Multi-Factor Authentication (MFA) - FAQ

Multifactor authentication (MFA) is an added layer of protection to the sign-in process. When accessing Office365 apps, you need to provide additional identity verification, such as entering a code received by phone.

As part of SGUL's commitment to improving IT security, we are rolling out MFA for Office365 as a cyber security requirement.

Usernames and passwords are easily compromised in numerous ways. They are susceptible to phishing attacks and password cracking tools. Whilst locking accounts after multiple failed attempts is protection from brute force attacks, MFA reduces the risk of compromise by verifying who is attempting to log in by using a second authentication method.

All SGUL Staff and Students will need to enrol onto MFA for Office365.

You will be prompted for MFA upon logging into Microsoft Outlook, Teams, OneDrive or other Microsoft Office365 apps.

No, MFA will be mandatory for all SGUL staff and students.

Our work policy indicates it is reasonable to require the need to add a verification method using a personal device. The alternative (for staff) to using a personal device to set up MFA is to use your office phone instead.

You will to need to log in with MFA on each device you use. You can defer the MFA prompt for 30 days when you tick the box before approving your log in.

Your phone may be having issues receiving any type of data. Try restarting your phone and re-attempt to log in again.

You will need to log in at https://mysignins.microsoft.com/security-info.
Use an alternative verification method such as an office phone number  to log in, then change your registered phone number.
If you do not have access to any other verification method, you will need to contact ITAV Support.

No, texts and calls are free and not chargeable at all.

Yes, you can add a personal or work phone number as a verification method instead.

Office365 MFA can also work on other authenticator apps. Select the 'I want to use a different authenticator app' after selecting the 'Authenticator App' option when adding a new method.

No, the app can generate verification codes offline and does not require a voice, text, or data plan once installed and set up.