Multifactor Authentication - MFA

26 Mar 2019

 

 

What is Multi-Factor Authentication (MFA)?

Though the name sounds intimidating, MFA is nothing but a code sent to your mobile phone that needs to be entered as a second verification method whenever you access your O365 account. And as simple as it sounds, the security benefits achieved are immense!

 How does MFA increase my online security?

Imagine someone gets access to your O365 password. This means the perpetrator can now log-in to your account and immediately get access to all your email, OneDrive documents and even impersonate you at Skype for Business online meetings.

With MFA activated, the perpetrator will be challenged to enter a second code that will be sent to YOUR mobile phone, therefore, he won't be able to log in. At the same time, you will receive this code to your mobile phone which will, immediately, alert you that someone has compromised your password and was trying to access your information.

Simply enter the code sent to your mobile phone to verify

 

Do l need to enter this code always?

For your Outlook desktop client and mobile phone application, you will only need to enter it the first time MFA is configured. However, anytime you access your office 365 account through the web, for example when accessing your email through the web interface, it will request you to enter this code. (If you do not login to Outlook on your desktop for 14 days or more, you will be asked to enter this code again for re-authentication.)

 

What should I do if I receive a code I didn't request for?

Two important and immediate actions need to happen:

(1) Contact ICTS Service desk alerting us about the breach (Ext- 2-1111 or ICTS.Servicedesk@un.org)

(2) Change your password. When you receive a code to your mobile phone where you have not attempted to access your O365 account, it means someone has compromised your password and you should immediately change it. To do this, simply open in your browser https://uniteid.un.org and log-in using your UniteID username and password. Then select Change Password

Follow these steps to change your UniteID password

 

How do I request for MFA activation?

If you haven't yet been contacted to have MFA activated and would like to start getting protected immediately, please call us on Ext.2-1111 or write an email to ICTS.Servicedesk@un.org. We are currently at 60% deployment rate of more than 3200 accounts. We are targeting to finish by end June 2019.

MFA Deployment plan

 For more information, please access the Multi-Factor Authentication FAQs

 

What is Multi-Factor Authentication (MFA)?

Though the name sounds intimidating, MFA is nothing but a code sent to your mobile phone that needs to be entered as a second verification method whenever you access your O365 account. And as simple as it sounds, the security benefits achieved are immense!

 

How does MFA increase my online security?

Imagine someone gets access to your O365 password. This means the perpetrator can now log-in to your account and immediately get access to all your email, OneDrive documents and even impersonate you at Skype for Business online meetings.

With MFA activated, the perpetrator will be challenged to enter a second code that will be sent to YOUR mobile phone, therefore, he won't be able to log in. At the same time, you will receive this code to your mobile phone which will, immediately, alert you that someone has compromised your password and was trying to access your information.

 

 

Simply enter the code sent to your mobile phone to verify

 

Do l need to enter this code always?

For your Outlook desktop client and mobile phone application, you will only need to enter it the first time MFA is configured. However, anytime you access your office 365 account through the web, for example when accessing your email through the web interface, it will request you to enter this code. (If you do not login to Outlook on your desktop for 14 days or more, you will be asked to enter this code again for re-authentication.)

 

What should I do if I receive a code I didn't request for?

Two important and immediate actions need to happen:

(1) Contact ICTS Service desk alerting us about the breach (Ext- 2-1111 or ICTS.Servicedesk@un.org)

(2) Change your password. When you receive a code to your mobile phone where you have not attempted to access your O365 account, it means someone has compromised your password and you should immediately change it. To do this, simply open in your browser https://uniteid.un.org and log-in using your UniteID username and password. Then select Change Password

 

 

Follow these steps to change your UniteID password

 

How do I request for MFA activation?

If you haven't yet been contacted to have MFA activated and would like to start getting protected immediately, please call us on Ext.2-1111 or write an email to ICTS.Servicedesk@un.org. We are currently at 60% deployment rate of more than 3200 accounts. We are targeting to finish by end June 2019.

 

MFA Deployment plan

 

For more information, please access the Multi-Factor Authentication FAQs

Posted on: 26 Mar 2019