Home » Services and Admin » ICT Service » Computing Accounts » Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA)

THIS PAGE APPLIES ONLY TO MFA-ENROLLED USERS. CHECK MFA IMPLEMENTATION PAGE FOR ADDITIONAL DETAILS!

 

As an improvement to EUI's email authentication system, the ICT Service has introduced Multi-Factor Authentication (MFA) and an improved Self-Reset Password Portal (SRPP) to all its members.

Here below you may find details on how to setup MFA methods and how to login to your EUI email (and related apps like Skype for Business, OneDrive and SharePoint) via MFA.

 

Setting Up Authentication Methods

Follow the below steps to setup your preferred Multi-Factor Authentication method. The method(s) you choose will thereafter be available to sign into your EUI Email (whether Outlook or Webmail), Office 365 environment (including SharePoint, PowerBI, etc.), Skype for Business or OneDrive for Business.

Additionally, the method(s) you choose will be shared for Password Recovery as well!

 

  1. Open your preferred browser and follow this link:

    https://aka.ms/MySecurityInfo

  2. Login using your EUI email address and password
  3. If you are shown the Security info page, proceed with the next step, else click on Security info in the left menu:

    mfa_01
    Figure 1: Security info menu item

  4. Click on + Add method
  5. Choose an authentication method from the drop-down among those available (for a full outline of each method, see Authentication Methods further below):

    mfa_02
    Figure 2: Choosing an authentication method to configure

  6. You need to define at least one authentication method, but it is strongly suggested to setup additional ones in case the first one cannot be used for any reason.

    All authentication methods are shared with the Self-Reset Password Portal, allowing you to reset a forgotten password by using the same options you configured for the MFA!
     
  7. For each method you setup, you will immediately be asked to verify it by either inserting the code you receive (e.g. by SMS text or email) or by answering to the phone call (see Authentication Methods further below for details):

    mfa_03
    Figure 3: Verifying the newly introduced authentication method

  8. Once you have configured at least one authentication method, it will show up next to Default sign-in method: you can click any time on Change in order to choose your preferred method from the drop-down menu (as long as you have configured at least two methods):

    mfa_04
    Figure 4: Selecting a default sign-in (login) method

 

You are all set both for MFA as well as Password Recovery

 

Authentication Methods

ICT Service strongly suggests to pick more than one of the below methods just in case your preferred one cannot be used for any reason!

Phone

A mobile number to be called to or where a text (SMS) message can be sent to:

If you choose to receive a call, you will have to listen to a recorded message (in English): if you approve the login, press the # key on your phone when asked to [1].

If you choose to receive a text (SMS) message, a 6 digit One-Time Code will be sent to you, similar to the following:

"123456 Use this code for Microsoft verification"

If you want to confirm the access, enter the 6 digit pin (in the above example, 123456) in the login screen (see Autheticating via MFA for details).

Alternate phone

An alternate mobile or fixed number which can only be called to:

You will have to listen to a recorded message (in English): if you want to confirm the access, press the # key on your phone when asked to [1].

Office phone

Your EUI office phone, if any. This field will already be populated by the system if you have an EUI office extension assigned to you by your Unit of affiliation.

You will have to listen to a recorded message (in English): if you want to confirm the access, press the # key on your phone when asked to.

Please note the office phone can not be defined as default authentication method!

Email

An alternate (non-EUI) email address: this option can be used to reset a forgotten password ONLY (see Reset Password via MFA for further details)!

 

 

Updating MFA Methods

Anytime you can add, remove, update or set an existing method as default one except for the Office phone, which is always enabled and updated automatically based on information available on the EUI Directory.

  1. Open your preferred browser and follow this link:

    https://aka.ms/MySecurityInfo

  2. Login using your EUI email address and password
  3. If you are shown the Security info page, proceed with the next step, else click on Security info in the left menu:

    mfa_01
    Figure 5: Security info menu item

  4. Change or remove any option by clicking on Change or Delete next to each method:

    mfa_06
    Figure 6: Changing or deleting an authentication method

  5. Add a new method by clicking on + Add method

    mfa_07
    Figure 7: Adding an authentication method

  6. Change the Default sign-in method by clicking Change next to it and selecting any already configured one from the drop-down menu:

    mfa_04
    Figure 8: Selecting a default sign-in (login) method

 

Authenticating via MFA

Your first experience signing in via Multi-Factor Authentication will slightly differ depending on whether you have already setup MFA methods or not:

MFA Methods Not Yet Set

If you try to sign in into Outlook, Webmail, Office 365 environment (including SharePoint and PowerBI), Skype for Business, OneDrive for Business before having setup any MFA method, after inputting your EUI credentials you will immediately be prompted to configure MFA:

mfa_09
Figure 9: Mandatory MFA configuration

 

If this is the case, we strongly suggest to Close your browser or App (that is, to NOT follow on-screen instructions/do NOT click on Next!) and instead follow our guide for Setting Up Authentication Methods further above, as it allows you to setup several methods and choose your preferred one amongst them.

 

If you happen to follow on-screen instructions (that is, click on Next instead) you will be initially allowed to configure a mobile phone only!

However, you will still be able to add and change your preferred method at a later stage, as described here.

 

MFA Methods Already Set

If you try to sign in into Outlook, Webmail, Office 365 environment, Skype for Business, OneDrive for Business or SharePoint having already setup MFA methods, after inputting your EUI credentials you will immediately be prompted to provide a second means of authentication.

For example if you configured to be sent a SMS text you would be prompted for the following:

mfa_10
Figure 10: Requesting an additional means of authentication

 

In the above example, check your mobile phone for a SMS text from Microsoft and insert the 6 digit code it contains, followed by click on Verify to complete your sign in.

If you configured other methods checkn out how you should interact as detailed in Authentication Methods.

If, for any reason, your preferred authenticationmethod is unavailable (e.g. battery of your mobile exhausted, etc.), do not despair! As long as you have set additional methods, at the verification screen just click on "Sign in another way" and choose any of the available alternative options:

mfa_11
Figure 11: Authenticate via another method

 

Support

  • For support in setting up MFA or in authenticating via MFA on EUI office computers and/or EUI service laptops, mobiles and tablets, please contact the EUI Helpdesk;
  • For support in setting up MFA or in authenticating via MFA on personally-owned computers and devices, please contact Portable Device Support.
  • If your main authenticaton method is unavailable and you did not configure any alternative one, please contact the EUI Helpdesk!
  • For frequent answers and questions, please check the dedicated FAQ section.
  • For any further question, contact the EUI Helpdesk.

 

  

 

 

[1] = Depending on the language of your webmaill, the message may state to press either the £ (pound) key or the # (hash) key. In any case the key to be pressed is always the # (hash) key!

 

 

Page last updated on 05 July 2019