Multi-Factor Authentication pt2

 

Threats from phishing scams, malicious software, and compromised passwords are constantly increasing and pose an immediate risk to your privacy and the security of University data. Marshall University has implemented a new Multi-Factor Authentication (MFA) system that is available for students and required for employees.

When accessing a service, you will be prompted to enter your MUNet username and password and complete the login process with multi-factor authentication.

In order to setup Multi-Factor Authentication for your Marshall University account, Multi-Factor Authentication: Getting Started

What is it?

  • MFA adds another layer of security to your online accounts
  • Requires “two factor authentication” (2FA) to verify your identity when you log in to a service by:
    • something you know (such as your password)
    • something only you have (such as your mobile phone, on which you will receive a login confirmation notice)

Why should I do it?

  • Protects student and employee data from being compromised.
  • Increasingly, hackers have targeted higher education institutions by using hacked credentials:
    • to file taxes for employees
    • steal employee’s paychecks
    • to steal from student and employee’s bank accounts
    • in addition to stealing Social Security numbers for credit fraud

What are the benefits?

  • 2FA is the most effective way of stopping this type of fraud since you are notified and required to verify every login to your account
  • MFA is essential to help safeguard access to critical systems
  • MFA provides much stronger insurance that your information is only accessible to the intended people, and that MU’s systems and services remain available for students, faculty, and staff

Multi Factor Authentication FAQ

  • First click the ‘+’ in the upper right-corner of the mobile app to add a new account.
  • Next, the Microsoft Authenticator app will activate your device’s camera. Position the device to capture / ‘scan’ the provided QR code, then click the ‘Next’ button on the ‘Configure Mobile App’ webpage.
No, but Marshall University strongly encourages using the app to provide further security.
To remove the app from a device using a personal account: Go to the two-step verification area of your account security page and choose turn off verification for your old device.

To remove the app from a device using a work or school Microsoft account: Go to the two-step verification area of your ‘MyApps’ page and choose turn off verification for your old device.

  • You forgot your phone or device.
  • You lost your phone or got a new number.
  • Not getting the authentication text or phone call.
  • Your apps passwords aren’t working.
Yes, the fraud alert feature will report fraudulent attempts when trying to gain access to a user’s resources.
User data is stored only on the on-premises servers. No persistent user data is stored in the cloud.
Services and applications that are linked to your MyMU account.
A smart phone is not required, Microsoft MFA can send a code to a basic cell phone via text message as well as make a phone call to the cell phone or landline.
Each time a new connection is made.
A passcode is a one-time number utilized for MFA provided by Microsoft. The passcode provides an extra layer of security for your password.
    • Push Notifications via Microsoft Authenticator App
    • Text Message
    • Phone Call
    • Passcodes
No, the Microsoft Authenticator App works without a data plan.