What is Multi-Factor Authentication?
Multi-Factor Authentication or MFA is a method that requires users to provide two or more verification factors in order to gain access to an account. This provides extra security for accounts that have rights to sensitive and/or confidential data. This practice is very common for highly sensitive accounts, in fact, you may already have MFA set up on your personal banking, shopping, or other confidential accounts.
Why do we need Multi-Factor Authentication (MFA)?
An overwhelming number of security breaches today involve compromised usernames and passwords. MFA strengthens the security of your account by using a secondary device that you keep on your person, like an app on your personal mobile phone or authentication key, to verify your identity. This prevents anyone but you from accessing your account, even if they know your password. Enabling MFA greatly reduces the chances of someone accessing or sending unauthorized messages from your email account and/or accessing documents and other data you have saved.
Who is required to enroll in MFA?
MFA is required for all permanent employees. Students and other users may self-enroll for added security.
What are my authentication options?
You will be able to choose a primary authentication method when you register, which you can change or update at any time. We recommend using an authenticator app on your mobile device. These apps generate a one-time code to be entered upon login as identity verification.
There are a variety of authentication apps available. We recommend:
- Google Authenticator
What if I don't want to use my personal device or do not own a smartphone?
Technology Services offers authentication keys that generate verification codes similar to the Mobile Apps outlined previously. This small, lightweight key is about the size of a USB thumb drive, and has an opening so that it can be affixed to a keychain or lanyard. You will need to carry this key with you at all times to verify your identity for MFA.
What if I don’t have my mobile device or authentication key with me?
If you forget your authentication method at home please contact the technology staff at your site.
Do I have to go through MFA on a Conference Room Computer?
This varies from site to site. School Conference Room Computers may require you to sign into AD. Computers in the Administrative Center Conference Rooms do not require a sign on. Therefore, MFA will only be required if you sign into your AD user account to access your Network Drives or your Google Account for email or Google Workspace Apps.
What about laptops or Chromebooks from carts?
Any previously unauthorized login on a new device will prompt you to use MFA, this includes Laptops and Chromebooks from carts.
I don’t have good cellular service, will that affect my Authenticator App?
No, you can still authenticate using your app without cell service.
0 Comments