On this page you will find all relevant information about MFA and account security, as well as help using SSRP to reset your password.

What is Multifactor Authentication?

Multi-factor authentication (MFA) is an extra layer of security for your UCC Student IT Account. It allows you to verify your account using another factor like your phone. This prevents others from accessing your account, even if they know your password.

Factors used for verification include authentication applications for your device such as Microsoft Authenticator.

Why does UCC use Multifactor Authentication?

Multifactor Authentication helps fight against phishing, social engineering, and password brute-force attacks. This helps to secure your logins from attackers exploiting weak or stolen credentials.

IT Services is increasing account security by making MFA essential. This is because there are more attacks directed at UCC accounts. To protect your data and UCC's systems, you will need to approve security requests sent to a mobile or other factor.

How Does MFA Work?

When you logon to a service that requires MFA, after you enter your student email address and password, you'll be prompted to use your additional means of verification (additional factor as mentioned above). For example, if using the Microsoft Authenticator app as your authentication method, you'll receive a notification from this app.

UCC recommended method for MFA

UCC recommends using the Microsoft Authenticator app as your authentication method. The app uses wi-fi and sends a notification to your phone, requesting you to approve a sign in request.

Use on multiple devices

You can install the Microsoft Authenticator app on multiple devices. When you sign in, the notification will be sent to all the devices with the Microsoft Authenticator app but you only need to approve the sign in from one device. If you try to approve from a second device, you will get a notification that the sign-in has been denied. However this will not affect your account as you have already approved the sign-in from the first device. 

Approval requests when you are not trying to log in

If you get a request to approve a log in or sign in that you yourself did not start, then you must not approve the request. This most likely means that someone has your username and password and is trying to access your account. DO NOT APPROVE the sign in in these circumstances, change your password immediately and notify Student IT Services.  

MFA will always prompt for additional approval when you attempt to reconfigure your account security settings.

Changes to MFA - SMS and Voice calls will no longer be supported

Protecting University systems and data requires strong authentication. As part of changes being introduced by Microsoft to Multi-Factor Authentication (MFA), Students will be encouraging to use the Microsoft Authenticator app as the primary method for MFA

What should you do now?
The most important thing you can do is ensure that your Microsoft Authenticator app is working correctly on your current phone. Please take a few minutes to:

• Confirm that Microsoft Authenticator is installed on your current device.
• Verify that you can approve sign-in requests using the app by visiting  https://aka.ms/mysecurityinfo
• Remove any unused devices / authentication methods from your security information.

Need help switching MFA methods?
Please log  a request in the Microsoft Authenticator Support Request form and one of our dedicated agents will be in contact to assist you.