LUT ID, signing in and Duo MFA

New!

Do you need a new activation email for Duo Mobile app?

You can order it from LUT Account Service.

Duo MFA

LUT universities use multi factor authentication (Duo MFA) to protect your identity from falling into the wrong hands.

With multi factor authentication, two separate authentication steps are used before a successful login.

You log in with your normal LUT Account and password
You will then be asked to confirm your login via the Duo MFA system

To use Duo MFA, you will need the Duo Mobile mobile app, which you will need to install on your mobile device that you always have with you when you want to log in to LUT services. Always carefully check that the login request comes from you before you accept the Duo Mobile app to log in. Accepting the request will complete the login process.

To log in to the services provided by LAB, you will need either your school email address or the username provided to you and your password.

The login process can be different for different services, depending on the service provider.

In the case of a national service, such as the eduroam network, you need to log in with your school email address and then your password.

Activating your account

You can activate your user ID at https://id.lut.fi, if you have Finnish online banking credentials.

Your user ID will be used as a username when logging into LAB systems (for example the online learning platform Moodle and study system Peppi).

After activating your user ID, a personal LAB email address will be created for you (in the form firstname.lastname@student.lab.fi). The email address can be used as a username when logging in to Office 365 services (such as Outlook, OneDrive and Teams).

If you don't have Finnish online banking credentials, contact student.ithelpdesk@lut.fi.

Multi factor authentication (Duo MFA)

LUT University has introduced strong authentication service for all students during the academic year 2022-2023. The strong authentication service protects your identity from falling into the wrong hands and other unauthorized use. Authentication has been implemented with the Duo MFA service.

The implementation of authentication requires action from each student.

Step 1: Check your phone number

Check that your phone number is correct in the Student Information System.

LUT students check their phone number is up to date in Sisu
LAB students check their phone number on Peppi

Please note:

Input your phone number using the country code (e.g. +358401234567). Enter your phone number using only the digits and the + sign in front of the area code. Do not use any other characters or spaces.

The phone number must be correct in the student information system for Duo MFA to work. Check your phone number is up to date as soon as possible!

For example: if your phone number is 040-123 4567, the correct spelling in Sisu/Peppi is +358401234567.

Step 2: Install Duo Mobile

Install the Duo Mobile app on your phone and/or other mobile device from your device's app store.

On which Android and iOS versions does Duo Mobile work on?

Android versions 11.0 or later (link to the app store)
iOS 15.0 or later (link to app store)

NOTE! From 8.2.2024, Duo Mobile installation will no longer work for iOS version 14 and Android versions 10 (and all older versions). If you have already installed Duo Mobile for these versions, you can still use it for strong authentication.

My phone is too old and I can't install the Duo Mobile app, what do I do?

Try updating your phone's operating system or use a newer phone, or install the Duo Mobile app on another mobile device, such as a tablet computer.
Verified authentication should always be used via the Duo Mobile mobile app. If you are unable to install the mobile app on your mobile device, please contact Student IT Support Services.

Step 3: Activate Duo Mobile

Once you have installed the Duo Mobile mobile app, you still need to activate it. To activate the mobile app, you will receive an email (aka. activation message) from the sender LUT Duo <noreply@lut.fi>, which will be sent to you to both your school email address and your personal email address. If deemed necessary, we will also send reminder messages. Only the link and QR code from the latest activation message will work.

You must activate the Duo Mobile app within three weeks of receiving the first activation message. After that, it will no longer be possible to log in to services such as Moodle, email and other LUT services without a verified login.

See the activation instructions for more details.

Step 4: Use Duo Mobile

What if I can't use the Duo Mobile app or the app isn't working properly?

(Click on the headings below to open the tip lists.)

Would I still be able to use the Duo Mobile app? Check these things:

If you can't install Duo Mobile on your phone, do you have another mobile device (tablet, other phone) where you could install Duo Mobile?
Can you update your phone or another mobile device a newer version of the operating system? Duo Mobile can be installed on Android version 11 or later and iOS version 15 or later.
Is your phone's storage full? Can you delete apps or files that you no longer use/need?
If you need help installing or deploying the Duo Mobile app, contact Student IT Support Services.

I've installed Duo Mobile, but it doesn't work. Check these things:

Close and restart the app. If necessary, turn off your mobile device and turn it on again.
I do not receive a push notification on my mobile device when I try to log in to the LUT Universities' services. Check your mobile device settings to make sure that you have allowed app notifications or open the Duo Mobile app even before you start to log in.
After installing Duo Mobile, have you activated it? To activate, you need an activation message with a link and a QR code, which you have received from sender LUT Duo <noreply@lut.fi>. If you didn't activate Duo Mobile immediately after receiving the first activation message, you've received reminder messages about activation. You can only use the link and QR code in the last activation email you received. If necessary, you can request a new activation message from the LUT Account Service.
If necessary, reinstall Duo Mobile. You can request a new activation message from the LUT Account Service.
My phone/mobile device has changed and Duo Mobile was installed on a device that is no longer in my use. Install and activate Duo Mobile on your new device. Request a new activation message from the LUT Account Service.
I accidentally deleted the Duo Mobile app. Reinstall and activate Duo Mobile. Request a new activation message from the LUT Account Service.
I have updated my phone number to Sisu or Peppi. After that, the Push notification in Duo Mobile will no longer work. If your phone number changes, you'll need to reactivate Duo Mobile. If you can't activate Duo Mobile with your latest activation message, you can request a new activation message from the LUT Account Service. Also, be sure to remove the previous non-working account from your Duo Mobile app.
In other problems with Duo Mobile, you can ask for help and tips from Student IT Support Services.

When is multi-factor authentication required?

When you log in with your own device (phone, tablet, computer) to a service provided by the university, such as e-mail or Moodle.
When using the LUT-VDI remote access portal. Multi-factor authentication is required once when you log in to the portal, after that multi-factor authentication is not required again in that VDI session, for example when you open Moodle through it.

When is multi-factor authentication not required?

When you are on campus and logging in to a computer that is in student use (classes, library)
When using the exam rooms of LUT universities (on Lappeenranta or Lahti campus)
When using the e-exam (Electronic Exam room) service in the exam rooms of other universities
If you have already authenticated with Duo once, Duo MFA is not required again when logging in to another university's service (single sign on).
You can also set your device or a service (like a browser session in Moodle) to trusted for 14 days, and the next Duo MFA will be requested after 14 days.

Two different ways to log in

LUT/LAB

If you are logging in to the services provided by LUT University or LAB University of Applied Sciences (such as Moodle or Office 365), you will log in using the option on the left hand side of the image below.

LUT/LAB

Haka

When logging in to a service that is provided by an organisation in the Haka network, you may see a Haka login option. You can log in to the service by using your LUT account. Select LAB University of Applied Sciences as your organisation.

Haka