FAQs About MFA

Tags MFA

What is Multi-Factor Authentication (MFA)?

Multi-Factor Authentication (MFA) refers to an additional layer of security that is added to the login process when you access your Ferris State University resources and applications.

MFA relies on two forms of authentication: something you know, and something you have with you. The something you know is your password. The something you have with you can be a mobile device, hardware token, or app code. This means that even if your password is compromised, your account will remain secure. 

Learn more about Microsoft’s Multi-Factor Authentication on their Overview Page.

Who Is Currently Enrolled With MFA?

The IT Services department has implemented MFA for all accounts with access to Ferris resources. This includes former students, current students, faculty, staff, affiliates, etc.

How Often Do I Have to Re-Authenticate My Account? 

The current settings require re-authentication of your Office 365 account every 120 days.

Office 365 LTI In Canvas Issues? 

The current settings require re-authentication of your Office 365 account every 120 days.

Why Is There A Need To Use MFA On My Account? 

Credential harvesting via phishing emails is a high risk to everyone.  Stolen credentials are commonly used to not only impersonate a user, or to access the user’s data externally, but also to infiltrate an organization in an attempt to gain further access to critical systems.  To mitigate these risks and protect the college’s employee/student data, MFA is being implemented to keep your account and the University's data safe.

What Are My Authentication Options? 

You will be prompted to select a primary authentication method when you register, but this can be changed at any time. The options are listed below:

Verification Method Description
Mobile Notification (Microsoft Authenticator App Required) A push notification is sent to the authenticator app on your smart phone asking you to authenticate your log in using your Ferris credentials. Note: the Authenticator App is the recommended method.
Verification Code (Microsoft Authenticator App Required) The Microsoft Authenticator app on your smart phone will generate a verification code that updates every 30 seconds. You will be prompted to enter the most current verification code on the sign-in screen.
Text Messages A text message is sent to your mobile device with a 6-digit code that you will input into the sign-in screen to complete the authentication process.
Phone Calls A call is placed to the phone number you provided during registration asking you to verify you are signing in. Press the # key to complete the authentication process.

You will be prompted to set up a backup authentication method during registration. IT Services recommends that you set up a secondary authentication method, in the event you forget or lose your mobile device.

Why Is Authentication? Why Do We Need It? 

Authentication is a process of identifying the user who they claim to be. This process involves a key pair that only the user knows like their username (email address/id/etc.) and password (an alphanumeric string with special characters). This process is needed to provide access to the system they need for their day-to-day tasks, such as accessing email, Ferris360, Canvas, and other technologies.

Do I Need A Smart Phone To Setup MFA?

No, you do not need a smart phone to set up MFA. You only need a phone where you can receive calls and text messages as described in the link below.

How Will I Know MFA Is Enabled For My Account? 

Once MFA is enabled you will be asked to enroll your default MFA as shown in the screenshot below.

Where Can I Find Information On How To Enable/ Register MFA For My Account? 

You can find information on our dedicated MFA knowledge base article.

Setting up MFA for Office 365 via Authenticator App

How Do I Switch The Default MFA Options To Another? 

Please follow the instructions attached as a related article change from one MFA method to another.

Changing the default MFA type for Office 365

Why Does the Authenticator App On My Smart Phone Prompt Me To Approve A Sign-In When I Have Not Signed In? 

Office 365 occasionally re-authenticates automatically over time (they called it token refreshing). Every time this happens, you will see a pop-up window on your computer and a prompt or new code display on your phone. 

You should always double-check if there’s a pop-up window on your computer before approving any request.

I Forgot My Phone At Home How Can I Access My Account? 

If you have registered an alternative phone number/device for MFA, you could use it to access your account. Setting up an external email address as an MFA option will also provide you with a way to verify your identity without a phone.

If you don’t have any alternative devices and it is an emergency, please contact IT Solution Center to reset your account settings for access assistance.

Can I Travel To A Different Country With MFA Enabled On My Account? 

Yes, you can still use MFA while abroad using the Authenticator App.

If you’re using SMS (text messaging) as an MFA method, please keep in mind that your phone must have services in the country you are in to get the access code via SMS.

How Many Devices Can I Use With MFA?

You could have more than one device/number registered for the MFA. It is better (but not required) to have two or more devices for MFA in case you have lost/forgotten one.

Do I Need To Remove The Old Devices Before Adding a New One? 

No, you don’t have to remove the old device(s) to add a new one. You only need to remove a device if you are no longer have access to it.

I Have A New Device How Can I Add It As My MFA Option? 

Please follow the instructions below.

How to Add Additional MFA Methods

How Do I Remove Old MFA If I Lost Or No Longer In Possession Of The Device? 

Please follow the instructions below to change your MFA methods.

How to Remove an MFA Method

I Don't Want To Use My Number And Get Charged For MFA? 

Some of the alternatives for not using a personal number to set up MFA are to use a token device available through the IT Solution Center or use the Authenticator App which is free of cost for MFA.

Setting up MFA for Office 365 via Authenticator App

Still Need Help? 

Call the IT Solution Center

Print Article

Details

Article ID: 4295
Created
Thu 2/8/24 11:10 AM
Modified
Tue 8/27/24 1:37 PM

Related Articles (8)

Alternatives to Personal Cell Phone for MFA.
How to change the MFA default on office 365.
How to add additional MFA methods.
How to remove an MFA from your account.
The steps to get a new MFA fob.
Learn how to find your computing ID, set up Multi-Factor Authentication (MFA) for your account, and reset your password.
How to set up MFA on a mobile device.
How to add yubikey to your account.