MFA - FAQs

A. MFA adds an extra layer of protection to keep your data and SCU networks more secure. Even if a bad actor acquires your username and password, it will be harder to gain access to your account without the additional identity factors required as part of MFA.

A. No, you cannot opt-out of MFA on your SCU account. MFA is required for all staff and students at SCU to help mitigate against credential theft. If you do not configure MFA, you will not be able to login to certain websites and applications.

A. You may need to re-authenticate whenever you switch to a different browser or device

A. Yes, you can setup Authenticator app as your default and have alternative options such as SMS and landline call.

Please refer to MFA@SCU Page for more information on adding different methods of authentication or Microsoft Support - Set up Security info from a sign-in page

A.

For each browser and/or computer the system will remember you and will only ask for MFA authentication periodically.

You may need to re-authenticate when:

• You log out of the application or website
• You switch to a different browser or device
• You clear your browser cookies/cache
• You use a new Wi-Fi connection or network
• The application requests you to authenticate more frequently
• Considers that a risk-based event may have occurred

A. Although you can authenticate through other methods, the Authenticator app is the preferred and most secure method for MFA.

It is also the easiest way and will make authenticating more seamless than other authentication methods. If it is not practical to use the authenticator app, the following options are available to use MFA:

• Receive an SMS to a register mobile phone
• Receive a call to a registered mobile phone
• Receive a call to a registered landline

You can also setup your landline phone on-campus and forward that to another mobile/landline number.

Please refer to the instructions on: Multi-Factor Authentication - MFA @ SCU! to register a mobile or landline to receive an SMS or call.

A.
Microsoft Authenticator supports the following operating systems: Android 8.0 and later, and iOS 15 or later. It is also available for Windows 10 Mobile versions 14393.0 and later. However, it is not available for PC or Mac. The app is designed primarily for mobile devices (smartphones) for security and convenience reasons. Microsoft Authenticator FAQs - Microsoft Support

A. No, the MFA app does not use or request your location

A. A hardware passkey option is available; however, it involves a cost and must be purchased through an authorised reseller, such as Trust Panda and or a landline phone.

Please contact Service Desk

A.

Go to https://email.scu.edu.au in incognito/private browser window, and if prompted on your current authentication method/phone and logs you in.

If you've had a new phone recently then Transfer MFA - Old to New Phone

A. You don't need to action anything other than following the instructions when you attempt to log into Email or another Office365 application or service after you have been enrolled in MFA. Enrolling simply means that your SCU Office365 account now requires a second method of authentication, you will need to use the authenticator app or another method to provide the second authentication level you will now need to access your account.

Alternatively, follow the instructions on: Multi-Factor Authentication - MFA @ SCU!

A.
You can see all your active devices and MFA methods at this site https://mysignins.microsoft.com/security-info

A. If you have multiple SCU (Staff, Student) or Microsoft O365 and/or Non SCU accounts saved/being utilised on your browser, this can make it tricky to keep track of which one you're signed into. To ensure you're using the correct account and/or to get your verification codes sent for the right account you can try the options listed in this article:
It's not working in my browser, what do I do?

A.

We recommend the following sequence to avoid having to authenticate frequently and/or authenticate separately for each app:

1. Open your browser
2. Log into the first app and authenticate (e.g. SCU Email)
3. Open other apps on the same browser using a new tab

A.

Yes, as alternate authentication method for other websites and applications other then Microsoft Teams.

Add it as a landline number via https://mysignins.microsoft.com/security-info

A. New devices need to be registered for MFA before you can use them to log in. You can also have more than one device registered for MFA at the same time and use either one to log in.
Transfer MFA - Old to New Phone

A. Please contact Service Desk via one of the methods listed on the Service Desk Contact Page immediately so that we can remove that device from your account. In addition, we'll assist you to register your new device and/or number.
Service Desk Contact Information

A. New mobile numbers should be registered for MFA before you can use them to log in.
Go to the Security info page at https://mysignins.microsoft.com/security-info, select Change link next to the current/registered mobile number and update the number. Transfer MFA - Old to New Phone

A. The Microsoft Authenticator app on your mobile device can generate a passcode even without an internet connection and you can use this passcode to complete the login process as normal.

A.
Due to the security token setup/challenge frequency, approval prompts may be delayed for days or weeks. Please ensure the app is configured on your new phone during Service Desk hours to avoid being locked out. Transfer MFA - Old to New Phone

A.

Try;

1. Opening the Microsoft Authenicator App + scroll down
2. Menu and select Check Notifications

Also; check if your notifications may be disabled for the Microsoft Authenticator app.

• Apple iOS - Settings > Notifications > Authenticator > make your selections here
• Android - Settings > Notifications > App settings > Authenticator > make your selections here
• Depending upon your versions also check inside the Microsoft Authenicator app > 3 lines > Settings > Notifications
• Is your phone in Do Not Disturb or Quiet mode? These modes can prevent apps from sending notifications

 If you've changed devices, see Transfer MFA - Old to New Phone

A.

We can set a temporary passkey that lasts up to 8 hrs. Please contact Service Desk

If you had a second device configured already e.g. iPAD or Tablet

If you had a device/browser that was still holding it's token (not prompting for approval)

A. If the new MFA login screen doesn't work or appear, try these options in the first instance:
It's not working in my browser, what do I do?

A.
See Common problems with two-step verification for a work or school account - Microsoft Support

A. The Authenticator App will work as long as you have wireless access.
If you do not have internet access you can still use the One-Time password code in the app.

A.
See Download Microsoft Authenticator in China - Microsoft Support