[Translate to Englisch:] MFA Anmeldung und Wechseln der Methode
If you have set up multiple multi-factor authentication (MFA) methods, you can choose between the available methods each time you log in.
Note: The security key and passkey methods are always displayed in pairs, even if only one of them is set up. The method that is not activated cannot therefore be used.
We basically distinguish between two groups of login methods:
Passwordless methods:
- Security key (e.g., YubiKey) with PIN entry.
- Windows Hello for Business (PIN, fingerprint, face).
- Passkey on smartphone with Microsoft Authenticator app.
Methods with password entry:
- Password + confirmation via the Microsoft Authenticator app (push notification).
- Password + one-time code via any authenticator app.
- Password + one-time code via SMS or phone call.
Procedure: Switching between methods
If you log in to university services and use the Authenticator app as your second factor by default, you can switch to a different method when logging in as follows:

On the login page, click on the option “Use your face, fingerprint, PIN, or security key instead.”

If you have set up Windows Hello for Business on the device you are logging in from, this method will be displayed first. Here you can choose between the methods you have set up (PIN, facial recognition, or fingerprint).
Please note: Windows Hello for Business is device-specific and must be set up separately on each of your ZIM-managed devices.
If you want to use a security key or passkey, for example, select “Use another device.”

Then select one of the following options:
“iPhone, iPad, or Android device”: Log in with a passkey that has been set up on a third-party device, e.g., a passkey on a private smartphone in the Microsoft Authenticator app.
“Security key”: The configured security key (YubiKey) with PIN.
“This Windows device”: Use Windows Hello for Business to sign in with the set-up methods PIN, fingerprint, or facial recognition.
Confirm your desired sign-in method with “Next.”
If you want to go back and use a sign-in method with password entry, click “Cancel.”
If you are offered the option of logging in with a security key (e.g., YubiKey), Windows Hello for Business, or a passkey, but would prefer to log in with a password instead (password + authenticator app/SMS/call), please proceed as follows:


In the dialog box that appears, click “Cancel” and then select the desired method under “Sign in another way.”

You can now choose between the password entry method and the password-free methods “Face ID, fingerprint, PIN, or security key.”
Select “Use my password.”