Login & Multi-Factor Authentication (MFA) Guide
IntroductionUnderstand what MFA is and why ADELE uses it.
What is MFA?
MFA is a security system that uses more than one factor to confirm your identity when accessing ADELE. The first factor is your password. The second factor is dependent on the type of account you have. Defence users login with their DCAC; users who were sent a username/password by email for ADELE use a time-based one-time code generated by you with an 'authenticator app' on your phone as the second factor, or alternatively a hardware security key that you tap or insert when prompted. This way, even if someone knows your password they cannot access ADELE without control of your second factor.
Why is MFA required?
MFA helps to protect ADELE accounts from misuse by bad actors who might try to login to your account. Defence recommends its use as a risk control as identified in the Information Security Manual, and this control has been implemented for ADELE. Using MFA is one of the most effective ways you can protect both your account and the ADELE environment.
Why are there two MFA processes?
Sponsored users or those that self-register for an account in ADELE are required to set up MFA using the ADELE MFA plugin. The system will prompt you for action after the first login and will guide you to setup MFA for your account using a personal device. You will have a grace period after your account is created where you can access your learning for a short time before you are required to set it up to continue.
Users of ADELE logging in with their Defence Identity (@defence.gov.au) will already have MFA set up for their account by default to use their DCAC. You can then optionally set up an alternative MFA method if unable to use a card reader by accessing your Microsoft 365 security settings in the DPN.
Exemption from MFA
MFA is required of all user types if logging into ADELE from outside of the DPN.
Every account must have MFA set up to protect against unauthorised access; in rare cases it may be necessary to seek exemption from setup due to specific working conditions. You must provide EL2/O6 approval for exemption from your relevant chain of command or from your Defence sponsor, with justification and acceptance of the risk to Defence assets and to the users' personal information. A duration of no longer than 6-12 months can be accepted for an exemption of this nature. Note that anyone with a role higher than a teacher is considered to have a privileged role and cannot be exempted from MFA requirements.
Before you startCheck your account type and MFA method before setup.
A quick check before signing in or setting up MFA.
Confirm account type
Use Defence Identity pathway on the left if you have an @defence.gov.au email.
Only use the Provided Credentials pathway on the right if your account is sponsored or you're logging in with your @adfcareers.gov.au email.
Users with urgent login problems due to Defence Identity login issues may sometimes be provided with credentials and directed to use the alternate login pathway.
Internet or DPN?
Defence users in the DPN can login without username, password, or DCAC.
Users outside of the DPN must have their MFA ready during authentication to ADELE to access the system.
Have MFA Ready
Defence Identity accounts need their DCAC or MS Authenticator to access ADELE outside the DPN. Make sure to leave your DCAC connected to the card reader until logged in.
Provided Credential accounts can login with a one-time-code using the authenticator app of their choosing, or by using a compatible hardware security key.
Login guideChoose the login pathway matches your account type.
Choose the pathway that matches your account type. This section includes the full visual login guidance for users who sign in with a Defence Identity and users who sign in with ADELE credentials.
Login with Defence Identity
Use this option if you have a DPN account and can authenticate with that Defence Identity.
- Select Sign in with @defence.gov.au.
- Enter your DPN email address if prompted, or select your email from the available list.
- Select use certificate if logging in with your DCAC, or enter your DPN password if logging in with MS Authenticator.
- Use your DCAC, PIN or Microsoft Authenticator prompt when requested, making sure to leave the DCAC connected.
- Accept the required Defence ICT and ADELE policies to finish logging in.
Login with Provided Credentials
Only use this pathway if you were emailed a username and password specific to ADELE.
- Select Sign in with provided credentials.
- Enter your provided ADELE username and password.
- When prompted use your authenticator app or security key to complete the MFA verification step.
Step-by-step: Login with a Defence Identity
The buttons below may help you to setup MS Authenticator as a second factor (for if you are unable to access a card reader), and to troubleshoot minor login issues you may encounter using the Defence Identity login portal, which is a part of VERA M365 rather than ADELE.
Image tip: Screenshots are shown as small previews. Select any screenshot to view a larger version.
Select the left Defence Identity option
Click the Sign in with @defence.gov.au option to begin.
Place your DCAC on the card reader
Place your DCAC in or on your smart card reader. Leave it there until login is completed.
Choose certificate or smart card
Enter your DPN email address if prompted, or select your email from the available list. Select Use a certificate or smart card.
Authenticate with your DCAC
If prompted, select your certificate and press OK, then select your card reader device from the presented list or choose More Choices to see more devices. Enter your DCAC PIN to continue.
Accept required policies
Read and accept the system policies for Defence ICT and for ADELE in order to log in.
Step-by-step: Login with Provided Credentials
Select the option for sponsored and self-registered accounts to login.
Click the Sign in with provided credentials option to begin.
