Who needs to set up MFA?
All users of KPU accounts will need to set up MFA.
This includes all staff and faculty, students, and other external users.
All active KPU students must sign up for MFA by fall 2024
How do I set up MFA?
Please click here to self-enroll for MFA.
Once you have enrolled yourself, on your next log into one of the applications protected with MFA, you will be prompted for additional security information and walked through the MFA registration process.
MFA will be made mandatory for all active KPU students in fall 2024.
What MFA methods are available?
Microsoft Authenticator app : We recommend the use of Microsoft Authenticator app, as it integrates directly with your Microsoft Account at KPU, and is supported on most smartphones and tablets on both iOS and Android.
Google Authenticator app : As this is a 3rd party app KPU IT will only be able to provide limited support on the use of this app.
Other TOTP-based MFA apps should also work, though we cannot guarantee full support or functionality of all MFA applications.
How often will I need to use MFA to authenticate?
Any time you are logging into your Microsoft account you will need to use MFA.
What is affected by MFA?
Any application you sign into using your Microsoft account will require you to use MFA.
All applications accessed via One.KPU.ca including Moodle.
How do I switch my MFA method?
If you wish to change MFA authenticator app for example from MS Authenticator to Google Authenticator or vise versa: Log into portal.office.com, go to your account page, then Security info.
From there, you can add or change your sign-in method using the “+ Add sign-in method” and “Change” links.
How much data does Authenticator apps use?
For both Microsoft and Google Authenticator apps, data is only required for push notification feature. Each notification may use up to 200KB of data. Both apps can be used offline, without cellular data or Wi-Fi.
I’m using Microsoft Authenticator with notifications. How do I sign in if I don’t have access to mobile data when travelling?
If you are planning to be without access to mobile data, but still need access to your account, you can still use MFA with push notifications if your device is on Wi-Fi.
Alternatively, before leaving you can add your Microsoft Authenticator app as a TOTP Token generator and no data will be required.
Click here for detail instruction on how to use the Microsoft Authenticator app with out cellular data or WiFi.
What do I do if I have lost, broken, or temporarily forgotten my phone or hardware token at home?
What if I do not have a smart phone to install the Authenticator app?
Please contact the IT Service Desk (604-599-2116 or servicedesk@kpu.ca)
Can I use voice message or text message as a MFA method?
Voice and text messages are considered as weak MFA methods therefore they are NOT supported