How do I obtain a physical token (FOB) for MFA?

Overview

If you do not own a smartphone, or plan to be in a part of the world where you will not have Internet access and are therefore unable to use Microsoft Authenticator, a physical token may be utilized.

Instructions

First, you will need to obtain, or have your Business Office obtain, an approved hardware token (FOB). 
 
Currently, Purdue supports the Feitian c200 hardware tokens, with the 30-second option.  Select “Microsoft Entra ID (Azure AD) for your Authentication Server. NFC is not used and is therefore not needed for use at Purdue.

The two compatible options include: 

Part # - C200-I34-6D-30S  

Description – OTP C200 OATH TOTP  6 Digit 30 Seconds 2FA Token compatible with Microsoft Entra ID 

This can be purchased directly from Feitian Technologies:  https://feitian-us-online-store.myshopify.com/products/feitian-otp-c200-oath-time-based-totp-2fa-token-6-digit-i34 

Part # - C200-H27-6D-30S 

Description – OTP C200 OATH TOTP  6 Digit 30 Seconds 2FA Token compatible with Microsoft Entra ID 

This can be purchased directly from Feitian Technologies:  https://feitian-us-online-store.myshopify.com/products/feitian-otp-c200-oath-time-based-totp-2fa-token-6-digit-h27?_pos=1&_sid=7d653c737&_ss=r 

When purchasing, be sure to specify the 30 second option in the Token Specification drop-down. 

Image of Entra ID Authentication Server option selected 

Image of 30 second dropdown detail on the Feitian purchase page

Steps to enroll your hardware token with your Purdue Microsoft account: 

1. Purchase the token. 

• Required information: 

1. Token Specification: Select the 30 second option. 

2. Email address: Provide your email address to receive required documentation for enrollment.  

2. After the purchase, the purchaser will receive an email with seed and password information, that includes a PDF attachment; Keep this in a safe place. 

3. Press the Purdue IT Request button to create a ticket.  

• Include in this ticket the reason you require a hardware token. 

• You do not need to include the email information / seed file, but please have this available at request from IT; It will be needed to configure the token. 

4. After the token is configured, a short phone call or Teams meeting will be required to activate this device. IT will just need the current code displayed to activate. 

For questions about the tokens specifically or further assistance, you can reach out directly to Feitian Technologies. 

Contact information: 

Rep. Ben Brieger 

Feitian Technologies 

Ben.brieger@ftsafe.us 

650-796-4919 

Still need help?  Click the 'Purdue IT Request' button to start a ticket.