The abbreviation OTP stands for “One Time Password”. An OTP is valid only once and changes regularly – every 30 seconds. After this time, it becomes invalid. To log in to TUGRAZonline, you need a second factor (2FA) in addition to your password for security reasons. This second factor can be either ID Austria or an OTP.
To log in to TUGRAZonline using an OTP, you must enter the currently valid password. This password is generated by a so-called “token” that you can set up in an authenticator app (e.g., PrivacyIDEA).
Important: If you lose access to your token, you will also lose access to your TUGRAZonline account.
We recommend that you activate the token on at least two devices to avoid losing access to your account in case your device is lost or damaged.
Install an authenticator app (such as PrivacyIDEA or another) on your smartphone or tablet. Instructions for the activation on a Desktop you can find here. Alternatively, you can use a hardware token.
Log in at online.tugraz.at. Click on the box "Account status". Copy the registration code (6-digit number) displayed there. The registration code can only be used once. Special case: Connect users (accounts for e.g. external persons) will receive the registration code via email.
On a PC, open the page otp.tugraz.at. Use your TUGRAZonline username and the registration code to log in. Click on "Enroll token". Optionally, you can add a description to your token.
Important final step: Open the authenticator app and tap the plus or QR code icon. Scan the QR code displayed on your PC with the app. Then enter the OTP generated by the app below the QR code on your PC. Click "Verify token".
Activating an additional token works exactly as described above. Use your current OTP instead of the registration code to log in to the website otp.tugraz.at. You can activate a maximum of 4 tokens.
Please ensure that the time is either obtained automatically or - if set manually - that only the time zone is adjusted. This is the only way to ensure that the app also works properly abroad in a different time zone.
Did you also carry out the last step, verification, during activation?
If not, then call IT support on DW 7000 and enter the code displayed on your token, then verification can be carried out for you at a later date.If yes (or your token has already worked), then check that the time and time zone on your device is set correctly.
If you do not use VPN, but only need to log in via SSO, then ID Austria, which is integrated into our SSO systems, is sufficient.
However, it makes sense to additionally activate the 2FA solution of TU Graz in case there are availability problems with ID Austria.
It can take up to 1 hour until the systems are synchronized, but on the privacyIDEA-page you can check immediately after activation whether your token is working.
However, if the 2nd factor in the SSO systems is still not queried after 24 hours, please contact the IT-Support.
Quick help:
Phone: +43 316 873 7000
Email: it-support@tugraz.at
Monday – Thursday 08:00 – 16:00
Friday 08:00 – 15:00
! Closed Wednesday 11:00 – 12:00
Personal IT support:
ZID Servicepoint
Stremayrgasse 16/GF
Room number: BMTEG050
Monday – Thursday 08:00 – 16:00
Friday 08:00 – 15:00
! Closed Wednesday 11:00 – 12:00