Body
What is MFA?
Multi-factor authentication (MFA) adds an extra layer of security to verify your identity. In addition to your usual login credentials (username and password), MFA requires you to provide another form of verification such as a code sent to your authenticator app. This helps protect your account from unauthorized access.
Bad actors often find creative ways to gain access to an individual’s account, with stealing usernames and passwords being one common method. However, by implementing Multi-Factor Authentication (MFA), the risk of account compromise is significantly reduced.
How does MFA work?
Once registered, MFA works by combining two forms of verification to confirm your identity and signing in will be easy.
-
You begin by entering your CNA credentials to access your account.
-
You will receive a code that you will need to enter on your smartphone via the Microsoft Authenticator app. At the same time, you will also receive a notification on your smartphone.
-
On your smartphone, enter the code that was previously provided and tap “Yes” to approve your sign-in.
Setting up MFA
Setting up is easy, you can use your phone along with another device (e.g. PC, laptop, iPad):
MFA setup guide - PC and mobile
There are also instructions to setup MFA if you are only using your mobile phone.
MFA setup guide - mobile only
MFA enrolment using only mobile device - detailed instructions for iPhone
For more information, please visit the FAQ page.
Issues with MFA?
If you are having problems setting up or using MFA, please feel free to report an MFA issue to IT Services.
MFA Frequently Asked Questions
How do I set up MFA? Can I use my personal device to set up MFA?
Yes, you can use your personal device, such as a phone, to set up MFA, simply download and install the Microsoft Authenticator app from your device's app store. Click here to learn how to set up MFA. Tip: For added security, we recommend enabling a lock screen password on your device, this will help protect your account and personal information in case your device is lost or stolen.
How do I transfer Microsoft Authenticator app to a new phone?
If you buy a new phone, please remember that the Microsoft Authenticator app will not automatically transfer to your new phone.
To avoid being locked out of your College account, you must set up Microsoft Authenticator on your new device before disposing of your old one.
What to do (quick summary of the MFA Instructions page):
1. Install the Microsoft Authenticator app on your new phone.
2. In the app, add your College account and follow the setup instructions.
3. Confirm that it works before factory resetting or disposing of your old phone.
Do administrative and generic accounts (accounts that are used by more than one person) have to be enrolled in MFA?
We are rolling out MFA to generic accounts. Eventually, all accounts will be protected by MFA.
Which services require MFA authentication?
- To enhance your security, Multi-Factor Authentication (MFA) is required for the following services:
- All Microsoft 365 applications
- Banner
- Bonfire
- Regroup
- Salesforce
- TDX
- VPN
How often do I need to authenticate using MFA?
- The frequency of MFA authentication can vary and depends on many factors, including:
- Your account type (e.g., student, employee, contractor, etc.).
- The device you're using to log in.
- The application you're accessing.
- Logging in from a different location (such as a new city, province, or country).
Additionally, if Microsoft's Artificial Intelligence detects unusual login patterns, you may be required to re-authenticate more frequently as an added security.
Helpful Security Reminder:
You will only be asked to authenticate with MFA when actively signing in. If you receive a notification but haven’t attempted to log in, simply tap “No, it’s not me” in your Microsoft Authenticator app to protect your account. If this happens often, we recommend resetting your CNA password online or calling the IT Service Desk for assistance.
What applications/systems are currently protected with MFA?
Employees will need MFA authentication for all Microsoft 365 cloud products, including Email, Teams, SharePoint, and OneDrive. VPN access is also protected by MFA. More applications are expected to be protected with MFA in the future.
Can I choose to receive a call or a text message instead of setting up the Microsoft Authenticator app?
While text messages and phone calls have been commonly used for Multi-Factor Authentication (MFA), they are not as secure as other methods. Text messages are unencrypted, and phone calls can be intercepted, which poses potential security risks. Microsoft will be moving away from using text messages and phone calls for MFA. We strongly recommend setting up the Microsoft Authenticator app for a more secure and reliable authentication experience.
What other options are available for MFA if I don't have a smartphone (for employees)?
- If you don’t have access to a smartphone, you can request a hardware token as an alternative for Multi-Factor Authentication (MFA), simply contact IT Services Service Desk. Please note that it may take some time to set up, test, and deliver the hardware token. There are a few factors to consider when using a hardware token:
- You’ll need to have the token with you whenever you need to authenticate your account.
- If the token is lost, you may need to request a replacement, which could involve a cost and time for processing.
- Set-up and delivery times may vary depending on your availability. To ensure a smooth experience and uninterrupted access to your account, we recommend planning and allowing some time for setup
What if I experience issues with MFA or need to reset my MFA?
What if I forget my mobile device at home while traveling?
If you forget your mobile device at home, you can use your backup authentication method. If that doesn't solve the problem, please contact IT Services.
Who is currently impacted by MFA?
The College has deployed MFA for all active employees and students. Applications currently protected by MFA include Microsoft's suite of products and VPN. IT Services is also working on expanding MFA to other applications, such as centrally authenticated applications (e.g. Qualtrics, Blackboard).
Who is required to use MFA and when can I set it up?
All students, faculty, employees, contractors and other external users using the college network infrastructure and applications are required to use Multi-Factor Authentication. Once your CNA account is set up, you will be prompted to set up your MFA as soon as you sign.
My device was lost/stolen, what can I do?
If your device is lost or stolen, it’s important to act quickly. Please contact IT Services as soon as possible so that we can assist you.