Multi-Factor Authentication (MFA) - Initial setup

Tags mfa

What Is MFA?

Protecting your network account and identity with Multi-Factor Authentication.
 

  • What is MFA?
    Multi-factor provides a level of security to ensure only authorized users can log in. MFA authentication is a user identification method that allows the user access to resources only after successfully providing two or more pieces of evidence (or factors) to a verification mechanism:
    * knowledge (something the user and only the user knows)
    * possession (something the user and only the user has)
    * inherence (something the user and only the user is)

     
  • What will change in how I use my email when you turn it on?
    Whenever you access your email via the web browser from any device you will be prompted to verify your account access with a code from text, call, email, or the authenticator app. Web access provides the user the option to not prompt for verification for the next 14 days, which should be used only if it is a device you use frequently.

    When accessing your email from the Outlook application you will have the option to save your password. This will require signing in again at the time that your account password has been changed.
  • What steps will I have to take to get it to work?
    Once this extra layer of security has been enabled on your account, you will be prompted to set up login verification options.
    * alternative phone number (text or call) to receive a code
    * Verification code via Microsoft Authenticator app
    * security questions for user verification
    * Microsoft Authenticator app which avoids text or call charges

     
  • Are there things I can do to make things easier?
    Depending on the device you are using or the method to which you access your email services (web or Outlook application) should determine whether or not you wish to save your login credentials and minimize your account verification prompts. The Microsoft Authenticator app is a secure, quick, and easy method for account verification and does not incur any charges.

 

How To Setup MFA

Note: If you have already configured MFA for your account but would like to make some changes, please review the last two sections.

When you first set up your account, you can access this link -> webmail.cobleskill.edu, this will take you to your Cobleskill email where you can configure MFA for the first time. When arrive at the site, enter your cobleskill email and Password that was configured at the Mylogon Portal - >apps.cobleskill.edu/MyLogon. Once you have entered your login information you will get a message stating "More information is required", see the image below:
Uploaded Image (Thumbnail)Once you click next you will be redirected to another screen that will prompt you to begin configuring your MFA, see image below:

Uploaded Image (Thumbnail)

1. Click Next Twice and you will be brought to a screen with a QR Code.

2. Download the authenticator app, 

3. Accept the privacy agreement terms.

4. Select "Add work or school account".

5.  select "Scan a QR code", and you should be able to use your camera to scan the QR code.

6. After scanning you will be brought to a screen that will have you test the authenticator app, follow on-screen instructions, and hit next.

7. Once done you should be brought to the page shown below:

Uploaded Image (Thumbnail)

If you do not want to use the authenticator app you can select "I want to set up a different method" which will give you the option to use a cell phone number, see the image below.

Uploaded Image (Thumbnail)

Once you select Phone, you will be brought to a screen that will give you the option to input your phone number and select the method you would like to receive the code. Once you have completed the setup you will be prompted with this screen.

Uploaded Image (Thumbnail)

It is highly recommended to use the authenticator app for now and then configure your cell phone number and/or additional methods to authenticate to prevent locking yourself out.

What Other Options Can I Use?

When authenticating via MFA, you have options to receive a call or text that would provide you with a code that must be inputted to authenticate you. Sometimes there are issues with receiving these codes due to a lack of cell service, to avoid this, it is highly recommended to install the authenticator app or configure Google Voice. This way you have multiple methods to authenticate, if one method does not work; the authenticator app and Google Voice require Internet only access, does not require mobile data.

Please see the links below regarding configuring the authenticator app and Google Voice.

Configuring the authenticator app:

https://cobleskill.teamdynamix.com/TDClient/277/Portal/KB/ArticleDet?ID=10755

Configuring Google Voice:

https://cobleskill.teamdynamix.com/TDClient/277/Portal/KB/ArticleDet?ID=10754

What Happens If My Phone Does Not Work?

If you have lost your phone or device and can not authenticate, please request this service and enter the requested information. You will be contacted by the ITS security office to verify your identity.

If you still have access to your device but plan to replace it with a new device, please review the following instructions in the link below on how to update your MFA options:

 

MFA | How to | Authentication Method Change/Addition

https://cobleskill.teamdynamix.com/TDClient/277/Portal/KB/ArticleDet?ID=10757