Multi-Factor Authentication

Lethbridge College will introduce Multi-Factor Authentication (MFA) for all employees starting July 28, 2021. This will affect all employees at some time, depending on where they are logging in to Lethbridge College applications and accounts.

 

What is Multi-Factor Authentication (MFA)?

MFA is a way to verify the identity of a person attempting to access a Lethbridge College account. It adds a level of security to the username and password by requiring you enter a verification code sent to your cell phone or non-Lethbridge College email address.

Likely you have already experienced MFA which may be required by other services you use such as Canada Life health benefits website, Amazon and others.

Why do we need this?

Institutions like Lethbridge College are high-value targets of global hackers. In 2020, it's estimated ransomware alone cost institutions and businesses $20 billion in ransom and downtime. MFA is a way to add a level of security to our systems. It's also a requirement of our cyber-insurance.

What do I need to do?

1. Login to a Lethbridge College app, such as Outlook or Teams, while you are off campus on July 28 or later.  Have the mobile device you most often have with you handy as well as a non-Lethbridge College email address that you can easily access.

During login, you will be prompted to provide more information. The window will look like this:

2. Click next and you'll see a window to enter your password. Sign in.

3. A window will pop up asking you for a phone number and giving you the choice of whether to be texted an authentication code or contacted with an automated voice call. Enter your phone number, choose text or call then scroll down to click Next.

4. Check your phone for the text or voice call of a six-digit code to enter. You'll enter that code and click Next on a screen that looks like this:

The next window will confirm your phone code was received and your registration of that number was successful.

5. Click Next, and you'll be asked for the email you'd like to use for authentication purposes. NOTE: You can't use your @lethbridgecollege.ca address for this purpose. Enter an email address you can readily access, and click Next.

6. Check the email account you entered for an email giving you a six-digit authentication code and enter it in the space provided:

Success! You'll see this box confirming how you'll be able to authenticate your user name and password, if prompted, when working off campus. 

This registration process only needs to be done once. If you're asked to authenticate a future login, a code will be sent to your phone or email as you entered them here. 

 

 

How do I get email on my mobile device?

If you access your email on a mobile device (smartphone or tablet), you may have to reconfigure the account, depending on how it is currently configured:

  • If you use the Outlook Mobile app, you can continue using this app, though you may be prompted for MFA from time to time when accessing your email from off campus.
  • If you use your device’s default mail client (either iOS or Android), or another mail app, either:
    • Switch to the Outlook Mobile app, or
    • Remove and re-configure your Lethbridge College email account on your device by:
      • In your account settings, remove your @lethbridgecollege.ca account settings
      • Reboot your device
      • Re-configure the account using the instructions for your type of device on the Accessing email page – you will be prompted for MFA as part of the setup.

You can find links to download the Outlook Mobile app on the Go mobile page.

What happens if I don't set up my authentication information?

You will continue to be prompted to do so until the process has been successfully completed.

Will I need to authenticate my login every time?

No. If you are on campus, your username and password will suffice. There are other security systems at work while you're on campus.

You will be asked to authenticate when accessing your account from any device off campus, whether you are on a VPN (Virtual Private Network) or not. The frequency of the authentication requests will vary but everyone employed by Lethbridge College should expect to see authentication requests occasionally when working off campus.

What should I do if I get a verification request I don't recognize?

When in doubt, call or email the help desk at 403-320-3333 or helpdesk@lethbridgecollege.ca.

Is my authentication contact information private?

Yes. The cell phone number and email address you enter is saved to private authentication fields that are accessible to you as part of your unique Office 365 identity. Some members of the Lethbridge College ITS team can also access this information in order to provide support.

If you have questions about the collection of personal information, please refer to the Website privacy statement.

Can I use the Microsoft Authenticator app?

After you've registered your account for Multi-Factor Authentication, you may want a more simple and secure way to authenticate. Microsoft has developed the Microsoft Authenticator app to improve the authentication experience.

You may see a link mentioning the app during your registration, or you can click here for more information.

You can also find links to download the Microsoft Authenticator app on the Go mobile page.