Multi-Factor Authentication - JHU - Revision history

Phil at 14:29, 7 June 2024

2024-06-07T14:29:38Z

Steve410: /* Authenticators */

2022-09-28T13:28:38Z

Authenticators

Steve410: /* Authenticators */

2022-09-28T13:27:56Z

Authenticators

Steve410: /* Authenticators */

2022-09-28T13:25:50Z

Authenticators

Steve410: /* Setting Up Multi-Factor Authentication */

2022-09-28T13:19:13Z

Setting Up Multi-Factor Authentication

Steve410: /* Authenticators */

2022-09-28T13:18:59Z

Authenticators

Steve410: /* Authenticators */

2022-09-22T15:10:02Z

Authenticators

Steve410: /* Authenticators */

2022-09-22T15:07:53Z

Authenticators

Steve410: /* Authenticators */

2022-09-22T15:07:28Z

Authenticators

Steve410: /* Setting Up Multi-Factor Authentication */

2022-06-03T18:10:23Z

Setting Up Multi-Factor Authentication

@@ Line 36: / Line 36: @@
 :As part of the MFA setup process, you will end up having to choose an '''authenticator''' method to use.  There are several authenticator methods:
-* '''Text your phone for approval to connect to the website.'''  Called Push-To-Approve, your phone would receive a text from the secured JHU website asking you to approve the connection.  You would use the Microsoft Authenticator app to respond to that prompt.  <span style="color:#ff0000">As of Fall, 2022 (estimated November 16, 2022), JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access.  Instead, you will need to use one of the below methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)</span>
+* '''Text your phone for approval to connect to the website.'''  Called Push-To-Approve, your phone would receive a text from the secured JHU website asking you to approve the connection.  You would use the Microsoft Authenticator app to respond to that prompt.  {{red|As of Fall, 2022 (estimated November 16, 2022), JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access.  Instead, you will need to use one of the below methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)}}
-* '''Text your phone for a numerical code:'''   <span style="color:#ff0000"> Being implemented Fall, 2022</span>  When JHU needs you to enter your MFA code during login to JHU's MFA-required pages/apps, they will text your phone with the MFA code that you will use to enter into whatever prompt they send you.  You ''may'' need to do this via a Microsoft Authenticator app you'd run on your device.  This is called the "Number Match" method.
+* '''Text your phone for a numerical code:'''   {{red| Being implemented Fall, 2022}}  When JHU needs you to enter your MFA code during login to JHU's MFA-required pages/apps, they will text your phone with the MFA code that you will use to enter into whatever prompt they send you.  You ''may'' need to do this via a Microsoft Authenticator app you'd run on your device.  This is called the "Number Match" method.
-* '''Use an app/program:'''   <span style="color:#ff0000">This method will continue to remain</span>  With this method, ''you are not texted by the website.''  Instead, the website will prompt you to enter a code.   On an authenticator app you'd install on your phone or computer, you would run the authenticator app, and that will provide a 6-digit number code to enter when you are prompted at JHU for your MFA code.     JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code.  You can download Microsoft Authenticator according to instructions from the enrollment process video.  Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth.  Macs, Androids and IPhones have various authenticators available as well.  Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.
+* '''Use an app/program:'''   {{red|This method will continue to remain}}  With this method, ''you are not texted by the website.''  Instead, the website will prompt you to enter a code.   On an authenticator app you'd install on your phone or computer, you would run the authenticator app, and that will provide a 6-digit number code to enter when you are prompted at JHU for your MFA code.     JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code.  You can download Microsoft Authenticator according to instructions from the enrollment process video.  Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth.  Macs, Androids and IPhones have various authenticators available as well.  Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.
 :<!--NOTE: If you want to change your authenticator method or manage your MFA at some point, please first visit the main [https://it.johnshopkins.edu/services/directoryservices/jhea/AzureMFA/AzureLoginMFA Azure MFA page] and then click on ''Manage Azure MFA''.-->
@@ Line 54: / Line 54: @@
-<span style="color:#ff0000">'''NOTE:'''  If you have any issues with setting up Multi-factor authentication, ''you should contact'' [[Contacting_JHU_IT_Support | JHU IT Support]].</span>
+{{red|'''NOTE:'''  If you have any issues with setting up Multi-factor authentication, ''you should contact'' [[Contacting_JHU_IT_Support | JHU IT Support]].}}
 [[Category:Security]]

@@ Line 40: / Line 40: @@
 * '''Text your phone for a numerical code:'''   <span style="color:#ff0000"> Being implemented Fall, 2022</span>  When JHU needs you to enter your MFA code during login to JHU's MFA-required pages/apps, they will text your phone with the MFA code that you will use to enter into whatever prompt they send you.  You ''may'' need to do this via a Microsoft Authenticator app you'd run on your device.  This is called the "Number Match" method.
-* '''Use an app/program:'''  With this method, ''you are not texted by the website.''  Instead, the website will prompt you to enter a code.   On an authenticator app you'd install on your phone or computer, you would run the authenticator app, and that will provide a 6-digit number code to enter when you are prompted at JHU for your MFA code.     JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code.  You can download Microsoft Authenticator according to instructions from the enrollment process video.  Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth.  Macs, Androids and IPhones have various authenticators available as well.  Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.
+* '''Use an app/program:'''   <span style="color:#ff0000">This method will continue to remain</span>  With this method, ''you are not texted by the website.''  Instead, the website will prompt you to enter a code.   On an authenticator app you'd install on your phone or computer, you would run the authenticator app, and that will provide a 6-digit number code to enter when you are prompted at JHU for your MFA code.     JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code.  You can download Microsoft Authenticator according to instructions from the enrollment process video.  Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth.  Macs, Androids and IPhones have various authenticators available as well.  Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.
 :<!--NOTE: If you want to change your authenticator method or manage your MFA at some point, please first visit the main [https://it.johnshopkins.edu/services/directoryservices/jhea/AzureMFA/AzureLoginMFA Azure MFA page] and then click on ''Manage Azure MFA''.-->

@@ Line 38: / Line 38: @@
 * '''Text your phone for approval to connect to the website.'''  Called Push-To-Approve, your phone would receive a text from the secured JHU website asking you to approve the connection.  You would use the Microsoft Authenticator app to respond to that prompt.  <span style="color:#ff0000">As of Fall, 2022 (estimated November 16, 2022), JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access.  Instead, you will need to use one of the below methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)</span>
-* '''Text your phone for a numerical code:'''  When JHU needs you to enter your MFA code during login to JHU's MFA-required pages/apps, they will text your phone with the MFA code that you will use to enter into whatever prompt they send you.  You ''may'' need to do this via a Microsoft Authenticator app you'd run on your device.  This is called the "Number Match" method.
+* '''Text your phone for a numerical code:'''   <span style="color:#ff0000"> Being implemented Fall, 2022</span>  When JHU needs you to enter your MFA code during login to JHU's MFA-required pages/apps, they will text your phone with the MFA code that you will use to enter into whatever prompt they send you.  You ''may'' need to do this via a Microsoft Authenticator app you'd run on your device.  This is called the "Number Match" method.
 * '''Use an app/program:'''  With this method, ''you are not texted by the website.''  Instead, the website will prompt you to enter a code.   On an authenticator app you'd install on your phone or computer, you would run the authenticator app, and that will provide a 6-digit number code to enter when you are prompted at JHU for your MFA code.     JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code.  You can download Microsoft Authenticator according to instructions from the enrollment process video.  Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth.  Macs, Androids and IPhones have various authenticators available as well.  Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.

@@ Line 36: / Line 36: @@
 :As part of the MFA setup process, you will end up having to choose an '''authenticator''' method to use.  There are several authenticator methods:
-* Text your phone for approval to connect to the website.  Called Push-To-Approve, your phone would receive a text from the secured JHU website asking you to approve the connection.  You would use the Microsoft Authenticator app to respond to that prompt.  <span style="color:#ff0000">As of Fall, 2022 (estimated November 16, 2022), JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access.  Instead, you will need to use one of the below methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)</span>
+* '''Text your phone for approval to connect to the website.'''  Called Push-To-Approve, your phone would receive a text from the secured JHU website asking you to approve the connection.  You would use the Microsoft Authenticator app to respond to that prompt.  <span style="color:#ff0000">As of Fall, 2022 (estimated November 16, 2022), JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access.  Instead, you will need to use one of the below methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)</span>
-* Text your phone:  When JHU needs you to enter your MFA code during login to JHU's MFA-required pages/apps, they will text your phone with the MFA code that you will use to enter into whatever prompt they send you.  You ''may'' need to do this via a Microsoft Authenticator app you'd run on your device.  This is called the "Number Match" method.
+* '''Text your phone for a numerical code:'''  When JHU needs you to enter your MFA code during login to JHU's MFA-required pages/apps, they will text your phone with the MFA code that you will use to enter into whatever prompt they send you.  You ''may'' need to do this via a Microsoft Authenticator app you'd run on your device.  This is called the "Number Match" method.
-* Use an app/program:  Alternatively, you can choose to install an authenticator program on your computer (or phone.)   The authenticator program, when run, will provide a 6-digit number code  to enter when you are prompted at JHU for your MFA code.  JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code.  You can download Microsoft Authenticator according to instructions from the enrollment process video.  Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth.  Macs, Androids and IPhones have various authenticators available as well.  Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.
+* '''Use an app/program:'''  With this method, ''you are not texted by the website.''  Instead, the website will prompt you to enter a code.   On an authenticator app you'd install on your phone or computer, you would run the authenticator app, and that will provide a 6-digit number code to enter when you are prompted at JHU for your MFA code.     JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code.  You can download Microsoft Authenticator according to instructions from the enrollment process video.  Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth.  Macs, Androids and IPhones have various authenticators available as well.  Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.
 :<!--NOTE: If you want to change your authenticator method or manage your MFA at some point, please first visit the main [https://it.johnshopkins.edu/services/directoryservices/jhea/AzureMFA/AzureLoginMFA Azure MFA page] and then click on ''Manage Azure MFA''.-->

@@ Line 36: / Line 36: @@
 :As part of the MFA setup process, you will end up having to choose an '''authenticator''' method to use.  There are several authenticator methods:
-* Text your phone for approval to connect to the website.  Called Push-To-Approve, your phone would receive a text from the secured JHU website asking you to approve the connection.  You would use the Microsoft Authenticator app to respond to that prompt. * <span style="color:#ff0000">As of Fall, 2022 (estimated November 16, 2022), JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access.  Instead, you will need to use one of the below methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)</span>
+* Text your phone for approval to connect to the website.  Called Push-To-Approve, your phone would receive a text from the secured JHU website asking you to approve the connection.  You would use the Microsoft Authenticator app to respond to that prompt.  <span style="color:#ff0000">As of Fall, 2022 (estimated November 16, 2022), JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access.  Instead, you will need to use one of the below methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)</span>
 * Text your phone:  When JHU needs you to enter your MFA code during login to JHU's MFA-required pages/apps, they will text your phone with the MFA code that you will use to enter into whatever prompt they send you.  You ''may'' need to do this via a Microsoft Authenticator app you'd run on your device.  This is called the "Number Match" method.

@@ Line 40: / Line 40: @@
 * Use an app/program:  Alternatively, you can choose to install an authenticator  program on your computer (or phone.)   The authenticator program, when run, will provide the 6-digit number  to enter when you are prompted at JHU for your MFA code.  JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code.  You can download Microsoft Authenticator according to instructions from the enrollment process video.  Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth.  Macs, Androids and IPhones have various authenticators available as well.  Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.
-* <span style="color:#ff0000">As of Fall, 2022, JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access.  Instead, you will need to use one of the above methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)</span>
+* <span style="color:#ff0000">As of Fall, 2022 (estimated November 16, 2022), JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access.  Instead, you will need to use one of the above methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)</span>
 :<!--NOTE: If you want to change your authenticator method or manage your MFA at some point, please first visit the main [https://it.johnshopkins.edu/services/directoryservices/jhea/AzureMFA/AzureLoginMFA Azure MFA page] and then click on ''Manage Azure MFA''.-->

← Older revision		Revision as of 15:07, 22 September 2022
Line 39:		Line 39:

	* Use an app/program: Alternatively, you can choose to install an authenticator program on your computer (or phone.) The authenticator program, when run, will provide the 6-digit number to enter when you are prompted at JHU for your MFA code. JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code. You can download Microsoft Authenticator according to instructions from the enrollment process video. Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth. Macs, Androids and IPhones have various authenticators available as well. Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.		* Use an app/program: Alternatively, you can choose to install an authenticator program on your computer (or phone.) The authenticator program, when run, will provide the 6-digit number to enter when you are prompted at JHU for your MFA code. JHU suggests you use the Microsoft Authenticator App (for Windows) to generate that numerical code. You can download Microsoft Authenticator according to instructions from the enrollment process video. Additionally, you can choose to run other authenticators to run (under Windows) instead, including a program called WinAuth. Macs, Androids and IPhones have various authenticators available as well. Note that the codes are generated using time-based factors... so, the code you generate needs to be entered soon (up to a minute) when you are prompted, otherwise, you need to generate another code.
		+
		+	<span style="color:#ff0000">* As of Fall, 2022, JHU is removing the method that some users have used, called '''''"Notify me through App (Push to Approve)"''''', where JHU would text you to ''approve'' the connection access. Instead, you will need to use one of the above methods, where you'll need to enter a numerical authentication code (what JHU calls, ''Number Match''.)</span>

	:<!--NOTE: If you want to change your authenticator method or manage your MFA at some point, please first visit the main [https://it.johnshopkins.edu/services/directoryservices/jhea/AzureMFA/AzureLoginMFA Azure MFA page] and then click on ''Manage Azure MFA''.-->		:<!--NOTE: If you want to change your authenticator method or manage your MFA at some point, please first visit the main [https://it.johnshopkins.edu/services/directoryservices/jhea/AzureMFA/AzureLoginMFA Azure MFA page] and then click on ''Manage Azure MFA''.-->

@@ Line 28: / Line 28: @@
 <!--'''NOTE:  In order for some of the links below to bring you to the correct site, you may need to be on the JHU network (or the JHU VPN.)''' -->
-:To get started with MFA, you will need to visit the Azure MFA Resource Center's '''''<!-- [http://it.johnshopkins.edu/services/directoryservices/jhea/AzureMFA/AzureMFAEnrollment-->https://t.jh.edu/mfa  Enrollment Page]''''' to enroll. <!--  your JHED ID to have it work in conjunction with what JHU calls its ''myIT Login Code''.-->
+:To get started with MFA, you will need to visit the Azure MFA Resource Center's '''''<!-- [http://it.johnshopkins.edu/services/directoryservices/jhea/AzureMFA/AzureMFAEnrollment-->[https://t.jh.edu/mfa  Enrollment Page]''''' to enroll. <!--  your JHED ID to have it work in conjunction with what JHU calls its ''myIT Login Code''.-->
 :That page and its video will show you how to enroll your JHED ID with the Azure MFA. The video is very helpful in explaining the process. You are encouraged to watch it all the way through.