Multi-factor Authentication (MFA)

What is multi-factor authentication, or two-factor authentication?

MFA is a login method that confirms a user's identity by prompting for two or more pieces of evidence (or factors) prior to a successful login. Verifying your identity using a second factor prevents anyone but you from logging in, even if that other person knows your password. You can use your own smart phone, or SSU will provide you with a physical hardware token (Token) to use.

How It Works

Illustration of MFA process - Online Services Login + Duo App on mobile phone or Duo Token = Successful Login

Multi-factor authentication uses mobile technology to send an authentication request to your registered device. If you are using your phone you will be prompted to select "Send Me A Push," which will send a notification to your phone. Simply tap 'Approve' on the screen. If you are using a Token you should select "Enter a Passcode." Then enter the code from your Token and click "Log In". If you select the "Remember me for 12 hours" checkbox, you will not be prompted for MFA for 12 hours on that device. These actions verify that you are the person logging in and your access is granted.

Learn more about Duo multi-factor authentication with this video.

Getting Started

SSU will be implementing MFA on campus starting in the summer of 2018.

Training will be conducted by the IT Help Desk. IT staff will assist with all aspects of MFA setup. Make sure to bring your smart phone if you plan to use it, otherwise SSU will provide a token at this time. Verification and activation of the device will be done in person by an IT staff member.

Why are we implementing MFA?

During a recent security audit, the CSU recommended that SSU implement multi-factor authentication on campus. MFA adds an additional layer of security by keeping your account protected (and the data you have access to) even if your password is compromised.

Who will use MFA?

Campus users who have access to level one data will be required to enroll in MFA. A representative from Information Technology will be in contact with you soon if you have this level of access. IT will also organize informational sessions for training and implementation.