Strong authentication

Just downloading the Freja app is not enough. You will first need to set up basic details and verify your identity for Freja+. You can then configure your service credentials in the Passport account management portal and then use Freja+ for IT services at the University. 

Follow the guide at support.lu.se.

You are to use Freja+. You will receive this automatically if you identify yourself with a Swedish passport or (Swedish) national ID. If you identify yourself using a driving licence or the Swedish Tax Agency's ID card at one of Freja's agents, you will also automatically receive Freja+. You cannot set up Freja as an employee eID at the University if you have not completed the necessary steps all the way to Freja+. 

Here you can find more information on the types of ID that are valid for Freja+. 

You can get help from Freja's support.

Freja's support

Before contacting support, you can check if your questions are answered here.

No, once you have Freja+ in the mobile app (the virtual ID card has white spots against the blue background), it is time to configure the employee eID in the Passport account management portal. Any problems that arise there cannot be solved by Freja's support. You will need to contact LU Service Desk. 

servicedesk [at] lu [dot] se (servicedesk[at]lu[dot]se)

The roll-out of strong authentication will be phased in from mid-March 2025. Therefore, not everyone at Lund University will encounter an IT system that has strong authentication immediately; it may be some time before you do. The deadline is whenever the system you need to use starts requiring strong authentication. 

So, to avoid stress, it might be a good idea to get started now. Follow the instructions above to get started! 

You can use Freja+ on multiple devices, such as two mobile phones. 

Here you can find information on how to get Freja+ on multiple devices.

Freja has supported the configuration of eIDs for those from a large number of countries for the past year or so. This will soon be supported in the Passport account management portal.  

Currently, users who do not have both a Swedish personal identity number (including coordination number) and identity documents linked to it are required to configure an authentication app if they are required to authenticate themselves by an IT service that requires strong authentication.  

A timetable is being drawn up for establishing support in Passport for international Freja+. A factor we are taking into account is that as few users as possible are to need to configure an authentication app in order to then be able to configure international Freja.

You will find information on what to do here. 

Transfer Freja to a New Device (link to frejaeid.com)

If you have a private mobile phone, it is possible to use that by downloading the Freja app on that phone.  

The requirements refer to the version of your phone’s operating system. 

• For Android phones, version 8.0 or later is required.
• For iPhones, iOS 13.0 or later is required. 

It is possible to use Huawei mobiles. For Huawei, there is no information available on operating system version requirements.  

It is also recommended to have a mobile phone with an NFC reader. NFC is only needed if you have a biometric Swedish passport or national ID.  

Freja+ works if you have an iPhone with operating system iOS 13.0 or later. 

Which phones does that include? The following iPhones from the iPhone 7 series onwards support iOS 13.0 or later: 

• iPhone 7-serien (including 7 och7 Plus)
• iPhone 8-serien (including  8 and 8 Plus)
• iPhone X
• iPhone XR
• iPhone XS-serien (including XS and XS Max)
• iPhone 11-serien (including, 11 Pro and 11 Pro Max)
• iPhone SE (second generation)
• iPhone 12-serien (including 12 Mini, 12, 12 Pro and 12 Pro Max)
• iPhone 13-serien (including 13 Mini, 13, 13 Pro and 13 Pro Max)
• iPhone 14-serien (including 14, 14 Plus, 14 Pro and 14 Pro Max)
• iPhone SE (second generation)
• iPhone 15-serien (including 15, 15 Plus, 15 Pro and 15 Pro Max)
• iPhone 16-serien (including 16, 16 Plus, 16 Pro, 16 Pro Max and 16e) 

For those who cannot imagine using a private mobile phone for strong authentication, we have developed options for affordable work mobile phones. These are phones that are cheap, yet modern enough to allow you to log in with strong authentication. It is up to your manager to decide whether you should have a work mobile phone and which subscription is appropriate. 

You can find the options under the heading "Are there any suggestions about affordable mobile phones" here in the FAQs. 

If you have access to Wi-Fi, no mobile phone subscription is needed. For more details, see the question: ‘Do I need a mobile phone subscription?’.
 

Of course, you can use an iPad or other tablet with internet access (WiFi or mobile data). 

