Page Comparison

What options are available for my second factor? And which scenario suits me best?

Multi-Factor Authentication (MFA) is a security measure used by organizations to improve their online security and protect their data.

MFA involves using more than one thing to prove who you are. Typically, the two things are "what you know" like a password, and "what you have" which is something that you carry with you.  Using MFA is much more secure because it is less likely that someone with bad intentions will have both your password and the second method you choose.

Here's what you need to know about why organizations like us use MFA:

Safeguarding both your personal data and the sensitive information of our RRU and our students is paramount. Organizations implement MFA to enhance security and protect against unauthorized access to your accounts and confidential data.

MFA adds an extra layer of protection, ensuring that even if your password is compromised, unauthorized individuals still can't gain access without an additional verification step. This significantly reduces the risk of data breaches and enhances the overall security posture of organizations.

Enhanced security
Protection against unauthorized access
Reduced risk of phishing and credential theft
MFA adds an extra layer of security beyond just your username and password. It is harder for unauthorized individuals to access data or systems if they need to know your password AND have your cell phone or key fob to do so. 

Remote Work and Mobile Access: 
With the rise of remote work and mobile device usage, securing access to corporate resources from various locations and devices is critical. MFA ensures that even when you are not physically in your office, your access is secure. 

User-Friendly Experience: 
Modern MFA solutions are designed to be user-friendly, offering options like push notifications, biometrics, or one-time codes via SMS or mobile apps. This makes it easier for you to use MFA without significantly disrupting your work. Microsoft will soon stop supporting SMS (text) messaging so RRU will offer two options for your second factor: push notifications to the MS Authenticator app or a Security Key/Fob (a little USB stick that you carry around with you).

Adaptive Security: 
Some MFA systems can adapt their security measures based on the context of the login attempt using access policies. For example, policies could specify that if you're on campus plugged into the network on an RRU device, there's low risk so there's no need to ask for MFA. But if you're trying to access our remote server from a personal computer in Greece, we will ask for MFA to make sure that's really you. Other policies are time-based and may ask you to MFA if you haven't done so in a certain period of time. The goal is to use these policies to manage when you're asked to MFA so that the process is not intrusive but that we remain secure.

Preventing Insider Threats: 
MFA can also be effective in preventing insider threats by adding an additional layer of security for employees and trusted users. It helps ensure that even those with legitimate access are properly authenticated. None of the cybersecurity incidents experienced at RRU over the last two years were deliberately permitted by RRU staff. MFA would have prevented ALL of the cybersecurity incidents that RRU has experienced​ over the past two years.

Cost of Data Breaches: 
Data breaches can be extremely costly in terms of both financial losses and damage to an organization's reputation. MFA reduces the likelihood of breaches, which can save organizations a significant amount of money and prevent long-term damage. 

Scalability: 
MFA solutions can scale with growth. We're implementing MFA starting in February by asking employees to register. Then we'll move on to contractors, then students. Initially, only a small number of applications will be MFA-enabled but we'll add others as we go. 

MFA is important to RRU

We're on it! and we need you on it, too.

The setup will be a problem. Please contact the RRU Help Desk because we need to adjust your account so you can complete the setup process.

MFA will work in any country as long as you have a wireless/data connection on your mobile device to authenticate.

It sounds like notifications are not enabled

iPhone

• Go into Settings → Notifications

• Scroll down and you will see a list of applications. Click on Authenticator (blue lock with a person in it)

• Enable “Allow notifications”

• Review the settings to make sure you are being notified in a way you would like. We recommend leaving ever possible option enabled

• You are done, you can close the Settings window and you should now receive notifications

Android

(Coming soon)

This means you have not completed the RRU MFA enrollment for everyone or are using the wrong authenticator app.

Please scan the QR code and make sure you have installed the Microsoft Authenticator App which looks like this:

Employees: starting in Feb 2024

Contractors (academic and non-academic): starting in March 2024

Students: starting in May 2024

Read about options available for your second factor.

If you are traveling with your mobile device, use the authenticator app, which is designed to work internationally (using the verification code method). All you need is a wifi connection.

Any smart phone with data (required for Authenticator app). When traveling out of country, please note you might require a travel pack for that country.

There are two options in the MS Authenticator App, verification code, or notification.

• If you use the notification option with the Microsoft Authenticator app on a cellular data network (not your home wi-fi), you may incur additional charges if you don’t have a data plan or if you exceed your data limit. (See below for details about data usage).

• If you use the verification code option, no data, or cell service is required. This may be desirable for users with no data plan or who live in a location with unreliable cellular service

We understand concerns about using personal resources for work-related purposes. However, the Microsoft Authenticator app, which we recommend for MFA, consumes minimal data—likely less than 1% of a gigabyte for the entire year. This means the impact on your data plan will be negligible.

And, if you're already using the Microsoft Authenticator app for other purposes, such as accessing your bank or investment information, adding an account for RRU is seamless. It streamlines the process and ensures consistency in your security practices across different platforms.

When/if you leave RRU, it’s easy to delete the authenticator app.

Everyone must use MFA. It is a requirement.

We appreciate your cooperation

Whatever 2nd factor authentication method you use, you're enhancing the security of your own account(s) and contributing to the protection of sensitive student data and the integrity of our organization.

Thank you for your understanding and cooperation in maintaining a secure work environment.

We don’t have exact numbers but in 3 months, an IT staffer who relies on MS Authenticator to authenticate on multiple resources used 2 megabytes (mb) of data. For a year, that would be approximately 8mb.

One gigabyte (gb) of data is 1000 mbs. So, one can expect to use less than 1% of a gb in one year.

If you've lost or had your mobile device stolen, you can sign in using the secondary authentication method you selected when you registered your device for MFA. If this option has not been configured, you can contact the RRU Help Desk to clear your settings. After your settings are cleared, you'll be prompted to register for two-factor authentication the next time you sign in. 

We recommend you have a backup device associated with your account to help prevent this issue. If you have lost the only MFA device associated with your account, contact the RRU Help Desk for assistance. The IT Support Centre can only assist you during business hours. Therefore, if you haven't set up a backup method you will have to wait until the RRU Help Desk is open. 

Contact the RRU Help Desk for assistance.