MFA registration during first login to your Acclaro Account
A - Multifactor Authentication - MFA definition
1) Why do we need to set up the MFA for our accounts?
- Currently, traditional passwords (authentication done with only a username and a password) aren't secure enough anymore. While usernames are often easy to discover, sometimes they're your email address. And passwords can be hard to remember, people tend to pick simple ones or use the same password for many different sites.
---> That's why every account is required to be added 1 more additional way to be more secure.
- You might have heard about it, such as " Two-Step Verification" or "MFA - Multifactor Authentication", both follow the same principle.
2) What are the factors?
- When you sign into the account for the first time on a new device or app, you will be asked for the username and password. You will also be asked for a second thing - what we call a second "factor" to prove who you are.
- A "factor" in authentication is a way of confirming your identity when you try to sign in. For example, a password is already one kind of factor.
- There are 3 most common kinds of factors:
- Something you know: a Password, or a Memorized PIN code.
- Something you have: a Smartphone, or a Secure USB key.
- Something you are: a Fingerprint or Facial recognition.
3) How does multifactor authentication work?
- Let's say you're going to sign into your work or school account, you enter your username & password. If that's all you need to log in, then anybody who knows your username and password can just sign in as you from anywhere in the world! (sometimes, all they need is your username only and they will use the tools to break your password).
Still, if you have Multifactor Authentication enabled, things get more interesting.
---> The first time you sign in on a device or app you enter your username and password as usual, then you get prompted to enter your second factor to verify your identity:
- This is an example of the Microsoft Authenticator app as your second factor:
It shows you a unique, dynamically created 6-digit number that you will type into the site and it will let you in. (The number is changed every 30 seconds).
- If somebody else tries to sign in with your account, with your username and password, they will get prompted for this second factor --> Then they're stuck! UNLESS they HAVE your smartphone.
4) Important notes for MFA:
- You won't have to do the second step very often: Generally, it will ask you for the first time to sign into the app or device, or the first time after you change your password.
The extra security comes from the fact somebody trying to break into your account is probably not using your device. so they will need to have that second factor to get in.
- Multifactor authentication is not just for work or school. Almost every online service from bank, and personal email to social media accounts, supports adding a second step of authentication and you should go to your account settings for those services and turn the MFA on.
B - Set up MFA with your Acclaro Account
1) Once you have signed in for the first time from the login page: you are prompted to provide additional information:
2) Getting the Microsoft Authenticator app:
- If you have not yet installed the Microsoft Authenticator on your phone, here you are:
iOS:
Android:
Once it is installed, choose "Next":
3) Follow the on-screen instructions for the configuration:
4) Scan the QR code to connect the app with your account:
Open the Authenticator app on your phone, and select + icon to add your account:
Select Work or school account:
Tap on Scan a QR code:
You can see the account has been added. On your computer screen, select Next:
5) On your computer screen, you will see a number:
You need to enter this number (two digit) into the Authenticator app, and then select Yes:
Once you enter the correct number, you can see the approved screen. Select Next:
6) Register your phone, enter your country code and phone number, and select receive a code option. Next:
The system will send an SMS code to your phone number, you need to enter the code, and then select Next:
Once the verification is completed, select Next:
Select Done to continue singing in:
Open your Authenticator app, and enter the number shown:
Update your password and then click Sign in:
Congratulation!
You are now logged in to your ACCLARO account and the Multi-Factor Authentication is set up correctly.