Multi-Factor Authentication Service

Multi-factor authentication (MFA) provides extra security before logging into an online service. When accessing an MFA-protected service, staff will be prompted to enter NetID and NetPassword as the first authentication and as a second step, reconfirm staff’s identity by using a verification device, like a phone or a tablet.

To facilitate this verification process, users are required to install a mobile app called “Microsoft Authenticator” to personal smart phone or tablet.

Two secondary identity verification methods are available for users:

1. Push Notification
   With the Microsoft Authenticator installed to the mobile device, a Pop-up Notification will be received when user log into an MFS-protected service. User can simply hit “Approve” to log in.
   (Note: Beginning from March 2023, you will be prompted to enter a 'matching number' to your Microsoft Authenticator mobile app to approve log in. This number is displayed on the login screen of the application which you are trying to access.)
   It is recommended to use Push Notification while having a stable internet connection because it is the most convenient option.


2. Passcode
   In situations where users have poor cell phone reception or internet connection, users should select “Passcode” as the second identity verification method.
   This method has added benefit of being completely free since it does not use user’s cellular data package.

Users are recommended to check out the user guides on setting up MFA service and configure which verification method to use.