What is MFA?
Protect your account
MFA requires multiple forms of authentication before you are granted access to your account. You have used a type of MFA before, such as when withdrawing money from an ATM. You need both your bank card and a PIN to complete the transaction.
When accessing university systems after setting up MFA on your USask account, you will be prompted to supply your NSID and password and then a second piece of information, such as six-digit code from your phone.
Did you know?
On average, there are 11 million logins per month to USask web applications protected by CAS.
Each month, USask members receive approximately 3000 phishing attempts via email.
It only takes one compromised account to put your information, sensitive data and university infrastructure at high risk.
Why Use MFA?
Remote teaching, learning, and working makes us more vulnerable than ever to cyber attacks.
As a USask community member, you have access to sensitive information about students, staff, university or research data. Verifying your identity makes it difficult for cyber criminals to access or steal information like:
- Accounts, including email
- Personal information (e.g. payroll information)
- Documents, research funds, and more!
Passwords are increasingly easy to compromise. They are often stolen, guessed, or hacked — you might not even know someone is accessing your account. Using MFA keeps your account secure even if your password is compromised. MFA can even alert right away (on your phone) if someone is trying to log into your account.
Who Needs MFA?
How to Set Up MFA
How it Works
Once you have set up MFA you will login as usual with your NSID and password, and then use your authentication method to verify that it is you.
Enter username and password as usual
Use your phone to verify your identity
Securely log in
MFA provides you the ability to add multiple devices and verification factors to your account. For example, you can use your mobile phone and a landline, a landline and a hardware token, two different mobile devices, etc. USask recommends having two MFA verification options for recovery purposes (i.e. if you lose your phone).
MFA Implementation at USask
USask Systems with MFA
Current MFA-enabled services at USask include MyProfile, Office 365, IAM, AboutUS, and Vault. Additional university services will have MFA enabled in 2021.