Body
This service is available for all faculty, staff, and students.
The setup description in this article outlines the process for brand new accounts or for set up after the Tech Desk has reset a user's MFA methods for them. For directions to set up MFA on a new phone/device when you have access to the old device please see the MFA FAQ article.
How it works and when it is used:
Multi-factor authentication (MFA) is a security method for your account that helps verify that you are actually the person who is logging into your account.
- You log into your account with your St. Thomas username & password.
- You will then either get the notification via the app, or you enter the code from your app or Yubikey to verify it is you logging into your account.
At this time, MFA is only required when:
- Logging into your account from off campus
- Accessing systems both on campus or off campus that contain sensitive personal, financial, or health data of the community.
Your Multi-Factor Verification Options
The following are a list of methods that can be used for this second type of verification:
- Mobile App Notification - ITS Recommended Option
- Verification Code (via the Mobile App)
- Yubikey
Verification method options for Multi-Factor Authentication
Verification method |
Description |
Mobile app notification
|
A verification request is sent to your mobile phone asking you to complete the verification by entering the 2 digit number from the computer's browser screen into notification popup on your phone/device. This occurs if app notification is the primary verification method. If you receive this notification when you are not signing in, you can report it as fraud.
- Requires cellular or wifi signal on your phone/device
- Requires download of Microsoft Auntenticator App on your phone/device
|
Verification code with mobile app
|
The mobile app on your device generates a 6 digit verification code. This can be used as your primary verification method, or as a backup method of verification if your phone/device does not currently have cellular or wifi access or if your primary method is the app notification, but you are not receiving the notification.
- Does Not require cellular or wifi signal on your phone/device
- Requires download of Microsoft Auntenticator App on your phone/device
|
Yubikey Dongle
|
The Yubikey option is a USB device that you sync with your computer and the Yubikey app to allow you to MFA without a cell phone or other mobile device. More on Yubikey and how to purchase one and set it up is available here
|
First Time Setup Instructions for MFA
Most users will be using the Authenticator app from their phone or tablet. This can be acquired from the Apple App store or the Google Play store depending on your device.
The following instructions detail how to setup multi-factor authentication using the Mobile App notification method as listed above.
1. Prepare your Authentication method
2. During first time setup, you will usually be automatically directed into setup
- To get there manually go to the UST MFA Set Up Page and log in with your St. Thomas username & password. (Note: be sure to enter your full username@stthomas.edu. For example: john1234@stthomas.edu)
3. After logging in with your St. Thomas username & password you should receive the below "More information required" message, then click next.
![Windows St thomas page presented after logging in with username and password advising that multifactor authentication needs to be set up](https://services.stthomas.edu/TDPortal/Images/Viewer?fileName=6dd21029-b2ce-4011-934a-53b8be3ac496.png&beidInt=373)
4. If you haven't already, download the Authenticator app onto your device from the Apple or Google Play store, then in the browser window click next.
![Windows St thomas multifactor authentication page. Start by getting the app with download link and next button](https://services.stthomas.edu/TDPortal/Images/Viewer?fileName=ceebfdcc-2ab2-45b0-99eb-2c87b98bb597.png&beidInt=373)
5. Open the Authenticator app on your device and start the add a new account process in it, then in the browser window click next.
![Windows St thomas multifactor authentication page. Authenticator app set up your account. Advises to add new account in the app and select next with download link and next button](https://services.stthomas.edu/TDPortal/Images/Viewer?fileName=736116be-526a-45a3-be74-8081c0b0cacb.png&beidInt=373)
6. If prompted in the Authenticator app on your device, choose to allow notifications and select "work or school" as the account type, then in the browser window click next.
![windows St thomas multifactor authentication page. Authenticator app set up your account. Advises to allow notifications and pick work or school account and click next button](https://services.stthomas.edu/TDPortal/Images/Viewer?fileName=13594157-639d-4e0b-bf54-78e46011effc.png&beidInt=373)
6. In the Authenticator app on your device choose "scan QR code" then hold it up to the computer screen so that the QR code in the browser is in the scan window of the Authenticator app on your device. The Authenticator app should read the QR code and then confirm "successfully added". Then, in the browser window click next.
![Microsoft Authenticator setup page containing a QR code that is meant to be scanned. QR code is located on the middle left of the image. Scan the QR code with your phone camera then choose the "Next" option located in the lower right of the image.](https://services.stthomas.edu/TDPortal/Images/Viewer?fileName=64368032-1996-4eae-bb9f-9f70c4cd87c0.png&beidInt=373)
7. You will now be prompted to do a test MFA to ensure it is working. You should get a notification on your device. Click on this notification and the Authenticator app should open a window on your device where you can enter the 2 digit number that is being shown on your browser.
![Microsoft Authenticator setup page, trying out your newly attached authenticator. There is a red circle at the bottom middle of the image that surrounds a pound sign where a number will be.](https://services.stthomas.edu/TDPortal/Images/Viewer?fileName=93283139-7471-4f66-bd94-7f4f0233d455.png&beidInt=373)
8. Success screen, click done and you're all set!
![Microsoft Authenticator setup page stating you have successfully setup your new authenticator. The default sign-in method is shown in the middle left of the screenshot. Click 'Done' in the bottom right to complete.](https://services.stthomas.edu/TDPortal/Images/Viewer?fileName=3cbfabd4-f071-4b8a-aa1d-99d6e05e88d5.png&beidInt=373)
To report a problem or receive additional troubleshooting, please contact the Tech Desk.