Multi-factor Authentication (MFA)

---

Table of Contents

• General Information
• Frequently Asked Questions
  • Getting Started
  • Usage
  • Tokens
  • VPN
  • Privacy and Security
• Known Issues
• Tips & Reminders to prevent and avoid access issues
• Support
  • Website Feedback

---

General Information

• As part of our ongoing effort to keep personal and sensitive information at UBC secure, multi-factor authentication (MFA) has been introduced across the University
• By adding MFA to applications that use UBC’s Campus-wide Login (CWL), we have strengthened security with an additional layer of protection, requiring two or more items to verify a user’s identity:
  • something you know (i.e. your password)
  • something you have (i.e. a trusted mobile phone or hardware token)
• UBC's multi-factor authentication is provided by Cisco Duo, a trusted cloud-based MFA solution utilized by over 300 educational institutions in North America, including UCLA, Harvard, University of Toronto and Toronto Metropolitan University
• The Duo MFA prompt screen is being upgraded across all UBC systems currently covered by multi-factor authentication. This means that depending on what system you are accessing you might see one of the two prompt screens shown below (more information)
  
       

---

Frequently Asked Questions

Jump to: Getting Started | Usage | Tokens | VPN | Privacy and Security

Getting Started

Adding MFA protection to your CWL account takes just two steps:

Step 1 Log in to MFA Device Management Website

Using your CWL username and password, log in to the Self-service MFA Enrollment and Device Management website at https://mfadevices.id.ubc.ca.

Step 2 Enroll your device

Follow the detailed step-by-step instructions to enroll your first device. Once you are enrolled you can manage any of the authentication methods associated with your account, including adding or removing a device.

Article / Link	Article Name
KB0018745	How will I be affected when I use CWL to log in to UBC services and applications?
KB0018747	How often will I be asked to authenticate my identity?
KB0016150	How do I login to the Self-service MFA Enrollment and Device Management website?
KB0016166	How do I enroll in Multi-Factor Authentication (MFA)?
KB0018756	What options are available as a second factor for MFA?
KB0016167	How do I download the Duo Mobile app?
KB0018872	Why can't I use the Duo Mobile app on a device that is running an older operating system?
KB0016282	How do I use the Duo Mobile app without an internet connection?
KB0018861	How do I enroll a TouchID device or blue U2F-only USB key? (TouchID Devices and U2F Keys FAQ)
KB0018755	How do I add, change or remove MFA devices?
KB0018758	I am travelling and may not have access to a cellular network or even the internet! What should I do?

Usage

Article / Link	Article Name
KB0018746	I have enrolled in MFA. How do I log in with my CWL account?
KB0018741	How does the "Remember me" feature work? (Remembered Devices FAQ)
KB0018760	What if I have forgotten my mobile phone at home?
KB0018759	What do I do if my mobile phone is lost or damaged?
KB0018763	I got a new phone. How do I get it set-up as an MFA device?
KB0016326	How do I send SMS text passcodes?
KB0018748	Why aren't SMS text messages or phone calls available to UBC students as second factors for MFA?
KB0018867	Why can't I use email as one of my second factors for MFA?
KB0018871	Why do I have to use the Duo Mobile app instead of other authenticator apps?
KB0018753	Does the Duo Mobile app work in China?

Tokens

Article / Link	Article Name
KB0018725	Do I need a token?
KB0018727	How do I obtain a token?
KB0018728	How do I register my token?
KB0018729	Can I share my token?
KB0018730	What if I have forgotten my token at home?
KB0018731	What do I do if my token is lost or damaged?
KB0018732	What happens if my token runs out of battery?
KB0018733	What happens if my token suddenly starts generating invalid codes?

Virtual Private Network (VPN)

Article / Link	Article Name
KB0016157	How do I connect to VPN with a CWL account protected by MFA?

Privacy and Security

Article / Link	Article Name
KB0016149	Cisco Duo Privacy FAQ
KB0018734	Why is Multi-factor Authentication necessary?

---

Known Issues

Article / Link	Article Name
KB0018865	MFA: Error: "Enter a passcode or contact your administrator for a bypass code"
KB0018380	MFA: Login Failed when Connecting to MFA protected VPN Pools

---

Tips & Reminders to prevent and avoid access issues

1. Don’t Leave Home Without It
   Just as it is second nature to ensure you have your keys, wallet and probably mobile phone on your person before you leave your home each day, verifying that you have your 'second factor' for your CWL account should now be added to your daily routine. If you’ve enrolled your mobile phone as your second factor then you’re already prepared!
2. No Internet Connection Required
   Remember that the Duo Mobile app has a built-in passcode generator that can be used to authenticate your CWL. This feature requires absolutely no data connection to use.
3. When Travelling
   The passcode generator within the Duo Mobile app is an excellent alternative to the Duo Push for those who are required to log in with their CWL while travelling as it uses no data from your phone to generate a passcode. However, if having a phone is simply not an option for a particular travel destination or circumstance, hardware tokens are available for purchase. These can be obtained from the UBC Bookstore on the Vancouver and Okanagan campuses.
4. If All Else Fails
   We understand that things happen. Whether you simply forgot your phone, your phone’s battery has died or you don’t have your hardware token available, you will never be left without a way to access your account. The IT Service Centre can answer any questions you may have or provide you with a temporary access code to log in. In Vancouver call 604.822.2008, and in the Okanagan call 250.807.9000.

Support

• Contact the IT Service Centre if you need further assistance

Website Feedback

Have a comment or suggestion? Can't find what you're looking for? Your feedback is valuable. Please complete this form to share your feedback on UBC's MFA documentation website.