Multifactor authentication, sometimes known as two-factor authentication, is a security enhancement that adds another layer of security to your online account, beyond your username and password.

It combines two or more methods (or factors) of authentication from independent categories of credentials to verify your identity for a login or other transaction.

• Two-factor authentication or multi-factor authentication (MFA) is a security enhancement that protects each CMS staff member and student. Educational organizations are a prime target of cybercriminals and hackers looking to steal data or even cripple our infrastructure, which is critical in providing services to our stakeholders. 

• Implementing MFA, combined with practicing good cybersecurity habits when checking email and using the internet, protects staff and student data, even if your password is hacked.

• O365 – Outlook, etc. 

• Google Workspace 

• CMSLaunchPad 

• SharePoint Intranet 

• Employee Self-Service

You must authenticate each time you are prompted to log in to an application using MFA.

• MFA is a cyber-insurance requirement for coverage and recommended by the Cybersecurity & Infrastructure Security Agency (https://www.cisa.gov/MFA)
• MFA is a standard practice used throughout the world.
  • The United States government requires MFA sign-in methods for all federal agency staff.    
  • MFA is a standard practice used by most universities, colleges, institutions of higher education. 
  • Other industries include: 
    
    • Banking and Finance  
    • Healthcare 
    • Corporate 
    • Law Enforcement 
• MFA is required for state employees and NC educators to access multiple platforms such as: 
  
  • State Health Plan 
  • NCEDCloud 
  • Orbit 
  • NCID 
  • NCDIT 
  • EVAAS 

Microsoft sends a push notification, prompting you to authenticate your login, to the Microsoft Authenticator app on your mobile device.

Microsoft sends a text message to or calls the mobile phone you have registered.

• For a text message, you receive a six-digit code that you input to complete the authentication process.
• For a phone call, you are prompted to select “#” after answering the call to complete the authentication process. 

Please note the following as you choose a setup method:

• Using the text or phone option requires cellular reception or access to a landline at your location.
• If you are unable to receive calls or texts at your location, please set up the authenticator app.

Authenticator App

Text or Phone

You can update or change your authentication method at any time at the Microsoft Authenticator website.

Learn more about how to make changes.

The CMS Technology Services Help Desk is available via phone on weekdays between 7 a.m. and 5 p.m. at (980)-343-5736 Option 3.

For additional information on selecting the best option for authentication, please refer to the detailed information in the Canvas Multifactor Authentication Training Course.