Greetings from Instructional and Information Technology (IIT).
We want to inform all students of a change to the way we log in to campus services. HVCC will require Multi-factor Authentication (MFA) through a new Duo product to access MS Office 365 services, including email.
What is Multi-factor Authentication?
MFA is a login method that requires more than just one factor, such as a code sent to a cellphone, to verify your identity. You’ve likely used this technology when signing into your bank or other sensitive sites. MFA will prevent an attacker from gaining access to your account if your password becomes compromised. They won’t be able to log in unless they also have your mobile device. A second factor might include a text message or a phone call to a trusted phone number or a notification in an authenticator app.
Do I need to wait?
You will receive regular email invitations from the Duo product immediately. It will contain the subject “Duo Security Enrollment,” be branded with the Hudson Valley Logo and a personalized link to configure your account. Follow the provided link from a computer to set it up, and have your mobile device handy. The email will look like the following:
When is this happening?
We will require MFA in the Spring 2023 semester. However, you are strongly encouraged to enroll now due to the increasing number of phishing scams. We have begun migrating students and will continue to migrate each of you to the Duo authentication model after registering a device. Usually, this will be within 24 hours.
Any student who has not already completed the registration process by Spring 2023 will be asked to do so upon their next login.
What services will be impacted?
This is the first phase of the MFA initiative, and it will impact all Microsoft Office 365 applications which require online access, such as Outlook, MS Teams, and OneDrive. You may also be asked for MFA if you use an online component of an offline app (such as saving a document to OneDrive from MS Excel). The web versions of Office365, including email, are included.
We will incorporate the MFA protections into more HVCC services. IIT will communicate more about those changes as the date nears.
What verification options will be available?
You will be able to choose from a variety of verification options. The easiest to use is the push option with the Duo app. Still, we recommend configuring as many options as possible to give you the greatest flexibility when logging into our services. Options will include SMS/Text and push notifications to your smartphone. Configuring multiple options will ensure you are not locked out if you cannot access your primary authentication device/number.
What training resources are available?
The process for using Duo is easy. Duo has the easiest onboarding interface for configuring and using MFA. Additional documentation will be available in the onboarding email.
If you would like additional help in configuring or using MFA, please email helpdesk@hvcc.edu, give the helpdesk a call at (518) 629-7364, or schedule a training session with our bookings tool.
Phishing scams are on the rise, and our goal is to protect you from the threat actors. Please don’t hesitate to reach out with any questions.
Best regards,
Bill Jojo
Chief Information Officer