Enter your ADELE credentials
Enter your username and password in the next screen.
You will receive a password when you first register for ADELE.
If you have forgotten your password, select Forgotten your username or password? to issue a password reset.
Complete MFA
Authenticate with your Multi-Factor Authentication (MFA).
If you have not previously set up MFA, you will be prompted to do so after logging in.
For further assistance on setting up MFA, see the MFA Guide or continue to the setup guide on this page.
Common login issuesTroubleshoot common login issues affecting Defence Identity and Provided Credentials account types.
Common issues affecting users logging in with their Defence Identity
I don't have a DCAC or DPN account yet
If you need to access ADELE before your DPN access or DCAC are available, please have the course coordinator arrange for a sponsored account until they are ready. Make sure to let ADELE Support know when you receive them so your account can be returned to a 'Defence' account, affording you additional powers and single sign-on for the system compared to sponsored training partners.
I get a certificate validation error
- Make sure you have activated the ICT functionality of your DCAC.
- Make sure your card is seated correctly in or on your card reader. If necessary, re-seat it and try the login process again.
- Make sure you are using the correct PIN when signing in.
- Try a different browser or device to log in. If this works, it may be a browser setting or compatibility issue with your card reader.
- For issues with your DCAC itself, contact Defence Digital Group (DDG) ICT Services.
I see a login error that I'm not authorised to access Moodle
- Your account may have been converted and you may have received Provided Credentials. You can log in immediately with them by choosing Sign in with provided credentials if you know your password. It may be different to your DPN password. You will also need your MFA device ready which may be different to the Microsoft Authenticator/DCAC MFA device used with a normal Defence Identity account.
- Contact ADELE Support later to have your account converted back to allow you to login with the Defence Identity login pathway.
I don't have access to a smartcard reader
- You may be able to collect a card reader from one of these locations. If you cannot see the list, call the ICT Service Desk for your nearest collection point.
- In the meantime, if you have DPN access, you can set up a temporary workaround with Microsoft Authenticator.
I can't reset my password
- Only accounts with Provided Credentials can reset their password in ADELE directly. Defence Identities are linked to the DPN and updates to your password here must happen outside of ADELE via ICT Phone Support. Lastly, if you have not received the email yet please allow 15 minutes before trying again.
- If you still do not receive the email, your account could be suspended for inactivity. In that case you will need to contact your Defence sponsor to request re-sponsorship if your sponsorship expired, or contact ADELE Support directly if this does not apply.
- Defence Identity passwords must be updated using the Password Reset Self-Service Tool or by calling ICT Services for the DPN.
It times out when I choose Login with Defence Identity
- There may be a Defence-wide outage of the login service that is preventing your login.
- If you are accessing from overseas on a personal device, or from a virtual private network, your connection could be blocked by Defence.
Common issues affecting users logging in with Provided Credentials
Users logging in with provided credentials may be unable to login due to account suspension, which occurs when sponsorship ends or 45 days of inactivity elapse for the user. Additionally, we've outlined key information on MFA issues you might encounter.
How suspension affects access
Existing accounts may be suspended after a period of inactivity, and this affects your access and your emails from ADELE.
- Defence Identity account suspensions are linked with your access to the Defence Protected Network (DPN).
- Sponsored and self-registered accounts are suspended after 45 days of inactivity. These accounts also can have an expiry date upon which they are automatically suspended if the access was sponsored.
Invalid code
Issue: The code is rejected during sign-in.
Solution: The code may have expired. Wait for the next code to generate, then try again.
Time synchronisation
Issue: Codes consistently fail during sign-in.
Solution: In your phone's Date and time settings, ensure the date, time and time zone update automatically.
Duplicate MFA entries
Issue: Multiple ADELE codes appear in your authenticator app.
Solution: Remove old or duplicate ADELE entries before retrying.
QR code not scanning
Issue: Your camera cannot scan the QR code.
Solution: Select the manual setup key option in your authenticator app instead.
Lost or stolen device
Action required: Contact Support immediately to reset your MFA and secure your account.
Session length
When logging in codes expire about every 30 seconds. If one fails, wait for the next code and try again.
Guides to set up MFA@defence.gov.au users can setup Microsoft Authenticator if unable to use a card reader, setup requires a DPN terminal.
Defence Identities: How to setup Microsoft Authenticator (optional)
Use this guide if you have DPN access and need to set up Microsoft Authenticator, such as when you do not have access to a smartcard reader or need an additional sign-in method for use outside the DPN.
Image tip: Select any screenshot to view a larger version.
Log in to the DPN
Login to the DPN using a terminal, a DPL or using DREAMS.
Open a supported browser
Open Chrome or Edge Web browser.
Place your DCAC on the reader
Place your DCAC on top of your card reader and leave it there.
Open Microsoft security info
Navigate to https://mysignins.microsoft.com/security-info.
