Multi-Factor Authentication (MFA)

The ICT Service has introduced Multi-Factor Authentication (MFA) and an improved Self-Reset Password Portal (SRPP) to all its members.

Here below you may find the step by step procedure on how to setup MFA methods and how to login to your EUI email (and related Office 365 apps like OneDrive, SharePoint and Teams) as well as VPN via MFA.

• Setting Up Authentication Methods
• Authentication Methods: which one(s) to choose?
  
• Updating MFA Methods
• Authenticating via MFA
  • MFA Methods Not Set Yet
  • MFA Methods Already Setup
• Support

Setting Up Authentication Methods

Follow the below steps to setup your preferred Multi-Factor Authentication method. The method(s) you choose will thereafter be available to sign into your EUI Email (whether Outlook or Webmail), Office 365 environment (including OneDrive for Business, SharePoint, Teams, etc.) and VPN.

Additionally, the method(s) you choose will be shared for Password Recovery as well!

1. Open your preferred browser and follow this link:
   
   https://aka.ms/MySecurityInfo
   
   
2. Login using your EUI email address and password
   
   
   Please Note: if you do NOT have an EUI email account, use the following format in place of the email address:
   
   [email protected] (e.g. [email protected])
    
3. If you are shown the Security info page, proceed with the next step, else click on Security info in the left menu:
   
   
   Figure 1: Security info menu item
   
   
4. Click on + Add method
5. Choose an authentication method from the drop-down among those available (for a full outline of each method, see Authentication Methods further below):
   
   
   Figure 2: Choosing an authentication method to configure
   
   
6. You need to define at least one authentication method, but it is strongly suggested to setup additional ones in case the first one cannot be used for any reason.
   
   
   All authentication methods are shared with the Self-Reset Password Portal, allowing you to reset a forgotten password by using the same options you configured for the MFA!
    
7. For each method you setup, you will immediately be asked to verify it by either inserting the code you receive (e.g. by SMS text or email) or by answering to the phone call (see Authentication Methods further below for details):
   
   
   Figure 3: Verifying the newly introduced authentication method
   
   
8. Once you have configured at least one authentication method, it will show up next to Default sign-in method: you can click any time on Change in order to choose your preferred method from the drop-down menu (as long as you have configured at least two methods):
   
   
   Figure 4: Selecting a default sign-in (login) method

You are all set both for MFA as well as Password Recovery! 

Authentication Methods

ICT Service strongly suggests to pick more than one of the below methods just in case your preferred one cannot be used for any reason!

Updating MFA Methods

Anytime you can add, remove, update or set an existing method as default one except for the Office phone, which is always enabled and updated automatically based on information available on the EUI Directory.

1. Open your preferred browser and follow this link:
   
   https://aka.ms/MySecurityInfo
   
   
2. Login using your EUI email address and password
3. If you are shown the Security info page, proceed with the next step, else click on Security info in the left menu:
   
   
   Figure 5: Security info menu item
   
   
4. Change or remove any option by clicking on Change or Delete next to each method:
   
   
   Figure 6: Changing or deleting an authentication method
   
   
5. Add a new method by clicking on + Add method
   
   
   Figure 7: Adding an authentication method
   
   
6. Change the Default sign-in method by clicking Change next to it and selecting any already configured one from the drop-down menu:
   
   
   Figure 8: Selecting a default sign-in (login) method

Authenticating via MFA

Your first experience signing in via Multi-Factor Authentication will slightly differ depending on whether you have already setup MFA methods or not:

MFA Methods Not Yet Set

If you try to sign in into Outlook, Webmail, Office 365 environment (including SharePoint and PowerBI), Skype for Business, OneDrive for Business before having setup any MFA method, after inputting your EUI credentials you will immediately be prompted to configure MFA:

Figure 9: Mandatory MFA configuration

If this is the case, we strongly suggest to Close your browser or App (that is, to NOT follow on-screen instructions/do NOT click on Next!) and instead follow our guide for Setting Up Authentication Methods further above, as it allows you to setup several methods and choose your preferred one amongst them.

MFA Methods Already Set

If you try to sign in into Outlook, Webmail, Office 365 environment, Skype for Business, OneDrive for Business or SharePoint having already setup MFA methods, after inputting your EUI credentials you will immediately be prompted to provide a second means of authentication.

For example if you configured to be sent a SMS text you would be prompted for the following:

Figure 10: Requesting an additional means of authentication

In the above example, check your mobile phone for an incoming SMS text from Microsoft and insert the 6 digit code it contains, followed by click on Verify to complete your sign in.

If you configured other authentication methods, check out how you should interact as detailed in Authentication Methods.

If, for any reason, your preferred authentication method is unavailable (e.g. battery of your mobile exhausted, mobile forgotten or lost, etc.), do not despair! As long as you have set additional methods, at the verification screen just click on "Sign in another way" and choose any of the available alternative options:

Figure 11: Authenticate via another method

Support

• For support in setting up MFA or in authenticating via MFA on EUI office computers and/or EUI service laptops, mobiles and tablets, please contact the EUI Helpdesk;
• For support in setting up MFA or in authenticating via MFA on personally-owned computers and devices, please contact Portable Device Support.
• If your main authenticaton method is unavailable and you did not configure any alternative one, please contact the EUI Helpdesk!
• For frequent answers and questions, please check the dedicated FAQ section.
• For any further question, contact the EUI Helpdesk.

[1] = Depending on the language of your webmaill, the message may state to press either the £ (pound) key or the # (hash) key. In any case the key to be pressed is always the # (hash) key!