Duo MFA Required for Retirees

 

Greetings from ITS.

We want to inform you of a change to the way retirees login to campus services. HVCC will require Multi-factor Authentication (MFA) through a new product called Duo to access MS Office 365 services, specifically email.

What is Multi-factor Authentication?
MFA is a login method that requires more than just one factor, such as a code sent to a cellphone, to verify your identity. You’ve likely used this technology when signing into your bank or other sensitive sites. MFA will prevent an attacker from gaining access to your account if your password becomes compromised. They won’t be able to log in unless they also have your mobile device. A second factor might include a text message or a phone call to a trusted phone number or a notification in an authenticator app.

Do I need to wait?
You will receive an email invitation from the Duo product beginning March 1, 2022. It will contain the subject “Duo Security Enrollment,” be branded with the Hudson Valley Logo and a personalized link to configure your account. Follow the provided link from a computer to set it up, and have your mobile device handy. The email will look like the following:

Duo Example email

When is this happening?
On March 21, 2022 at noon, we will configure our login service to require Duo. Any retiree who has not already completed the registration process by that time will be asked to do so upon their next login.

What services will be impacted?
This is the first phase of the MFA initiative and it will impact all Microsoft Office 365 applications which require online access, such as Outlook. The web versions of the Office365 email are included.

The second phase of this project will occur during Summer 2022 when we will incorporate the MFA protections into more HVCC services. ITS will communicate more about those changes as the date nears.

What verification options will be available?
You will be able to choose from a variety of verification options. The easiest to use is the push option with the Duo app, but we recommend configuring as many options as possible to give you the greatest flexibility when logging into our services. Options will include SMS/Text, phone call (to a cell, landline or desk phone) and push notifications to your smartphone. Configuring multiple options will ensure that you do not become locked out if you cannot access your primary authentication device/number.

What training resources are available?
The process for using Duo is easy. Duo has the easiest onboarding interface for configuring and using MFA. Additional documentation will be available in the onboarding email

If you would like additional help in configuring or using MFA, please give the helpdesk a call at (518) 629-7364, and we will schedule a training session with you.

We recognize this timing is less than ideal and recent changes in ITS required us to alter previous timelines. Please don’t hesitate to reach out with any questions.

Best regards,

Bill Jojo
Interim Chief Information Officer

 

Published: Tue, 01 Mar 2022 13:20:01 +0000 by w.jojo