View source for MultiFactor Authentication MFA

== Multi-Factor Authentication (MFA)==

===How we use Multi-Factor Authentication===
*Multi-factor authentication (a.k.a. MFA) is a method to help the organization better secure Office 365 access. This additional security is about approving sign-in to your organizational account via using a device that is unique to you. If your professional account has somehow managed to become compromised, the account will not be able to be accessed since 'they' will not have your mobile device to approve the sign-in.

===Why use the app when the option for text and/or call is available===
*The primary reason to use the app is that the app does not require you to have a paid cellular plan or for you to be in a place of cell reception. If you are going to use the Microsoft web resources, then you will have internet which the app can connect to. You can always add options for a variety of MFA scenarios. There is nothing saying that you can't sign up to use the app '''OR''' text '''OR''' phone call.

===Steps to take===
*'''These steps can change without notice. We will do our best to keep this page up to date. Please let us know if a step doesn't make sense.'''


In your web browser: Open a web browser and go to https://portal.office.com<br>
In your web browser: Log in with your email address<br>[[file:mfa-step1-login.png |250px|Office 365 Login screen|alt=Office 365 Login screen]]
<br>
In your web browser: Log in with your password (username@baycollege.edu AND uniquepassword)<br>[[file:Mfa-step-password.png |250px|Office 365 Password|alt=Office 365 Password screen]]
<br>
In your web browser: When prompted that "More information is required" click Next<br>[[file:Mfa-step-inforequired.png |250px|More Info Required|alt=More info required]]
<br>
'''You have choices to make!'''
<br>
'''Choice 1 START:''' <br>
Set up the MFA Authenticator App: 
*On your mobile device: Download and install The Microsoft Authenticator App to your mobile device
*The Microsoft Authenticator App (https://www.microsoft.com/en-us/account/authenticator). 
*'''DO NOT''' set up an account until the instructions tell you below
In your web browser: On the "Additional security verification" page, set the following options:
* How should we contact you? = Mobile app
* How do you want to use the mobile app? = Receive notifications for verification
* Verify that you have selected the appropriate options before continuing
# In your web browser: Click the "Set up" button
# On your mobile device: Open the Microsoft Authenticator app
# On your mobile device: Click the Plus to add a new account
# On your mobile device: Select work or school account
# On your mobile device: If you are asked to allow the Microsoft Authenticator app to use your camera, select allow
# On your mobile device: Point the QR reader at the QR code on the web page
# On your mobile device: The Microsoft Authenticator App should automatically add the account
#*If you are having trouble with this step. Close out the Authenticator app and reopen it. Try again.
# In your web browser: Wait for the portal web page to verify the setup
# On your mobile device: You should get a pop-up on the mobile device asking to Deny or Allow the logon, select Allow
# In your web browser: Click Next to Finish the setup
# Now when you log into the Office 365 portal https://portal.office.com you will be prompted with an Approve sign-in request page, and you should get a pop-up on your Microsoft Authenticator app to approve the sign in.
'''Choice 1 END:''' <br>
'''Choice 2 START:'''<br>
* Set up text message authentication:
* Click 'I want to use a different method'
[[file:Mfa-step-authenticatorprompt.png |500px|Authenticator|alt=Authenticator Select Page]]
<br>[[file:Mfa-step-changemfalist.png |250px|MFA List Options|alt=MFA List Options]] 
<br>[[file:Mfa-step-change.png |250px|MFA List|alt=MFA List]]
<br>[[file:Mfa-step-phone.png |250px|Phone|alt=Phone Select Page]]
<br>[[file:Mfa-step-phoneconfirm.png |250px|Phone Confirm|alt=Phone Confirmation Page]]
<br>[[file:Mfa-step-phoneenroll.png |250px|Phone Enrolling|alt=Phone Enrollment Page]]
<br>[[file:Mfa-step-phonesuccess.png |250px|Phone Success|alt=Phone Success Page]]
<br>[[file:Mfa-step-staysignedin.png |250px|Prompt to Stay Signed In|alt=Prompt to stay signed in]]
<br>[[file:Mfa-step-365main.png |250px|365 Main|alt=Main 365]]<br>
'''Choice 2 END:'''

===Frequently asked questions===
*Why use the Microsoft Authentication App?
**The Authenticator app will work wherever you have a Wi-Fi connection. Some places may not have adequate cell signals and you may not be able to receive a text message.
*Can I be removed from using MFA?
**The MFA setting is enforced for all users, no exceptions can be made.
*Will Staff, Faculty, and Students be required to use MFA?
**Yes
*Which Bay College applications require MFA?
**Email
**SharePoint
**Office 365 applications including the Office 365 web page
**OneDrive
**Teams
**This list will be expanded as more applications are set up to use MFA
*I don't have a smartphone, how do I get into my O365 resources?
**You are able to choose text messages or provide a phone number instead of using the app.  
*How often will I be asked to Approve my sign-ins?
**Every 180 days
*How long does the approval last?
**180 days. Unless:
**You sign on a different device
**You start a different browser or enter a Private (Incognito) browsing session. 
*Why implement MFA?
**Multi-factor authentication provides better protection for the college and for your security. The potential risk of account high-jacking has grown significantly within the last decade and there does not seem to be an end to this vulnerability. Adopting MFA for the organization is within the business best practices scope. Additionally, many platforms now require that MFA be in place before further adoptions can be made. If we are not compliant with this now, we will be forced to do so due to changes in vendor policies. 

[[category: Procedures]]