Passwords are the main way VIU accounts are protected today. However, passwords alone are no longer enough to secure your important documents and access. Cyber criminals can get into your account if they guess your password correctly. They can also trick you into sharing your password by using a phishing email or finding a stolen password that has leaked on the internet. That's why almost all online services (including social media, banks, shopping, etc.) have added a way for your accounts to be more secure.
What is 2-Step Verification (2SV)?
2-Step Verification (commonly referred to as 2SV, Multi-factor Authentication (MFA) or 2-Factor Authentication) allows you to log in only after successfully presenting two or more pieces of evidence or "steps". These steps are a more secure way of verifying that it's you when you try to log in. For example, a password is one kind of step, it's a thing you know.
The three most common types of steps are:
-
Something you know - Such as a password
-
Something you have - Such as a smart phone, hardware token or security key
-
Something you are (also called biometrics) - Such as a fingerprint or facial recognition (VIU does not currently employ this method.)
VIU Employees, Students and Associates that have a VIU account, are now required to use 2SV for some services. With 2SV, your account will be protected with both your password AND your phone, security key or a hardware token. This adds an extra layer of security that prevents unauthorized access to your account and helps to ensure that student and employee data is protected.
What VIU services require 2SV?
- VIU Email
- Microsoft 365 Services (Office, OneDrive, Teams, Forms, etc.)
- IT Client Portal
- VIU Virtual Private Network (VPN)
- Other services will be migrated over time
Who needs to setup 2SV?
Anyone with a VIU account.
How do I setup 2SV on my account?
Click anywhere on the green banner below to open the 2SV set up page:
How do I set up 2SV?
Will I need to set up 2SV for each application?
No. After you've setup 2SV once it will work across all supported services.
What if I already have the Microsoft Authenticator App for another account?
The Microsoft Authenticator App supports multiple accounts.
Open the Microsoft Authenticator App, click the +, choose Work or school account and sign-in with your VIU account to add it.
Do I need to verify every time I sign in?
If you are on campus connected to VIU-Secure or plugged into the network you will not be prompted for 2SV with a few exceptions for sensitive applications such as VPN.
2SV lasts for 30 days, at which point you will be prompted to 2SV again.
2SV is per-device. If you sign-in to Outlook on your laptop and then your phone you will be prompted for 2SV on both and they will have their own 30 day countdowns.
What if I get a 2SV prompt I did not request?
- Check your logged in devices (computers, mobile devices, etc.) for prompts.
- Remember that each device requires re-authentication every 30 days.
- Apps like Outlook or Teams update in the background and may trigger a 2SV prompt while you're not actively using your device
- Make note of the location that the request is coming from. While not precise, the notification should provide the general area that the request is coming from.
- If it is not your device(s) or from a location you recognize, Deny the request and Change Your Password immediately
- A common tactic in these situations is to repeatedly send verification requests until you say yes, just to make the notifications stop. Changing your password should make them stop. If it does not, please contact IT immediately.
What is the recommended method of 2SV?
The Microsoft Authenticator mobile app is our recommendation. It can be downloaded for iPhone or Android.
What if can't use the Microsoft Authenticator App?
If you cannot use the Microsoft Authenticator App we recommend using a Security Key and a Passkey for 2SV. Passkeys are available on all VIU accounts. More information about Passkeys can be found here.
Can I use a different authenticator app?
You may use any compatible authenticator app. Please note that there will be limited or no support from IT Services for apps other than the Microsoft Authenticator.
I have more questions. Where can I get assistance?
Please contact IT