Multi Factor Authentication

Add an extra layer of security to your KPN Services account

For all your services you use our GRIP authentication solution. By default we require a username and password combination. But of course it is possible to choose two-factor (2FA) or multi-factor (MFA) authentication.

These settings can be changed by an admin user in the MijnKPN portal.

1. Choose for Identity in the menu

2. Select Directories in the submenu

3. Select GRIP

4. Select Authentication in the tabs

You are now in the Authentication menu of your GRIP environment.

The changes you make here will affect authentication for all users. Make sure that all users have their mobile number filled in in the user information before you enable Multi Factor Authentication.

Authentication menu

Standard setting

Scroll down in the Authentication menu for the Authentication Level settings.

1. The Required authentication Level score determines the level you need to reach before you can successfully log in

2. In this example (standard settings) the points for Credentials (username/password) match the points (20) needed to successfully log in without further authentication methods

Standard Authentication Level

Multi Factor setting

Scroll down in the Authentication menu for the Authentication Level settings.

1. The Required authentication Level score must be a higher number then for Credentials (username/password) alone

2. In this example (standard settings) the points for Credentials (username/password) don't match the points (25) needed to successfully log in, and another authentication method is needed

3. Provide points higher than 0 to enable the SMS authentication method, add 5 points to match the required level of 25 in combination with the credentials that provide for 20 points

4. Provide points higher than 0 to enable the Email authentication method, add 5 points to match the required level of 25 in combination with the credentials that provide for 20 points

The settings below are a best practice to correctly setup multi factor authentication. In this case the combination of either SMS or Email together with the point of the credentials create the level of points needed to successfully login.

Multi Factor Authentication Level

It is also possible to add Ubiqu Authentication as an authentication method. This does require to install a mobile app to be able to login with a password numerical code.

Ubiqu Authentication is available in the Google and Apple App store.

Multi Factor login

The login interface for all users has been updated to the view shown below. Users can select their preferred option to log in successfully.

Multi Factor login