What is Multifactor Authentication?

Multi-factor authentication (MFA) is an extra layer of security for your University logon account. Verifying your identity using an additional factor (something you have in your possession, such as your phone) prevents others from accessing your account, even if they know your password

Additional factors used for verification include; security codes sent as text messages to mobile phones, mobile phone approval apps or automatically generated telephone calls to your work desk phone. You may be familiar with some of the practices that are already widely used for online banking and purchasing.

Why is UCC introducing Multifactor Authentication?

Multifactor Authentication helps fight against phishing, social engineering and password brute-force attacks and helps to secure your logins from attackers exploiting weak or stolen credentials.

Due to the number of attempted account compromises IT Services is increasing account security by augmenting the thing you “know” (your username and password) with additional authentication factors, allowing you to use approval security requests sent to a mobile and more, to protect your personal data and institutional system.

How Does It Work?

Usually you use just a username and password to logon to services. With MFA enabled on your account, an additional authentication factor is required to complete the logon to services that require it. The additional factor uses something that you have in your possession, such as a mobile phone. When you logon to a service enabled for MFA, after you enter your logon username and password, a verification code or other form of approval is requested from you to complete the logon process.

• The first time you logon to an MFA enabled service you will need to complete the logon process using the extra approval. Subsequent logons may also prompt for the additional approval, particularly so if you connect your device to different networks and/or use them from different locations (nationally or abroad) Additionally, the first time you use another new application on the device to logon, you will be prompted for the additional approval.

MFA will always prompt for additional approval when you attempt to reconfigure your account security settings.

How Do I Enable MFA On My Account?

There are two steps required to enable MFA on your account

1. Request that your account is enabled for MFA
   
   Request that your account is enabled for MFA by completing the Self Service Request on https://portal.ucc.ie, or by contacting the service desk at E: helpdesk@ucc.ie | T: +353 (0)21 490 2120
   
   
2. Complete the setup of MFA by logging on to email.ucc.ie
   1. The video shows how to set up MFA through Settings on email.ucc.ie.
      

What Services are enabled for MFA?

Currently Multi Factor Authentication is enabled for:

• All Microsoft Office365 services
  • Email (Outlook App, and Online via email.ucc.ie)
  • OneDrive
  • SharePoint Sites
  • Skype for Business
  • Teams,
• VirtualApp 
• CRM

Additional services will be subject to MFA in the near future.

UCC IT Services currently recommend security codes sent to a mobile phone as the preferred method to use for approval requests, though you can also choose other options that are available through the Settings option available on your own account (see above). You may also wish to configure an alternative or second measure for approval.

Unsolicited Logon Approval Requests

Why would I receive a logon approval request or security code when I am not trying to logon to a UCC service?

An unsolicited request to approve a logon that you have not initiated usually means that someone else knows your logon username and password, and is trying to use it. Do not approve these requests, change your password and report the event to ITSecurity@ucc.ie

Phone Number Security and Other Common Questions

Why would I receive a logon approval request or security code when I am not trying to logon to a UCC service?

An unsolicited request to approve a logon that you have not initiated usually means that someone else knows your logon username and password, and are trying to use it. Do not approve these requests, change your password and report the event to helpdesk@ucc.ie and itsecurity@ucc.ie

I am concerned about the security of my phone number or that it may be used for purpose other than MFA?

If you use your phone number for MFA, it is stored in encrypted format as part of your logon account. Only you can view and change it. It is not accessible to UCC IT Services staff or others.

Your phone number will only be used for security of your account i.e. MFA and SSPR, and will not be used for any other purposes.  This data is not used or transferred to any other UCC system.

What if I lose or change my phone or number?

If you change your phone but retain your number, you can continue to use as before. If you change your phone number and no longer have access to the old number and/or its phone then you will need to contact IT Services to reset your account

For Staff: Reach out by phone at +353 (0)21 490 2120 (Option 1), or email at helpdesk@ucc.ie

For Students: Reach out by phone at +353 (0)21 490 2120 (Option 2), or email at sit@ucc.ie 

Will I be billed for receiving SMS text messages to my phone?

Ordinarily mobile operators do not charge for receiving SMS text messages worldwide, e.g. Three and Vodafone, but if in doubt check with your mobile provider either online or in store.

If I don't have a mobile phone is there another option I can use?

Yes, if you don't have a mobile phone you can register for MFA using  landline or alternatively using the Authenticator App.

• Authenticator App for Android
• Authenticator App for iOS

Do I need to do anything to prepare prior to travelling abroad?

Prior to travel we would reccomend enabling a second means of verification, such as the Authenticator App.

• Authenticator App for Android
• Authenticator App for iOS

What format should my phone number be in?

You will be asked to choose your area code first and then enter your phone number but drop the 0 at the start.

In addition to my UCC networked computer, I also use mobile devices (Phone, laptop…), do I need to configure something on them also?

When you  attempt to logon to a device you will be prompted to approve the logon request the first time you open the applications on each device. If an application no longer works, it could mean that it is not MFA aware. If you are trying, and failing, to access email, IT Services recommends using the Outlook APP or accessing your email through email.ucc.ie  

What email apps support MFA?