Technology Services Multi-Factor Authentication https://www. gsw

What is Multi-Factor Authentication? Multi-Factor Authentication (or simply “MFA”) is a means to secure your account by combining two or more (multiple) pieces of information (factors) to verify your identity (authenticate). These factors typically include: Something you know (your username and password) Something you have (ATM card, cell phone, office phone) MFA keeps an attacker that only knows your credentials from gaining access to your account

Why are we doing this? In October of 2017, a phishing attack led to the compromise of more than 20 USG employees’ accounts. The attacker logged in to OneUSG Connect and changed their direct deposit information. The list of victims included three GSW employees. Many of the victims didn’t receive their pay for October until the middle of November. To mitigate the risk of such an event happening in the future, USG mandated the implementation of MFA with OneUSG Connect.

What factors are available? Phone call (this is the default – any phone) You’ll receive a phone call asking you to allow the login by pressing the ‘#’ key. Text message (cell phone) You’ll receive a text message with a temporary PIN that will have to be put into the login page. Push notification (smart device – cell phone or tablet) A message will pop up on your device asking you to allow or disallow the login.

How will it work? You’ll log in as you normally do. After you put in your credentials, you’ll be prompted for your second authentication factor. If you haven’t enrolled in MFA, you’ll be asked to do so. After you successfully pass the second authentication, you’ll get to the OneUSG Connect interface. We’ll pause here for a demo

What if I don’t have a cell phone? MFA does *not* require a cell phone – just a phone that has a keypad and can receive calls. Your office phone and/or home phone will work just fine. Having a cell phone just makes it more convenient.

What if I can’t log in? What if you have your office and home phone set up as authentication factors, and you’re in Athens for a conference. Oh no – You need to approve time and you can’t log in to OneUSG Connect! This would be handled as if you had lost your password and can’t log in. You would need to contact either HR or Payroll in order to perform the task for you.

Contact Technical Support Need Help? Contact Technical Support Morgan Hall 229-931-2074 techsupp@gsw.edu https://www.gsw.edu/iit