Multi-Factor Authentication (MFA) - FAQs

Who needs to set up MFA?

All users of KPU accounts will need to set up MFA.
This includes all staff and faculty, students, and other external users.

All users other than our students have already had MFA enabled.

How do I set up MFA?
 

If you are not part of the current enforced enrollment group, you can enroll yourself at any time here.

Once you have enrolled yourself, or been added to an enforced group, on your next log into one of the applications protected with MFA, you will be prompted for additional security information and walked through the MFA registration process.

How often will I need to use MFA to authenticate?
 

Any time you are logging into your Microsoft account you will need to use MFA.

What is affected by MFA?

Any application you sign into using your Microsoft account will require you to use MFA.
All applications accessed via One.KPU.ca other than moodle.

How do I change my MFA sign-in method?
 

Log into portal.office.com, go to your account page, then Security info.
From there, you can add or change your sign-in method using the “+ Add sign-in method” and “Change” links.

How much data does Microsoft Authenticator use?
 

If you are using Microsoft Authenticator with push notifications, it will use 100KB to 200KB per authentication.
If you are using it or another authenticator app for TOTP Codes, no data is required.

I’m using Microsoft Authenticator with notifications. How do I sign in if I don’t have access to mobile data when travelling?
 

If you are planning to be without access to mobile data, but still need access to your account, you can still use MFA with push notifications if your device is on WiFi.
Alternatively, before leaving you can add your Microsoft Authenticator app as a TOTP Token generator and no data will be required.

I don’t have or am unable to use a mobile device. What else can I use?
 

Two options exist for users that are unable to use a mobile app for MFA:
Authy for Desktop
  Authy is a TOTP-Based Multifactor authenticator app that can be installed on Windows, Mac, and Linux, available here: https://authy.com/download/

If you still require another option, please contact the service desk at 604.599.2116, or servicedesk@kpu.ca.
 

What do I do if I have lost, broken, or temporarily forgotten my phone or hardware token at home?
 

The IT service desk can temporarily disable MFA on your account to get you back into your account temporarily, or reset your authentication method in the event that you have broken, lost, or factory reset your device.