I never use a personal device, should I enrol?
Yes. MFA will significantly improve the security of your staff network account, and it is highly recommended that you enrol, even if you do not use a personal device.
Can I register my University email address as an enrolment method?
No. MFA is designed to protect your University email account, and if you're prompted to authenticate with MFA you will be unable to access your University email account to get access to the One Time Passcode (OTP).
I have started using MFA with another service related to my role at the University but is provided externally (eg. HESA) Do I still have to enrol?
Yes. Whilst you may have set up MFA with an external service provider, you will still be required to set up MFA on your University network account specifically.
Can I use SMS or a Telephone Call as an enrolment method with MFA?
No, these services have not been enabled for staff.
Can I advise students to enrol?
No. Students will be provided a different MFA service, which will be communicated separately. The guidance on this page only applies to staff.
Can I proceed without enrolling?
IT Services highly recommends enrolling with MFA to ensure that your account is protected to the best standard. Furthermore, should you not enrol, you may be prompted for MFA for certain services that require a higher degree of security, even on University provided computers.
I manage a generic account; will I need to set up MFA for this account too?
No. MFA will be rolled out to generic accounts in a separate way at a later date. This will be communicated separately.
I facilitate access to guest, contractors, or collaborative partner students. How will they be affected?
These roles will not be affected by the MFA rollout for staff. MFA will be enabled for these accounts at a later date, and will be communicated with separately.
How often will I be prompted to authenticate?
University services accessed through a web browser will time out after 4 hours of inactivity, this is the same for authenticating with your password or with MFA. Mobile Apps (For example, Microsoft Outlook for Mobile) have a longer inactivity timeout set by the application vendor, and will not require authentication as frequently as access through a web browser.
What if I'm prompted for MFA, and I don't have my authentication method with me?
It is highly recommended that you enrol at least two devices with MFA. Guidance on managing your enrolment methods can be found above under the section entitled 'How do I register an alternative, backup method?'