What is MFA?

Protect your account

MFA requires multiple forms of authentication before you are granted access to your account. You have used a type of MFA before, such as when withdrawing money from an ATM. You need both your bank card and a PIN to complete the transaction.

When accessing university systems after setting up MFA on your USask account, you will be prompted to supply your NSID and password and then a second piece of information, such as six-digit code from your phone.

Did you know?

On average, there are 11 million logins per month to USask web applications protected by CAS.

Each month, USask members receive approximately 3000 phishing attempts via email.

It only takes one compromised account to put your information, sensitive data and university infrastructure at high risk.

Why Use MFA?

Remote teaching, learning, and working makes us more vulnerable than ever to cyber attacks.

As a USask community member, you have access to sensitive information about students, staff, university or research data. Verifying your identity makes it difficult for cyber criminals to access or steal information like:

  • Accounts, including email
  • Personal information (e.g. payroll information)
  • Documents, research funds, and more!

Passwords are increasingly easy to compromise. They are often stolen, guessed, or hacked — you might not even know someone is accessing your account. Using MFA keeps your account secure even if your password is compromised. MFA can even alert right away (on your phone) if someone is trying to log into your account.

Who Needs MFA?

Everyone with a USask account needs MFA.

This includes all current students, staff, and faculty, as well as alumni, professor emeritus, and retirees. You can get started now by logging into MyProfile. Visit the Knowledge Base article for step-by-step instructions on setting up MFA.

How to Set Up MFA

Enable MFA in MyProfile. Instructions for setting up MFA on your devices is available in this Knowledge Base article. 

How it Works

Once you have set up MFA you will login as usual with your NSID and password, and then use your authentication method to verify that it is you.

         

  1. Enter username and password as usual

  2. Use your phone to verify your identity

  3. Securely log in

MFA provides you the ability to add multiple devices and verification factors to your account. For example, you can use your mobile phone and a landline, a landline and a hardware token, two different mobile devices, etc. USask recommends having two MFA verification options for recovery purposes (i.e. if you lose your phone).

Get Support for MFA

For additional support contact, IT Support Services or visit our FAQs.

MFA Implementation at USask

Timeline

USask Systems with MFA

Current MFA-enabled services at USask include MyProfile, Office 365, IAM, AboutUS, and Vault. Additional university services will have MFA enabled in 2021.