See the tablet as a complement. Few tablets have NFC readers, so if you will only be using the tablet for strong authentication, you will need to activate Freja+ at an agent (with WiFi). You can also use a mobile phone (on which you have already activated Freja+ and the employee eID) and then move over to the tablet.  

Strong authentication for the various common IT services at Lund University is switched on as follows:

1. In the first phase, starting no earlier than 2 April, a small number of IT services will be provided with strong authentication. Strong authentication is not switched on for all systems at once, but one by one.
   These IT services will be selected based on having a relatively small user base and a clear need for IT and information security improvements.
   
   The first service to require strong authentication is Adato (2 April).
    
2. In the second phase, strong authentication will be switched on for some IT services with many users. This will take place from mid-May. By now, most people need to have started using strong authentication.   
    
3. The third phase is planned for early autumn, and then all other university-wide IT services will have strong authentication. There may be exceptions, and they will come later. 

The project initiated in connection with the Vice-Chancellor's decision has been tasked with producing a timetable for when the various specific services will receive strong authentication, and this work is ongoing.  

Using strong authentication is part of Lund University's efforts to strengthen its defences against external attacks on its IT systems. Together, we are building procedures and habits for increased resilience. 

Lund University works actively on information security. In order to carry out your work and duties as an employee, researcher or student, you both produce, and have access to, large amounts of information and data necessary for your particular role. It needs to be correct and accessible whenever you need it. If the University's information security fails, major problems can arise.

Lund University complies with the Swedish Civil Contingencies Agency's regulations on Security measures in information systems for government agencies, 2020:7. (link to msb.se, text in Swedish)

Chapter 4, paragraph 5 states: 

Multifactor authentication is to be used for  

1. access by in-house and hired personnel to the production environment via an external network,  
2. system administrator access to information systems, and  
3. access to information systems processing information deemed to require enhanced protection.

There was also an inquiry, “PM tjänstemobiltelefoner”, which examined the issue of mobile phones and multifactor authentication. 

On 16 January 2025, a decision was taken by the Vice-Chancellor of Lund University on strong authentication in all university-wide digital systems and to start a project for its implementation (STYR 2024/3215). 

Find out more about security and privacy in the public sector (link to digg.se, text in Swedish). 
 

No, there is no reason not to use it. Lund University cannot access your personal data through Freja+, you are the one who controls it. It is like using online banking or BankID. 

Freja is available both for private use and as a service ID. When you have connected Freja+ to Lund University through Passport (see Getting started at the top of this page), you will have two ID cards in the Freja app: a private ID and a work (service) ID. It is the service ID that you use for strong authentication at Lund University.

The most secure and easiest way to do this is to use Freja+. You can use an authentication app, although it is a bit more complicated.  

Authentication apps have been used as strong authentication for small user groups for almost ten years at the University. Support for Freja+ has been available for almost five years.  
Like mobile BankID, Freja+ is based on a more secure technology.  

Big tech will soon be phasing out authentication apps in favour of eIDs and another emerging technology (known as Passkeys). The main reason is that IT companies want to act before authentication apps become a security risk rather than a security measure.   

As new technologies are introduced, there will be more options available to us to make strong authentication as user-friendly as possible. For the foreseeable future, eIDs will fulfil the important security function of securely identifying users.  

Usernames and passwords in various forms have dominated this area for around 50 years, but the ever-increasing security threats in recent years have meant that there will eventually be a major change in this area, too. 
 

You can create a Google account or Apple ID with your work email address and use it to download and set up an authenticator app via Google Play or the App Store.

For Google Authenticator, you can only use a Google account, but it is possible to use your work email address. If you leave Lund University and want to continue with Freja, you can change your email address on ‘My pages’ on the Freja website.

Mina sidor - My pages (link to Frejaeid.com)

No, you cannot.  One of the advantages of Freja e-ID is that it allows for service identification.

Freja eID is an alternative to BankID and a government-approved e-identification. This is the chosen solution. 

Here are some suggestions for procured mobile phones that meet all requirements and have a relatively low price tag. 

