Passwords

Introduction

The University of Missouri strives to protect personal information as well institutional data and the information systems on which such data resides. Phishing and other cybercrime activities, that can lead to loss or exposure of sensitive data as well as identity theft, are a constant threat. The University has implemented Multi-Factor Authentication (MFA) to combat such threats.

Multi-factor authentication (MFA) is an added layer of protection that verifies your identity by using additional devices or applications. You can get more information on the Microsoft Office 365 page.For detailed instructions on each individual tool, please see the appropriate section on the 'How To' page or the Applications and Devices section, below. Do you have questions? Refer to the Secure Authentication Toolkit FAQ page. 

*The University will use this information for legitimate University purposes and as required by law.  The University does not market personal information to outside entities.

For students: Note that your directory information is publicly available under Missouri’s open records law unless you exercise rights under the Family Educational Rights and Privacy Act (FERPA) and University policy to restrict access to your directory information.  You can learn about what is considered directory information and your rights under FERPA and University policy at your Registrar’s website. 

Applications and Devices

By registering with Secure Authentication, you're taking an important step to safeguarding your personal information as well as University data!

Multi-factor (MFA) verification requires more than just a password to gain access to University IT systems. This second layer of security enforces an additional authentication method, such as a passcode (sent through voice or text message) for authentication to be granted to our electronic systems. 

To stay secure on the go, you can download the mobile application, desktop application or purchase a security key. The application will serve as another option (other than SMS text or voice) for you to obtain your passcode. 

How to Download the Mobile App:

The following application can be downloaded from your device’s application store:

**The easiest way to register the mobile app is by using your computer as well as your mobile device. **

• Apple: Microsoft Authentication
• Android: Microsoft Authentication
• Windows/Apple Desktop: https://authy.com/
• Blackberry: Microsoft Authentication

To use the app, follow these instructions:

1. Download and follow prompts on the installer. Note: In order to use some of the authorization features, you must have your notifications enabled for the application on your device.
2. Click Add Account
3. Select Work or School Account - This will ask to allow the use of your camera so it may scan a QR code
4. Go to https://mysignins.microsoft.com or Manage MFA Settings tile
5. Select + Add Method
6. Choose Authenticator App
7. Select Confirm
8. It will prompt to set up your account - Select Next
9. The QR code should appear on the screen where you can scan it from the app
   • If you cannot scan the image you can select "Can't scan image" below the QR code which will show you a URL you will need to enter on the app.
10. Once the code is scanned click "Next" on your computer
11. The computer will send a notification to your mobile device - Select Approve
12. If you'd like your app to be default method choose "Change" next to Defaul Sign-in Method to Microsoft Authenticator - Notification
13. Enter the passcode you received and click submit

Desktop Applications:

For workstations, you may download a desktop application from https://authy.com/.

Click download at the top right and select your operating system then follow the prompts on the installer.

Using the Application:

For instance, when utilizing the MFA function, you can retrieve your passcode through the desktop application.

1. Launch the Twilio Authy application. It will prompt you for a phone number
   • You will only have to use this once for verification or recovery if needed
2. Select your country code and enter your number that you can receive a phone call or text on
3. Choose phone call or SMS
4. Enter the code you received
5. It will ask you for a security key
   1. Go to https://mysignins.microsoft.com or Manage MFA Settings tile
   2. Enter your University username and password Click submit.
   3. Select + Add Method
   4. Choose Authenticator App
   5. Select Confirm
   6. At the bottom select "I want to use a different authenticator app"
   7. It will prompt to set up your account - Select Next
   8. Select "Can't scan image" to get your secret key
   9. Copy secret key and paste it inot the Twilio Authy application
6. Select next after pasting your secret key.
7. Type in your preferred name for account and choose your preferred color
8. Select Submit
9. It will now cycle a code every 30 seconds
   1. Select Next on your computer MFA setup page
   2. Enter the code that is present on the Authy app
   3. Choose Submit and it should setup your authentication app
10. If you'd like your app to be the default method choose "Change" next to Default Sign-in Method to Microsoft Authenticator - Notifcation

If you have any questions about password management, contact your respective campus’s IT Tech Support team.

Security Keys

A security key is a device that works with Microsoft as another form of identity verification. 

Security keys can be purchased from multiple sources. Please review FIDO2 Security key providers at (https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless#fido2-security-keys) to view compatible devices. 

Setup:

1. Go to https://mysignins.microsoft.com or Manage MFA Settings tile
2. Select + Add Method
3. Choose Security Key
4. Follow the instruction prompts for setup
5. If you'd like your app to be the default method choose "Change" next to Default Sign-in Method to Security Key

   If you need additional assistance, please contact your IT Tech Support team.