTP Token
App or hardware token

TOTP

Six-digit one-time code
Many authenticator apps offer support
Best Practices for Using Time-Limited, One-Time Codes
YubiKey 5 NFC und YubiKey 5C NFC
Hardware Key

YubiKey AES

Authentication via USB or NFC
No need to type in codes
High level of security is achieved through physical possession of the key.
YubiKey 5 NFC (USB-A) and YubiKey 5C NFC (USB-C) can be purchased through a framework contract (see FAQ)
Hardware-Token
Event-Based Hardware Token

HOTP

Generates a OTP code with the push of a button
Alternative to a YubiKey or a smartphone app
Convenient for people who don't want to use a smartphone
TAN-Liste
Paper-Based Emergency Solution

TAN List

Pre-generated one-time codes on a TAN list
Suitable as a backup or temporary solution
Store securely and protect from unauthorized access


MFA for Students
We recommend that students use PUSH and/or TOTP tokens, as these are easily accessible via a smartphone and available at any time. The TAN list is also a good option as a backup token, provided it is stored securely.
If you already have an OTP-capable hardware token (Passkeys are currently not supported), you can use that as well.
 

Video icon

Video Tutorials

You can find our video tutorials on setting up the various types of tokens on our tutorials page.

Go to the videos

The Path to the Second Factor

1

Tokens & Instructions

Choose the tokens that best suit your needs. Then open the corresponding instructions and prepare for the rollout accordingly (e.g., by installing the appropriate app).

2

Sign in
to the portal

Go to the eduMFA portal (mfa.uni-siegen.de) and log in using your ZIMT account credentials.

 

Go to the eduMFA portal

3

Roll out
tokens

After successfully logging in to the eduMFA portal, click "Roll out Tokens" in the menu bar on the left to create tokens. It is strongly recommended that you set up at least two types of tokens.

4

MFA is
enabled

All done!

From now on, you will also be asked to provide one of your allocated tokens when logging in.

FAQ

Central Administration staff should submit a ticket to ZIMT Support for this purpose. Please specify the quantity and the desired connector type. The resulting costs will be billed centrally in 2026. The models available are the YubiKey 5 NFC (USB-A port) and the YubiKey 5C NFC (USB-C port).

Employees outside the central administration can purchase the following YubiKey models from the Bauteilelager (parts warehouse) (H-E016):

  • YubiKey 5 NFC (USB-A port), Price: 48 €
  • YubiKey 5C NFC (USB-C port), Price: 56 €

To make adding the YubiKeys to your account as easy as possible, they have been preconfigured by the ZIMT. To add a YubiKey as an MFA token, simply log in to https://www.mfa.uni-siegen.de, select the “Assign Token” option in the left-hand menu bar, and then enter the serial number of your YubiKey (located on the back).

For more information on setup, see the MFA guides:

https://www.uni-siegen.de/mfa-anleitungen/

Services connected via Single Sign-On (SSO) will be primarily affected.
The following is a list of examples of relevant services:

  • Cisco Webex,
  • Citrix Workspace,
  • eduVPN,
  • Login to the University of Siegen website,
  • Microsoft Office 365,
  • Moodle (expected to start in September),
  • Outlook Web Access (OWA), also known as Webmail,
  • SharePoint,
  • University Library services,
  • Zoom X

Yes, all employees, students and external users must activate MFA for their account sooner or later. This is the only way to ensure effective protection for all members of the university. The targeted times can be found further up on this page in the blue box. Starting from November 1st, 2026, MFA will also become technically mandatory for employees outside the central administration as well as for students, meaning that logging in without two-factor authentication will no longer be possible.

With the introduction of multi-factor authentication (MFA), the login process for various systems and services (see above) at the university will change. Instead of just entering a password, you will also have to provide a second authentication factor.

The introduction of MFA at the University of Siegen is based on the legal regulations from the agreement on cyber security of the Ministry of Culture and Science (MKW). This agreement requires universities in NRW to implement appropriate security measures to protect the integrity and confidentiality of data.

A token is a type of digital key. It is used to log in securely to a system or an app. A token can be a small device, a smartphone app or a special code, for example. One common type of token is a one-time numeric code that is only valid for a short period of time. In addition to the password, these codes are used to confirm that you are really authorized to log in.

You can think of it like the door of a safe. The safe has a combination lock and a key. For the combination lock, you need to know the corresponding combination, such as a password. The token, i.e. the second factor, is a physical key in this case, i.e. something you must have. You can only open the safe door if you have both.

This is also how it works digitally: you log in as usual with your username and password and confirm the login with a YubiKey or a TOTP authenticator app installed on your mobile device. This makes your access much more secure.

Multi-factor authentication (MFA) is a security procedure that makes access to an account or system more secure.
In addition to the password, at least one other factor, known as a token, is required. This factor can be, for example, a unique code from an app or text message, a fingerprint or a special USB stick.

The combination of several factors prevents unauthorized persons from gaining access to an account or system with the password alone.

Would you like to learn more about MFA? Here you'll find an interactive, web-based demo designed to educate users. It was developed by Abdullah Abbas, a graduate of the University of Siegen.

View the complete FAQ
© Universität Siegen
Frau mit Headset im Support

ZIMT Support Desk

The central point of contact for accessing ZIMT's services.

Email ZIMT Support Phone: +49 271 740-4777