MMFA快速指南

Get fast answers to Microsoft's Multi-factor Authentication, including how to setup 你的喜好. *Note: the app will perform the best while working off-campus. 

MMFA快速指南

目的

The purpose of this policy is to establish the requirement to protect the university and its employees from damage related to account compromises by requiring an additional layer of authentication known as multi-factor authentication.

A few months ago, 3rd party companies started to report their single sign-on credentials were being stolen in phishing attacks and being used by attackers to compromise sensitive data stored in 3rd party companies' applications.

For more information, please see UNC's Multi-factor Authentication Policy.

出国旅行? 

访问我们的 出国旅行 page to ensure your MMFA settings won't interfere with your ability to access UNC 账户. 

What is Microsoft's Multi-factor Authentication?

Microsoft Multi-factor Authentication (MMFA) helps safeguard access to UNC data and applications while maintaining simplicity for users. It provides additional security by requiring a second form of authentication when users are off campus. 

The security of UNC's system requires a two-step login process. 通过使用多个 authentication factors, the MMFA presents a significant challenge for attackers. 甚至 if an attacker manages to learn the user's password, it is useless without also having possession of the additional authentication method. It works by requiring two or more 身份验证方法.

这会影响到谁呢?? 

This policy applies to all faculty and staff as well as any third party or contractor that is issued a university credential. This is in support of University Regulation Article 9 Part1: Information 技术 Security Plan.

会发生什么?

When you try to access Outlook or Slate, while not connected to the UNC administrative 网络, you will be prompted to authenticate with a second factor.

Depending on how you choose to set this up, the multi-factor system will call or text your phone with a code, ask for a code from your authentication application, or simply prompt you with an allow or deny from the authentication application.

应用程序的身份验证

The app authentication takes a couple of steps to setup. BUT, once it's done, authentication will be a simple button click on your phone. 

IM&我推荐使用这个选项. This will make authentication simple and easy!

检查

应用锁定启用/禁用

文本/调用身份验证


调用身份验证

The call authentication requires a phone number to set up - simple, right? 每一次 you need to authenticate your identity, you will be required to wait for Microsoft's 拨通你的电话.

文本/短信验证

The text/sms authentication also requires a phone number to set up. 但是,每一次 you need to authenticate your identity, you will be required to wait for Microsoft's code. Text/SMS messaging is not guaranteed and delivery time of the message depends on your wireless carrier and cell phone coverage. This option is not recommended due to the wait time concerns. IM&T only recommends the Text/SMS Authentication when there is no access to a smart phone and the Authenticator Applications.

You can set up your preferred method of multi-factor by accessing the 多因素设置门户

需要帮助? 请查看 MMFA快速指南 to assist you through the process.

You will be able to exempt your device for up to 60 days before being prompted to use your second factor again. Use the Microsoft Authenticator application on your mobile device and use the “Notify me through app” option. This will walk you through downloading and installing the application and whenever you need to use the multi-factor authentication it will just send a prompt to your phone.

If you do not wish to use the Microsoft Authenticator application, you are welcome to use any of the other options.

小贴士:

Do use your office number as your second authentication factor for access. 如果你是 on the UNC 网络s, you will not need to use a second authentication factor.

注意:

If you get a multi-factor prompt from the application, but you are not trying to login, click the Deny button and report the attempt to it.security@ycdwkj666.com. It means that someone has your logon credentials.

额外的资源: