Audience: Franklin University staff, faculty, adjuncts, students, and alumni.
Disclaimer: The results and functionality of the following article only apply to audience listed above
This article contains the following topics:
- What is multi-factor authentication?
- First-time enrollment in MFA
- Replacement Phone or Lost Phone
- MFA Prompt Frequency
- FAQs
What is Multi-Factor Authentication?
Multi-factor authentication (MFA), sometimes knows as two-factor authentication, adds an extra layer of security to your account. MFA is required for all student, staff, and faculty accounts. As it is a regulatory requirement, it is not optional and we will not bypass it for your account.
MFA is used for your Office 365 and for other university-services such as Canvas, Self Service, and more. MFA requires a secondary sign-in verification by way of a text message, automated phone call, or prompt from a mobile app whenever you sign in to your account from a new device or after certain periods of time.
While MFA is often first setup when accessing your email (see video above), other applications at Franklin University use this same MFA instance.
One of the primary goals for enabling this feature is to decrease the likelihood of your account becoming compromised. With MFA enabled, even if someone possessed knowledge of your password, they would still not be able to access your account unless they also possessed your secondary authentication method.
First Time Enrollment
By setting up MFA, you add an extra layer of security to your account sign-in. For example, you first enter your password and, when prompted, you also type a dynamically generated verification code provided by an authenticator app or sent to your phone.
-
Sign into your email, Canvas, or other MFA enable service with your work or school account with your password. If you haven't sign-in before, try accessing your email using the website mail.franklin.edu. After you choose Sign in, you'll be prompted for more information.
-
Choose Next.
-
The default authentication method is to use the free Microsoft Authenticator app. If you have it installed on your mobile device, select Next and follow the prompts to add this account. If you don't have it installed there is a link provided to download it.
If you would rather use SMS messages sent to your phone instead, select I want to set up a different method. Microsoft 365 will ask for your mobile number, then send you an SMS message containing a 6-digit code to verify your device.
Tip: For a faster, and more secure, experience we recommend using an authenticator app rather than SMS verification.
Franklin University does not support use of a secondary email account for MFA.
-
Once you complete the instructions to specify your additional verification method, the next time you sign in to Microsoft 365, you'll be prompted to provide the additional verification information or action, such as typing the verification code provided by your authenticator app or sent to you by text message.
Note: Generally you'll only need the additional verification method the first time you sign into a new app or device, or after you've changed your password. You probably won't be asked for the additional verification code on a daily basis, unless your organization requires it.
What to expect after initial configuration:
For the next several days after enrollment, you may intermittently experience re-prompts to log in to various applications on your computer (Outlook, Word/Excel, OneDrive, Teams). This is expected and it is because there is a delay in your PC recognizing the new authentication method.
Any mobile apps that you are using with your Franklin University credentials will most likely re-prompt you to log in and use your secondary verification method.
I Have a Replacement Phone or I Lost My Previous Phone
Replacement Phone
If you have a new phone and you were already using a text message for your 2 factor authentication, you should be all set. However, if you are using an authenticator app, it will likely require a small configuration change so that the app on the new phone is synced to your account.
1. Log into https://myaccount.microsoft.com/
- If you do not have access to a computer or phone with a logged in session of Office365 email in your browser, you may need to log in to this site using an alternate method. Instructions for doing so are in the Lost Phone section below.
2. Click on the tile entitled Security Info with the link to Update Info.
3. Here you can click on Add method to add an additional authenticator app, which will provide the needed QR code.
- Helpful hint: It is a good idea to enroll your phone number as an alternate sign-in method for text messages, even when the authenticator app is used as the default method.
Lost Phone
If you have lost your phone, you can still log in if you have enrolled other alternate methods of receiving multi-factor verification (assuming you have obtained a replacement device). To test this, try to access your email.
1. When you are taken to the sign in page for Franklin University during the log in process, enter your username and password. When you see the screen regarding 2 factor authentication taking place, click on the Sign in another way link.
- If you do not have access to an alternate method after clicking the Sign in another way link (as shown above), you may need to contact the Help Desk to reset your multi-factor authentication and to delete your old devices. Contact methods for the Help Desk can be found at helpdesk.franklin.edu.
2. You can then, click on Devices tab in the left hand menu to delete any devices with active sessions, such as the lost or stolen phone.
https://myaccount.microsoft.com/device-list
MFA Prompt Frequency
Franklin University partners with many organizations for the provision of services such as Instructure (Canvas), Microsoft (email and more), and so on. When we enable MFA on your account for a service, please keep in mind we only control part of technology that determines how often you are asked to re-enter an MFA code. Our administrators have altered MFA settings within our control to limit MFA prompt frequency. However, factors outside of our control may contribute to the individual MFA frequency experience that each person has. Additionally, different services may prompt of MFA more frequently than others.
Some tips to potentially elongate the amount of time between prompts:
1. Keep an active browser session. Closing the entire browser instead of closing just a tab can make MFA prompts more regular.
2. Monitor your browser settings. While some choose to enable settings to wipe out their browsers temporary data upon ever close for increased security, this will likely result in a prompt for MFA upon each use of the browser.
3. When signing in on your personal computer (do not complete this step on a shared or public computer), use the Keep Me Signed In option to help reduce prompts.
FAQs
1. What happens if I lose access to all of my verification methods and I am unable to log in to my account?
- You may contact the Help Desk and request that MFA be reset so that you can enroll a new verification method. Contact methods for the Help Desk can be found at helpdesk.franklin.edu.
2. Can I get an MFA exemption if I am traveling or lost my phone?
- No, we can help reset MFA, but will not be able to bypass it for you. MFA is a regulatory requirement and is not optional.
3. If using an authenticator app for MFA, does it have to be the Authenticator app from Microsoft?
- No. While we recommend using the Microsoft Authenticator app, there are many other options that will also work for MFA.
4. Can I use MFA codes sent to an alternate email as my MFA method?
- No, Franklin University does not support use of a secondary email account for MFA.
5. What if I do not have access to a secondary device for MFA (no phone right now)?
- While a secondary device (most commonly a phone) is recommended for MFA, alternatively you can download a free authenticator app onto your computer or in your computer browser as a workaround. Then, those authenticator apps can be configured like an authenticator app on your phone (see video and article sections above for further detail). Below are a few screenshot examples from The Microsoft Store and Chrome
- The apps shown in these screenshots are not necessarily ones we recommend or support, but examples of the kinds of alternate authenticator apps may be useable as workarounds.
Further Reading from Microsoft