Talk:Multi-Factor Authentication

Multifactor authentication or MFA, is a method for securing an account with multiple means of verifying your identity.

DRAFT LANDING PAGE

How we will be rolling out MFA

Evergreen is implementing Multi-Factor Authentication (MFA) for faculty authentication to strengthen the security of our digital systems and protect sensitive information. With the increasing sophistication of cyber threats, relying solely on passwords leaves accounts vulnerable to unauthorized access. The primary method for MFA will be through Microsoft Authenticator app, which provides a second layer of verification to ensure that even if a password is compromised, accounts remain secure. This transition is a key part of our broader initiative to safeguard the college’s data, protect faculty personal information, and maintain the privacy and integrity of our academic and administrative systems.

The rollout of MFA will extend to staff in the upcoming Winter quarter, ensuring that all administrative personnel benefit from the same enhanced security measures. This phased approach allows the college to provide tailored support and training to each group, ensuring a smooth transition. Following the successful implementation for staff, MFA will be introduced to students in the Spring quarter. By staggering the rollout, we aim to minimize disruption while prioritizing the protection of all users and their access to critical resources. Clear communication, training, and resources will be made available to guide everyone through the process.

Getting Started with MFA

• Learn how to Setup the Microsoft Authenticator App
• More answers about MFA? See: MFA Frequently Asked Questions

What is multifactor authentication and why is it necessary?

Multifactor authentication will use what you know, such as a password, and what you have, such as the Microsoft Authenticator app, as two different forms of authentication. Having multiple requirements to verify identity when logging into services is the best form of protection against phishing attacks that have become much more common in the last few years. Multifactor authentication can protect access to your account, personal information, and college data in the event that a malicious actor obtains your password.

Is MFA Required?

MFA is expected to be required by the end of the 2024/2025 academic year. A roll-out project will begin in Fall of 2024, which will, by the end of the year, require all students, faculty, and staff to register at least one MFA method. We are encouraging users to opt-in to MFA now; otherwise, it will be enforced on all accounts at a later date. Certain groups will be required to use MFA for certain applications at each stage of the rollout. Eventually, you will need to use MFA for everything you use your Evergreen account for.