What is Multi-factor authentication?

Multi-Factor Authentication (MFA) is a way of ensuring that only you are able to access your accounts on specific applications. When logging on to campus applications, you provide your username and your password. Multi-Factor Authentication requires you to provide an additional “factor” to prove that it really is you accessing your account. That additional “factor” may be a number that you receive via a text message, a number that appears on a mobile app, or even through a phone call.


Many of you already use some form of Multi-Factor Authentication when logging into your personal banking accounts or when logging into your social networking accounts such as Facebook, Twitter, or even Gmail.


How often do I need to use MFA?

This depends on whether your device is located on-campus or off-campus. IT is currently using a configuration called ‘conditional access’ which should minimize MFA verification when they originate from inside NUNM's network (a verified location). You will not be notified for MFA when accessing your account when on-campus.

If you are off-campus, you should expect to receive an MFA verification prompt the first time you authenticate from either a new device or new location from which you have not previously verified using MFA.


If you are using an application which supports Office 365 modern authentication, you will receive an option to  ‘Approve sign-in request’ and ‘Don’t ask again for 120 days’. This option may be used on devices or locations you consider trusted, such as your mobile device or personal computer. You should never use this option on public or shared-access computers. With the ‘Don’t ask again for 120 days’ is selected, you will only be prompted for MFA every 120 days from that particular device or browser.


What methods can I use to Authenticate?

Verification Method Description
Mobile Notification (Microsoft Authenticator App Required) A push notification is set to the authenticator app on your smart device asking you to "Approve" or "Deny" your log in.
Verification Code (Microsoft Authenticator App Required)
The Microsoft Authenticator App will generate a verification code that updates every 30 seconds. You will be asked to enter the most current verification code in the sign-in screen
Text Messages A text message with a 6-digit code is sent to your mobile device that you will input to complete the authentication process
Phone Calls A call is placed to your phone asking you to verify you are signing in. Press the # key to complete the authentication process.


Do I need a smartphone to use MFA?

No. In addition to using the Microsoft Authenticator App, the MFA service allows you to use a basic feature phone with SMS (text message) support, or you can receive a phone call to a mobile or residential phone.


For those with internet access and do not have a phone, you can use this workaround utilizing Google Voice.


What if I change my number? 

If you change your number, users can use the self-service portal at https://myworkaccount.microsoft.com to reset their authentication method by clicking UPDATE INFO link under "Security info".


Users may also email IT Support at ITSupport@nunm.edu for assistance.

 

For those using the Microsoft Authenticator app, if you are keeping the same mobile device and just changing the number, the Microsoft Authenticator app will still work. If you are getting a new number and a new mobile device, the app will need to be installed again.


I forgot my password?

NUNM users needed to reset their NUNM email / Office 365 password can go to

https://aka.ms/sspr.


Self-Service Password Reset (SSPR) is an Azure Active Directory (AD) feature that enables users to

reset their passwords without contacting IT support for help. Users will need to register their account prior to utilizing the service.


NUNM users may also email IT Support at ITSupport@nunm.edu for password reset assistance.