govSecureID

govSecureID is an innovative way to enhance security when you authenticate yourself to web applications via the govConext service of Stichting govroam. It is based on open standards for secure authentication developed by the Open Authentication Initiative (http://www.openauthentication.org). govSecureID's unique user friendly features include one-click enrollment using QR codes and secure authentication without having to re-type complicated codes by leveraging dynamic QR codes embedded in web pages or push notifications. It is only available for end users of Dutch public sector organizations that make use of the federative govConext Single Sign On service. Contact your own organization to find out if and how it uses govConext and the govSecureID app. govSecureID is an authenticator app. It elevates security when logging into web applications via the govConext service of Stichting govroam. It supports adding Multi Factor Authentication to multiple accounts. The app is based on the Tiqr app as developed by SURF. GovSecureID is applicable to accounts from Dutch public sector organisations that make use of govConext. Your account resides within your organization. You start by enrolling the govConextID app when prompted if a login to a highly secure web site requires this. This works by scanning (or clicking on) a QR code from the server. After scanning the QR code, the Tiqr app will guide you through setting a PIN and optionally enabling face/touch ID. After you have enrolled, you can use the govSecureID app to authenticate when needed. ****** ** Enroll a new account ** 1. Use a webbrowser to access https://govsecureid.govconext.nl where you must choose the organization and login in with your organizational account via govConext. If your organization is not listed or if you were not requested to create a govID, then govSecureID is not relevant for you. (If you are interested in increasing the security and ease of weblogins for your organization, please contact your IT-department). After loging in, choose 'add token' and choose 'govSecureID' (also known as Tiqr). 2. In the govSecureID app press the scan button and scan the QR code. Internal browser: click on the QR code in the browser, this opens the govSecureID app and starts the enrollment process. Note that (the URLs in) the QR codes are valid for one minute, and that they can be used only once. Use the refresh button to generate a new QR code. The URL encoded in the QR code is shown below the QR code. 3. The app shows the "Confirm" screen. 4. The app shows the "Choose a unique PIN for Tiqr" screen. Enter a four digit PIN and press "OK". 5. The app shows the "Verify the unique PIN" screen. Enter the same PIN again and press "OK" 6. When biometrics are available on your device, you are offered the option to "Upgrade account". Choose "Upgrade" to enable TouchID/FaceID authentication for this account. Press cancel to continue without enabling TouchID/FaceID for this account, you can enable or disable it later from the accounts page if you want. 7. The app shows the "Activated" page. You have now enrolled govSecureID to be ready for use when required by your organization.