Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Last revision Both sides next revision | ||
|
configure_mfa [2022/05/16 13:46] rosterberg |
configure_mfa [2024/01/08 17:23] rosterberg |
||
|---|---|---|---|
| Line 5: | Line 5: | ||
| ===== MFA Methods Available ===== | ===== MFA Methods Available ===== | ||
| - | The available methods for multi-factor authentication (MFA) include: | + | Your primary multi-factor authentication (MFA) method must be an authentication app or one-time password keyfob token: |
| - | * Use of an authenticator app on your mobile device. We strongly recommend the **Microsoft Authenticator App**, but you may use any standard authenticator app of your choice. | + | * **Microsoft Authenticator App** (recommended and supported) |
| - | * Verification code sent via SMS to your phone | + | * Google Authenticator (limited support) |
| - | * Verification call to your personal phone and/or office phone | + | * Authy Authenticator (limited support) |
| + | * LastPass Authenticator (limited support) | ||
| + | * 1Password Authenticator (limited support) | ||
| + | * Keyfob hardware authenticator token (limited quantities available via the IT Help Desk) | ||
| + | |||
| + | Other authentication methods that may be added include: | ||
| + | * Verification code sent via SMS to your phone (only as a backup authentication method) | ||
| + | * Verification call to your personal phone and/or office phone (only as a backup authentication method) | ||
| + | * Security questions (only as secondary authentication for self-service password reset) | ||
| + | * Verification code sent to a personal email address (only as secondary authentication for self-service password reset) | ||
| We recommend configuring more than one verification method for added convenience if a verification method is unavailable (for example, if your mobile device battery has died). | We recommend configuring more than one verification method for added convenience if a verification method is unavailable (for example, if your mobile device battery has died). | ||
| Line 25: | Line 34: | ||
| * The next screen says **Start by getting the app** with a link to install the app (for your phone). Since you have already installed the Microsoft Authenticator App on your phone, click **Next**. | * The next screen says **Start by getting the app** with a link to install the app (for your phone). Since you have already installed the Microsoft Authenticator App on your phone, click **Next**. | ||
| * //On your computer//, the next screen says **Set up your account**. | * //On your computer//, the next screen says **Set up your account**. | ||
| - | * //On your phone or tablet//, open the Microsoft Authenticator App. Press the **+** (plus) icon in the top right corner of the screen to add an account. Then select **Work or school account**. | + | * {{ :mfa-authen-app-add-button.png?nolink&200|}}//On your phone or tablet//, open the Microsoft Authenticator App. Press the **+** (plus) icon in the top right corner of the screen to add an account. |
| - | * //On your computer//, click **Next**. You should see the **Scan the QR code** screen, along with a square QR code pattern. | + | * {{ :mfa-app-add-work-or-school-account.png?nolink&200|}}//On your phone or tablet//, then select **Work or school account**. |
| - | * //On your phone or tablet//, you will be prompted to select //Sign in// or //Scan QR code//. Press **Scan QR Code**. You will see a camera preview on your device screen. | + | |
| + | . | ||
| + | |||
| + | . | ||
| + | |||
| + | . | ||
| + | |||
| + | * {{ :mfa-scan-qr-code.png?nolink&200|}}//On your computer//, click **Next**. You should see the **Scan the QR code** screen, along with a square QR code pattern. | ||
| + | |||
| + | . | ||
| + | |||
| + | |||
| + | . | ||
| + | |||
| + | * {{ :mfa-app-scan-qr-code-button.png?nolink&200|}}//On your phone or tablet//, you will be prompted to select //Sign in// or //Scan QR code//. Press **Scan QR Code**. You will see a camera preview on your device screen. | ||
| * //Using your phone or tablet//, point the camera at the QR code on your computer screen. | * //Using your phone or tablet//, point the camera at the QR code on your computer screen. | ||
| * After you scan the code, your phone or tablet will turn off the camera preview, and you will see the main Microsoft Authenticator screen. You will see an entry for **Olin College of Engineering** with your login account shown. | * After you scan the code, your phone or tablet will turn off the camera preview, and you will see the main Microsoft Authenticator screen. You will see an entry for **Olin College of Engineering** with your login account shown. | ||
| Line 38: | Line 61: | ||
| * We recommend adding other sign-in methods, such as a mobile phone and your office phone. | * We recommend adding other sign-in methods, such as a mobile phone and your office phone. | ||
| + | * We have a limited number of hardware "key fob" tokens that can be used with multi-factor authentication. Please contact the IT Help Desk for more information. | ||
| ===== Set the Default Sign-In Method ===== | ===== Set the Default Sign-In Method ===== | ||
| * After adding your sign-in methods, check the **Default sign-in method** shown near the top of the page. We recommend setting this to be **Microsoft Authenticator - notification**. Click **Change** to change the default if necessary. | * After adding your sign-in methods, check the **Default sign-in method** shown near the top of the page. We recommend setting this to be **Microsoft Authenticator - notification**. Click **Change** to change the default if necessary. | ||
| + | |||
| + | ===== Using other Authenticator Apps ===== | ||
| + | |||
| + | We strongly recommend using the Microsoft Authenticator App for Olin multi-factor authentication. If you have experience using other authenticator apps (such as Google Authenticator, Authy by Twilio, etc.), you may do so. Follow the instructions above to add an authenticator app. On the screen that says **Start by getting the app**, select **I want to use a different authenticator app**. Then follow the prompts to add a software token to your authenticator app. | ||
| ===== Using Multi-Factor Authentication ===== | ===== Using Multi-Factor Authentication ===== | ||