Select or sign in to your account
Select your account name, or login using your DPN username and password if required.
Authenticate with your certificate
You will be asked to select your certificate from the list and then provide your DCAC PIN to authenticate and proceed with changing your Security Info.
Add a sign-in method
Click on Add sign-in method.
Choose Microsoft Authenticator
Click on Microsoft Authenticator.
Follow the setup prompts
Follow the steps shown to set up your new Multi-Factor Authentication method.
Remove your DCAC
Remove your DCAC from the card reader.
Use the new method outside the DPN
This will enable you to login to ADELE using the Microsoft Authenticator app or your DCAC to login from outside the DPN.
Provided Credentials: How to setup mandatory MFA on your ADELE account
Setting up MFA takes just 2–3 minutes, and is a required step for users logging in with a Provided Credential type account. This step does not need to be taken by users connecting to ADELE with the Defence Identity login pathway. You can follow these steps to setup MFA in ADELE:
Image tip: Screenshots are shown as small previews. Select any screenshot to view a larger version. The screenshots are optional; all key instructions are provided as text.
Access ADELE
On your first sign-in, you can access ADELE with a 28-day grace period. On the home page, you will see a banner showing Please set up MFA. Select Setup MFA now.
If the banner does not display
For ADELE (O:S): open MFA preferences.
For ADELE Open: open MFA preferences.
Choose your MFA method
Choose one of the two available options: Authenticator App or Security Key. Use your selected option as your verification method when signing in to ADELE.
If you select Authenticator App, go to step 3a. If you select Security Key, go to step 3b.
Set authenticator app
Open your Authenticator App, tap the plus icon, and select Scan QR Code. Enter a device name, scan the QR code, and then enter the verification code to complete setup.
If you cannot scan the QR code, select Enter Code Manually within your authenticator app. Then, under the QR code on the ADELE setup page, select Or enter details manually.
Already set up Authenticator App?
On your next sign-in, open your Authenticator App and enter the six-digit verification code when prompted.
Set security key
Insert your Security Key into a USB port or connect it wirelessly if supported. Enter a name for your security key, proceed with the registration and tap your key when prompted to complete registration.
Already set up Security Key?
On your next sign-in, insert or tap your Security Key when prompted to verify your identity.
Complete setup
Once your Authenticator App or Security Key is successfully added, select Finish to complete the setup. You are now ready to sign in securely to ADELE using your chosen MFA method.
- Inside the ADELE authenticator app setup page, select Or enter details manually located below the QR code.
- Open your authenticator app, such as Google Authenticator, and select Enter a setup key.
- Copy the Account and Enter a setup key detail from ADELE, ensuring the key type is set to Time-Based.
- Select Add to save the account.
- Your authenticator app will then display a six-digit verification code.
Security best practicesKeep your MFA method and device secure.
- Lock your phone and authenticator app.
- Update your operating system and apps regularly.
- Prefer known Wi-Fi or use a VPN on untrusted networks.
- Avoid unknown charging cables or ports, or use a USB data blocker.
- Report your lost or stolen device to ADELE Support and to your supervisor immediately.
Best practice when changing MFA device (for Provided Credential accounts)
- Keep your old phone or security key connected to your account while you setup the new device, if possible.
- Install or open your choice of authenticator app on your new device.
- In ADELE, select your initials > Preferences > Multi-factor authentication preferences > Manage > Replace.
- Scan the new QR code with your phone or use the inbuilt scan option from your authenticator.
- Confirm the code shown from the app on the new device (if applicable).
- Once connected successfully you can then remove the old device entry from the old phone and from your ADELE MFA preferences.
SupportContact ADELE Support if the guide does not resolve your login or MFA issue.
Account or password issues
Password resets for Defence Identities must be done with Defence ICT or the Self-Service Tool. Users with provided credentials can manually reset their password using ADELE.
If you cannot reset your password using ADELE your account may be suspended or the reset email may not be reaching your inbox. Please allow at least 15 minutes for the email to arrive before retrying.
Sponsored accounts should contact their Defence sponsor if their sponsored access time has expired but access is still required.
Need further assistance?
If this guide does not resolve your login or MFA issue, please contact ADELE Support for further assistance.
When contacting support, include your name, username or email address, the login option you selected, the error message you received, and whether you are using a Defence Identity or ADELE account.
What to include in your request
- Your full name.
- Your ADELE username or email address.
- Whether you are using a Defence Identity or an ADELE account.
- The login option you selected.
- Any error message shown on screen.
- Whether you are using DCAC, Microsoft Authenticator, an authenticator app, or a security key.
- Whether you are accessing ADELE from the DPN, DREAMS, a personal device, overseas, or through a VPN.
Lost access to MFA?
If you no longer have access to your authenticator app, phone, security key, or MFA method, contact ADELE Support and ask for an MFA reset.
Support may need to verify your identity before resetting your MFA method.