MFA - Multi-Factor Authentication

Step One: Upon logging into an app using Azure AD SSO (Wingspan, Blackboard, Zoom, etc.), You will be prompted for more information.

Step Two: Enter your phone number and click next.

Step Three: Confirm the 6-digit code sent to your phone.

Step Four: If successful, a confirmation message will appear.

Step One: SMS will be used for the first few logins as a "training period".  A message encouraging you to improve your sign-ins will appear shortly afterwards. 

Step Two: The Authenticator app setup will appear and will guide you through setting up Microsoft Authenticator. 

Direct links to download Microsoft Authenticator:

Download Microsoft Authenticator in the Google Play Store Here

Download Microsoft Authenticator in the Apple App Store Here

Step Three: Select "Work or school" account.

Step Four:  Scan the QR code within Authenticator to add your account.

 Step Five: Authenticator will send a prompt to your phone. Enter the digits presented to verify the request.

Setup is now complete and Authenticator will be used by default for future logins. SMS and rotating 6-digit codes are still available as fallback methods if you click "I can't use my Microsoft Authenticator app right now".

MFA settings can be reviewed and changed at this link.

You should always have at least 2 phones registered with the system. That way you can still get into your account if you lose or forget your primary device.

However, if you do not have an alternate authentication phone set up, you can contact the IT Service Desk for assistance. An MFA administrator will be able to assist in adding or changing an authentication phone number. 

First, NEVER give out your password to anyone for any reason. If anyone claims to be from Winthrop and asks for your password, do NOT give it to them. There is no legitimate reason anyone from Winthrop will ask for your password.

Next, if someone from Winthrop or anywhere else asks you to approve an MFA login request notification that you did not initiate, DO NOT DO IT! This is just like asking for passwords; no LEGITIMATE Winthrop personnel will ask you to approve an MFA request. This is usually an indication that a bad actor has your password and is trying to trick you into approving their request so they can log on to your account.

MFA is only active when you are not connected to Winthrop’s internal network. If you are off-campus, or if you are using a personal data plan and try to log in, you will be prompted for MFA. On the other hand, when you are physically on campus and connected to WinthropSecure, your account is unlikely to be compromised. The main threat comes from bad actors who are trying to access your account remotely. You still have to be careful and keep your password secret.

Yes, please send an email to helpdesk@winthrop.edu to request enabling MFA for your account. 

Visit https://passwordreset.microsoftonline.com/ and follow the steps to verify your account and reset your password.

Sometimes Microsoft Authenticator does not appear as an authentication method. This typically occurs because the initial MFA prompt that was sent after scanning the QR Code to set up Microsoft Authenticator was not acknowledged in time. To resolve this, visit https://aka.ms/mfasetup and remove Microsoft Authenticator.

Next, click “Add sign-in method” and click “Authenticator app” to proceed through the steps to set up Microsoft Authenticator again.