Configuring 2-Step Authentication for G Suite
Background Information
Before beginning, we strongly encourage to review Google’s information on 2-Step Verification (also known as 2-factor authentication):
https://www.google.com/intl/en/landing/2step/
This material provides an easy to understand explanation of the benefits, how it works and how it protects you (and the company). It also provides useful links to Google help documentation that should answer most questions and help you work through any issues you might have.
Overview
In order to complete the process of enabling 2-factor authentication for G Suite (formerly known as Google Apps), you will need to choose a method of receiving the “2nd factor” authentication code or pin.
This document describes step-by-step instructions for configuring the different methods of receiving the “2nd factor” authentication code or pin. The options presented below allow you to receive the codes (or pins) via SMS, an app on a mobile device, or via a desktop application on your computer.
Once 2-factor authentication is enabled, you will be prompted every 30 days to log into your Google account with your password and authentication pin.
Choosing a Method
Here are three of the available options that are described in this document that users can use to receive their authentication code or pin:
Google Authenticator App for mobile devices (Android & iPhone)
Desktop Application on Windows.
Text Message via a mobile device (Any cell phone with SMS (Texting) service)
In addition to the methods described in this document, Google also provides other methods which you can choose from. In particular, there is the Google prompt method which is the easiest method if you have a company-issued Android device (but this method is not described in this document at this time). Please refer to Google documentation for methods not documented in this document (https://www.google.com/intl/en/landing/2step/).
e-djuster does not require you to choose any specific method, only that you have 2-factor authentication enabled.
Recommendation
We recommend that users use the Google Prompt or Google Authenticator App methods on their mobile devices, however for those that do not have a company provided mobile device or do not wish to use their personal device there is an alternative option that uses a desktop application that can be installed on your Windows-based computer.
IT Policy Exception for use of Personal Mobile Devices
As an exception to the edjuster IT policy, it is permitted to use your personal mobile device for the purpose of 2-factor authentication. No compensation for SMS fees or data usage is provided if you choose this option as alternative options to using your personal device are available. Choosing to use your personal device does not give edjuster access to any personal information on your device.
Option 1: Get codes via a mobile app (Android or iPhone)
Ensure that you have the Mobile app installed on your device. If not please see link below for step by step instructions for obtaining App.
Then follow the following steps:
Double click the link below.
Select get started
You may be prompted to sign in to your Google Account
Select the country by clicking on the flag and select Canada or US depending on where you reside.
Enter your mobile or home number.
Select which way you wish to receive codes text or phone call and select Next.
Enter the pin you just received.
Select Next
You will now be prompted to turn on 2-step Authentication select Turn on.
Scroll down and select authenticator app
select Set up
Now select the device you will be using Android or iPhone and select Next
Leave this page open and continue to the following step.
Now open the authenticator app on your device select Begin.
Select Scan a barcode.
Return to your web browser and scan the barcode on the screen with the app on your device, this will generate a 6-digit code.
Select Next,enter the 6-digit code on your phone in the web browser window.
Select verify
Select done
You now have 2-Step Authentication setup for your account and can close all windows you opened for this setup.
From now on, every 30-days, or when accessing your account from a different device or location, you will be prompted to sign into your Google Account. as well as provide the 6-digit code generated by the authenticator app. You will use the Google Authenticator app on your mobile device to obtain the code, and enter it as part of the login process.
Option 2: Get codes via desktop application
First, please ensure that you have the desktop application installed on your device as per the instructions in this document:
Then follow the following steps:
Open the WinAuth app on your desktop
Select Add in the bottom right
From the drop down menu select Google
In the Name section type your Google Account (eg. test@e-djuster.ca)
For the Icon select the first icon shown
** Leave the WinAuth application open and proceed to the next step **
Click on the Link below to access the 2 Step Authentication page in your browser
Sign in to your Google Account
Select the country by clicking on the flag and select Canada or US depending on where you reside.
Enter your mobile or home number.
Select which way you wish to receive codes text or phone call and select Try it
Enter the pin you just received.
You will now be prompted to turn on 2-step Authentication select Turn on
Now scroll down to authenticator app and select Set up
Now select one a device for which you wish to receive your pin and select Next
** Note that is does not matter which one you choose as you will not be receiving the PIN on that device **
When the barcode appears select Can’t scan it just below.
You will now be provided with a long code in black bold lettering please copy (Ctrl-C) the code provided and switch back to the desktop application.
Return to the WinAuth desktop application and paste (Ctrl-V) the code provided into the section that reads Enter secret code for authenticator.
Click Verify authenticator. This will generate a 6-digit code.
Return to your browser window, and on the screen that provided you with the long bold code, select Next.
You now will have to enter the 6-digit code that was provided to you by the desktop application when you selected Verify authenticator
It should confirm that everything has gone through correctly. If not, you may need to repeat entering an updated 6-digit code (as they change every 30 seconds). Once it has confirmed the correct setup, select OK and then you can close out your browser tab or window.
In the desktop WinAuth application, select OK
Another box will open uncheck the blue box that reads set password and hit OK at the bottom of your screen.
From now on, every 30-days, or when accessing your account from a different device or location, you will be prompted for the 6-digit code. You will use the WinAuth application on your computer to obtain the code, and enter it as part of the login process.
Option 3: Enable 2-Step Verification via SMS
Ensure that you have the Mobile app installed on your device. If not please see link below for step by step instructions for obtaining App.
Then follow the following steps:
Double click the link below.
Select get started
You may be prompted to sign in to your Google Account
Select the country by clicking on the flag and select Canada or US depending on where you reside.
Enter your mobile or home number.
Select which way you wish to receive codes text or phone call and select Next.
Enter the pin you just received.
Select Next
You will now be prompted to turn on 2-step Authentication select Turn on.
Scroll down to Voice or Text message and select Setup
Enter you Cell phone number
Check Text message
Enter the PIN received on your cell phone
Select Done
From now on, every 30-days, or when accessing your account from a different device or location, you will be prompted to sign into your Google Account. as well as provide the 6-digit code generated by the authenticator app. You will use the Google Authenticator app on your mobile device to obtain the code, and enter it as part of the login process.