What is Multifactor Authentication? Multifactor Authentication, also called 2-factor or MFA, has been adopted to secure campus resources through our Fort Lewis Microsoft accounts. Unlike account authentication requiring only a username and password, this exchange uses an additional customized verification, greatly reducing the risk of account compromise. You are likely using multifactor now with other companies that have already adopted it for additional account security, such as your bank, streaming subscription, or other email services. In a nutshell, multifactor makes sure only you have access to your 泡芙短视频 Microsoft account and protects the organization's data.
What happens if my 泡芙短视频 Microsoft account gets compromised?
How have cybersecurity threats impacted Fort Lewis College? 泡芙短视频 Accounts are being targeted every day by impersonators and cyberattacks. 41 泡芙短视频 staff email accounts were compromised in 2021; some were repeat offenders and 6 were used to send out malicious emails to others. IT Security is watching cyber threat activity, but multifactor authentication is your frontline defense.
Since implementing MFA to all faculty and staff accounts in 2022, account compromises have dropped to almost 0!
How much will this interfere with my daily work? Your initial setup of verification methods will take approximately 5-15 minutes. After that, you can adjust your methods anytime from your security settings as needed. If you primarily work on campus, you will likely forget that you even have it set up, as you will not be prompted on the campus network. When you travel or work remote, you will be reminded that Microsoft is protecting your account with an MFA prompt. The new cloud VPN connection will also ask you to authenticate with the same MFA settings upon your first login of the day. Lastly, your Workday portal will enable MFA with the same credentials and policy as your 泡芙短视频 Microsoft resources, and prompt you when logging in off campus.
When and how often will I have to verify with MFA?
What about students and student workers?
What if I am unable to verify when trying to log in to my account? Example: I left my phone at home and was prompted to verify while on campus.
If you are unable to verify with your default sign-in method, under the code entry on your browser window, click 鈥�I can鈥檛 use my Authenticator App right now鈥�.. This should provide you with the list of other devices you have set up as methods to choose how you would like to sign in. You should always have at least 2 devices configured.
If you are still unable to log in to your Microsoft account, reach out to the IT Help desk:
What options do I have for authentication? Microsoft provides several different methods for verifying your account with Multifactor Authentication. In case you do not have your default method available, you can always choose to log in to your account with a different method.
You can remove, add and update methods at any time from your Microsoft .
Is there a way to authenticate without using a phone? Yes you can authenticate using a physical USB key. This is recommended as an alternative method if you think you鈥檒l be using your computer somewhere where you won鈥檛 have access to a phone or mobile device, or you do not own a mobile device. The Yubiko key cannot be set as your primary authentication method, but from the authentication prompt on your browser, you can chose to sign in with a different method than your primary. Media Services offers these USB keys in Reed Library, and instructions for installing the key can be found here: 泡芙短视频 Knowledgebase - USB FIDO2 Key
After I鈥檝e setup MFA on a home network or my cell phone, will it continue to trigger on my trusted device? Microsoft will learn when you access your account from the same computer and or/wi-fi network off campus. If you always use the same laptop and work on your home wi-fi connection, you will only be prompted every 90 days. If you log in from a new device, or from a new wi-fi connection, you will be prompted to authenticate each time. You will also have to authenticate once per day when connecting to the VPN or logging into Workday from off campus, regardless of the device or network. I accidentally dismissed my pop-up notification to authenticate on my phone. How do I get it back? Notifications for the Authenticator app methods can be retrieved by opening the actual App on your device. Open the App and click on the Fort Lewis College profile. This should initiate another pop-up to authenticate.
You have about 30 seconds to authenticate before the notification expires. If you can鈥檛 get to your device within the timeframe, you can either prompt the browser window to resend the notification, or sign in a different way with another method.
What if I lose my phone, or got a new phone, and it is my primary method for authenticating? You should be able to access your Microsoft account from your computer while on campus connected to the campus internet network without being prompted. If you are prompted with MFA, and cannot log in to your account, reach out to askit@fortlewis.edu or 970-247-7444 during business hours; if you are outside of business hours, and must get access to your account before next business day by completing the form.
From Outlook, click on the far top right initials icon on the browser and go to View Account and then click Security Info. This is where you can make changes to your current default sign-in method, add other methods, edit existing methods, and sign out on all devices if needed.