• Android: Samsung Galaxy A16 5G
• Iphone: Iphone 15 

Information about each phone on the manufacturers' websites: 

Samsung Galaxy (link to samsung.com)

Iphone 15 (link to apple.com)

In order to make purchases, you must be authorised to log in to Lupin/Proceedo. If you are not currently authorised, contact the Service Desk via, servicedesk [at] lu [dot] se. 

Here's how to make a purchase in Lupin: 

Samsung phone 

1. Log in to Lupin/Proceedo
2. Select the Purchase tab.
3. Enter “Tele2” in the search box and select Tele2 Sverige Webbutik.
4. Click on Open webshop.
5. Enter “A16” in the search box (top right of the page) and select SAMSUNG GALAXY A16 5G 128GB BLACK CO
6. Click on Buy and then click on the shopping basket at the top of the page. Then follow the instructions to check out.

iPhone 

1. Log in to Lupin/Proceedo   
2. Select the Purchase tab.
3. Type “iPhone 15” in the search box and select the iPhone 15 variant you prefer.
4. Click on Buy and then click on the shopping basket at the top of the page. Then follow the instructions to check out. 

If you have access to Wi-Fi, no subscription is needed. For more details, see the question: ‘Do I need a mobile phone subscription?’.

There is no decision to provide all staff with a work mobile phone. The cost of the mobile phone and subscription is to be borne by the department. Please note that it is also possible to use your private mobile phone to use strong authentication.  

For those who cannot agree to using their private mobile phone for this purpose, mobile phone options have been found. These are phones that are cheap, yet modern enough to allow you to log in with strong authentication.

It is up to your manager to decide whether you should have a work mobile phone and which subscription is appropriate. 
 

If you have access to Wi-Fi, you do not need a mobile phone subscription to use strong authentication.

If you need to be connected even where there is no Wi-Fi, you need a subscription. Lund University offers one type of subscription: mobile extension (MEX) with at least three GB surf, from 244 SEK per month.

This is included:

• Extension number and mobile number
• 3, 10, 20, 50, 100 GB or unlimited surfing
• SMS and MMS within Sweden
• Calls to voicemail

Read more about subscription details here. (Link to the IT web, log in with your LU account, text yet only in Swedish.)

If you have Freja+ on several devices, you can use any of them. You may have access to a spare mobile phone where you can restore your Freja account.  

Otherwise, you will need to purchase or order a new mobile phone. You will also need a national ID or passport available that can be scanned with NFC (‘blippas’). If you have a driving licence or Swedish Tax Agency ID instead, you must go to an ATG agent to have your identity verified for Freja+.

How long it takes for your account to be verified for Freja+ again

• If you scan your national ID or a Swedish passport, it takes about ten minutes for your account to be reactivated with Freja+.
• If you instead identify yourself via ATG agents, it will take three hours before your account is reactivated with Freja+.

Strategies

It can be helpful to have a strategy in place in your institution or department if a mobile phone can no longer be used. Start from the needs of each individual. How soon do you need to be able to use Freja+ again? How urgent is it?  

List where the need to be able to identify goes from now to later:

• Freja+ on several devices
• Reserve unit with national ID or scannable passport
• Reserve unit with identification via ATG agent
• Buy a new device in town
• Order new device via supplier in Lupin (takes two to four days)

If it takes too long between trying to log in and identifying yourself through the Freja app, you can sometimes get a time out message. 

To avoid this, have your mobile phone (or tablet) with the app on ready before you start logging in. That way you will be sure to have time. 

Freja+ works anywhere you have internet access via Wi-Fi or mobile data. This means that it works even when travelling for work and abroad. 

It depends on the IT service you are working in, but generally speaking, a login is usually “timed out” after an hour if you have not actively used the IT service. This has nothing to do with Freja+, but is a feature of the IT service itself. 

The service credentials will disappear automatically when your LU account is closed in connection with the end of your employment.

The Freja app itself will remain, but it will not contain any service credentials for Lund University.

If you used your Lund University e-mail address when you set up your Freja account, you may want to change it to your private e-mail address. You do this on My pages on the Freja website.

Mina sidor – My pages (link to Frejaeid.com)

These are IT systems used throughout the University. Since Lund University is a decentralised organisation where, for example, a system can be used across some but not all faculties, it is difficult to draw a clear boundary.