Multi Factor Authentication
In response to increased threats to the University's data and network, the Information Security Steering Group have approved the introduction of Multi Factor Authentication for staff accounts.
​How does MFA work?
If you use mobile banking, you will most likely have come across Multi-Factor Authentication already.
In addition to requiring your password for access, MFA adds an extra layer of security to your account by requiring a secondary action to complete your login. This makes it significantly more difficult for any unauthorised attempts to access your account and data.
This extra login step, called your Second Factor, is carried out using a smartphone or FIDO2 device, and can be configured in the following ways:
- ​​​A notification received through the Microsoft Authenticator app, prompting you to enter a 2-digit number shown on screen. This is the most secure and convenient method and is recommended by IT.
- Entering a 6-digit code from within your MFA app, known as an OATH code.
- Configuring a FIDO2 Key (for example, a YubiKey) that plug into your device to authenticate.
How do I set up and use MFA?
Every account must be secured with MFA. To access Horizon, Office 365, and other QMU applications remotely (away from campus) from any device, you will need to set up Multi-Factor Authentication. You don't need to be on campus to set it up, and the process takes around 5 minutes start to finish.
Please use the following guide to configure MFA on your account. It is mandatory to keep your account secure.
ITS recommends using the Microsoft Authenticator method, as it is the fastest and most secure.
Please follow this guide to set up alerts from the Authenticator App (opens in a new tab).
Once your MFA setup is complete, you will be alerted in real time if there is an attempt to access your account. It is very important that you approve access only when you know the login. If you receive an out-of-the-blue request to grant access, you can contact the Helpdesk (helpdesk@qmu.ac.uk) immediately and have your password changed.
What if I change my phone?
If you change your mobile phone, please follow the steps laid out in the below guide.
How do I change my MFA device(opens in a new tab)
FIDO2, PassKeys
If you have purchased a FIDO2 key, please follow the to configure this authentication method.
