Help with choosing secondary factors

Tipđź’ˇ Help selection table: the methods offered at a glanceâš“

Method

Required elements

Setup

Daily use

TOTP code

An application generating one‑time codes:

e.g. KeepassXC on PC or EsupAuth on mobile.

Do not use a browser extension (exception for the KeepassXC one).

  • Install* and configure the application by entering the secret obtained on CAS-MFA. For example:

    • KeepassXC: code to copy/paste

    • or EsupAuth: QR code to scan.

* KeepassXC and its Firefox extension are pre‑installed on computers managed by DNum.

6‑digit code, provided by its application:

  • to type (EsupAuth),

  • to copy/paste

  • or which is automatically pre‑filled ✨ (KeepassXC and its Firefox extension).

Code sent by email

Using a personal email address.

Register and confirm your personal email address on CAS-MFA.

6‑digit code, received by email, to copy/paste.

Code grid

A way to digitally secure the grid, e.g., using KeepassXC, or a way to print it. If printed, keep it in a safe place.

Save or print the grid. KeepassXC is pre‑installed on computers managed by DNum.

6‑digit code to look up in the grid and enter.

Push notification (on Esup Auth)

A mobile with the Esup Auth application installed.

Pair your mobile by scanning a QR code on CAS-MFA.

Notification received in the Esup Auth app to be approved using the mobile.

WebAuthn physical factor

A hardware security device, e.g., a USB security key or a mobile; a compatible browser.

Be self‑sufficient in setup and use: DNum does not provide specific support.

Pair your security device on CAS-MFA.

Depending on the device, e.g., touch a key or unlock a smartphone.