Activate Strong Authentication on Smartphone

If you have not received any further instructions and you need to use strong authentication to access EPFL applications, please refer to the instructions below.

  • To use Strong Authentication, the user must have a valid Gaspar account and ask his Gaspar administrator to initiate strong authentication for his account. Then, he must install an application allowing him to generate temporary access codes on a mobile device (smartphone or tablet). Finally, he must test the activation of strong authentication by accessing his Gaspar account with a two-step validation.

Google Authenticator, the solution recommended by EPFL for two-step validation, is available for the following mobile devices: Android, iPhone, iPad and iPod touch.

If the user is not equipped with a mobile device (smartphone or tablet), he or she can obtain an authentication token by completing the form: Request for a token for strong authentication at EPFL.

Request activation of strong authentication

Each Gaspar account holder can request the activation of strong authentication to allow them to access applications requiring two-level validation.

The procedure is as follows:

  • hold a valid Gaspar account,
  • contact its Gaspar administrator,
  • ask him to initiate strong authentication on his Gaspar account,
  • the possible choices for access are:

a. via mobile equipment (smartphone or tablet): the user must install the Google Authentificator application on his smartphone or tablet,

b. via an authentication token (hardware token): the user must complete the form: Request for a token for strong authentication at EPFL. (this option is only available to users who do not have mobile equipment).

(video in french only)

The operation takes place in several successive steps (A to D) on the mobile equipment and in a web browser on your computer.

A. on your mobile equipment (smartphone or tablet):

  • have Android version 2.3.3 or later,
  • via Google Play, search and download the Google Authenticator application, open the application, click on : Start configuration
  • if necessary, go to Settings, then select Time Correction (codes) and synchronize.

B. from a web browser on your computer:

  • enter the link sent by email or by your Gaspar administrator in the browser. This link will direct you to Gaspar,
  • authenticate (username and password),
  • to generate your secret key or security code, click on “Create secret key”
  • the following information is displayed:

C. on mobile equipment:

  • there are two ways to configure the device to generate a secret key:

a. press “Scan a barcode“, then point your camera at the QRCode (square barcode) displayed on the the computer. The entry of the key and the account name is then automatic and the first temporary code is displayed immediately:

b. in the Enter key provided field:

enter the name of the account (your e-mail address at EPFL), then, the secret key displayed below the QRCode image. These are as follows following letters and numbers displayed after “secret=”

and press :

D. from your computer’s web browser:

  • Then activate the smartphone and test the strong authentication by clicking on
  • then authenticate on Gaspar with two-level access: (your Gaspar password and the 6 digits security code displayed on your mobile equipment)
  • finally, click on login :

Activation is successful if you have been able to access your Gaspar account. In case of problems with the installation, please send an email to the Service desk.

(in french only)

Attention: the installation of Google Authenticator is only possible from the iPhone 3GS model.

The operation takes place in several successive steps (A to D) on the mobile equipment and in a web browser on your computer.

A. on your mobile equipment (smartphone or tablet):

1. have iOS version 7.0 or higher,

2. from the App Store, download and install Google Authenticator,

3. open the application,

4. press the Start Configuration button at the bottom of your mobile equipment screenbouton commencer la configuration

start configuration button

5. then choose Read barcode, Bouton Lire le code barre Button Read barcode

B. from a web browser on your computer:

6. enter the link sent by email or by your Gaspar administrator in the browser.

This link will direct you to Gaspar,

7. authenticate (username and password),

8. to generate your secret key or security code, click on “Create secret key”.

9. the following information is displayed:

C. on mobile equipment:

10. there are two ways to configure the device to generate a secret key:

a. press “Read barcode“, then point your camera at the QRCode (square barcode) displayed on the the computer. The entry of the key and the account name is then automatic and the first temporary code is displayed immediately:

lecture QR code

QR code reading

b. in the Account field, enter the e-mail address of your EPFL account, in the Key field, enter the secret key displayed below the QRCode image. These are as follows following letters and numbers displayed after “secret=”

and press “OK”.

D. from your computer’s web browser:

  • Then activate the smartphone and test the strong authentication by clicking on
  • then authenticate on Gaspar with two-level access: (your Gaspar password and the 6 digits security code displayed on your mobile equipment)
  • finally, click on login

Activation is successful if you access your Gaspar account.