MFA: Frequently Asked Questions

Skip to a question:

• What is Multi-Factor Authentication (MFA)?
• Who is currently impacted by MFA?
• What applications/systems are currently protected with MFA?
• How often do I have to re-authenticate?
• How do I enroll in MFA?
• What are my authentication options?
• How do I set up the Microsoft Authenticator App on my phone?
• How do I change or update my authentication method?
• Can I use my Personal Device to set-up MFA?
• If I have an elevated account, do I have to enroll in MFA?
• What if I am not prompted to enroll in MFA?
• What if I forget my phone at home?
• What if I experience issues with MFA?

What is Multi-Factor Authentication (MFA)?

Multi-Factor Authentication (MFA) refers to an additional layer of security that is added to the login process.

MFA relies on two forms of authentication: something you know, and something you have with you. The something you know is your password. The something you have with you can be a mobile device or hardware token. This means that even if your password is hacked, your account will remain secure. 

Learn more about Microsoft’s Multi-Factor Authentication on their Overview Page.

Who is currently impacted by MFA?

For now, MFA impacts all faculty and staff using GlobalProtect VPN. Additional offices besides ITS are being onboarded to use MFA full time. In the future, MFA will be implemented for all faculty and staff. 

Will MFA affect student workers?

Future plans include rolling MFA out to faculty, staff and student employees.

What applications/systems are currently protected with MFA?

Review our MFA Frequency Settings Guide to review all applications effected.

How often do I have to re-authenticate?

The current settings require reauthentication for GlobalProtect VPN every 7 days. Other applications have varying amounts of time, please review our MFA Frequency Settings Guide for a full list.

You will need to re-authenticate on each device and each browser you use.

How do I enroll in MFA?

Prior to May 2021, select offices will be onboarded to use MFA due to the secure data they work with. After May 2021 ITS will communicate how to enroll through MFA voluntary enrollment followed by future, yet to be determined, mandatory waves.

What are my authentication options?

You will be able to choose a primary authentication method when you register, which you can change or update at any time. Current options are outlined below:

You will also be asked to set up a backup authentication method. ITS recommends that you use your office phone as a backup, to help you access your account in case you forget or lose your mobile device. 

If you need to update the office phone we have on record, you can do so by filling out the Directory Update form.

How do I set up the Microsoft Authenticator App on my phone?

Use our MFA First Time Set Up Guide or watch Microsoft’s How to register for Azure Multi-Factor Authentication.  For questions regarding the Microsoft Authenticator App, please refer to Microsoft's Authenticator page.

How do I change or update my authentication method?

You can make changes to your authentication settings by visiting Microsoft's Security Verification page. For instructions follow our MFA Settings Guide.

Can I use my Personal Device to set-up MFA?

Yes, ITS encourages faculty and staff to use their personal device for MFA.  

If I have an elevated account, do I have to enroll in MFA?

Yes, you will be prompted to enroll in Microsoft MFA for each account you own, including elevated accounts.

What if I forget my mobile device at home?

If you forget your mobile device at home, you can use your backup authentication method. If that doesn't solve the problem, please contact the Service Desk at servicedesk@seattleu.edu or 206-296-5571.

What if I experience issues with MFA?

You can contact the Service Desk at servicedesk@seattleu.edu or 206-296-5571 or review Microsoft’s MFA Troubleshooting Page