Overview: This aid explains Multi-Factor Authentication (MFA) and provides steps for setting up your preferred authentication methods.
|
WHAT IS MULTI-FACTOR AUTHENTICATION?
|
Multi-factor authentication (MFA) is a security feature that requires more than one method of authentication to verify a user’s identity to grant access to a secured system. It works by requiring a combination of something you know (a password) and something you have (verification from a trusted device that is not easily duplicated, like a phone). This layered approach to security provides added protection against potential cyber-attacks.
UMassGlobal will be requiring the use of MFA to access university resources. This means, that when logging into university resources such as Regent or Banner Self-Service, in addition to your password, you will be prompted to authenticate access every 7 days to continue. There are 3 common ways to authenticate using a trusted device.
- Phone Call: An automated call to your desk phone or mobile phone requiring that you press a key to verify sign-in.
- Text Message: An automated text to your mobile phone containing a 6-digit code.
- Authenticator Application: The Microsoft Authenticator app is available on iOS and Android devices and works by generating a new 6-digit code every 30 seconds or by pushing an alert to your phone for approval, depending on how you set your preference.
UMassGlobal requires that you set at least two methods to verify your identity. This is to ensure that if one is not available, the other could be used as a backup. You can log in to your MFA profile at any time to make changes to your selections.
You will only need to complete this process once until you replace your phone or receive a new phone number.
- Go to http://mfa.umassglobal.edu/ from your computer. The first time you log in, you will receive the prompt on the right to start the MFA onboarding process. Click Next to continue.
- Once logged in, you will be taken to the Security Info section under My Profile. Click +Add sign-in method
- From the drop-down menu, select the option you wish to set up, then click Add
A. Phone: Select this option to have the system call or text you for verification. You will be prompted to enter your phone number, including area code. Then select Text me a Code or Call Me to choose how the system will contact you. Click Next
Based on your selection, you will receive a call or text from the system. Follow the prompts and once completed you will receive a message indicating that your device has been successfully registered. Click Done.
B. Alternate Phone: It is recommended you set up a secondary phone as an alternate method in case your primary authentication phone is not accessible. Select Alternate Phone from the drop-down menu and follow the prompts to enter and confirm your secondary phone. Once confirmed you will receive an alert (pictured above) that your phone has been successfully registered. Click Done.
The method you set up first will be your default method for verification. To add additional methods, return to the Security Info tab, click the +Add method, and repeat the steps to register your backup method of choice.
C. Authenticator App: If you select this option, you will receive the prompt below to download the app on your mobile phone. Visit Google Play from your Android or the App Store from your Apple device and search Microsoft Authenticator.
If you Download and open the app on your mobile device, then click Next on the configuration prompt on your computer (pictured below). Follow the prompts on your computer to complete the configuration. You will need to allow access to your camera from your mobile device when prompted to scan the QR code.
If you already have or prefer another authenticator app such as Google Authenticator, click I want to use a different authenticator app
| HOW TO USE A BACKUP METHOD |
If you are attempting to log into a resource that requires MFA and are prompted to authenticate access, but your primary authentication method is not available or working, follow the steps below to use a backup method you have set up.
- On the screen where you are prompted to enter an authentication code, click Sign in another way
Note: Depending on your selected default method, your prompt may appear different than the image on the right. You may be prompted to Answer Call or Approve Sign In Request instead.
- Select the backup option you wish to use and follow the prompts to complete the verification.
To change your default method, log in to http://mfa.umassglobal.edu/. On the Security Info tab, next to Default sign-in method click Change and select your new primary method. You can also add, edit or remove any MFA methods from the Security Info tab.