MFA Rollout

From ECE Information Technology Services
Revision as of 16:25, 28 November 2023 by WikiSysop (talk | contribs) (Announcement)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

Hi Everyone,

You may have heard that UBC has launched Multi-Factor Authentication (MFA) for students on November 1st 2023. You likely have been prompted to enroll in MFA already when logging into UBC services. If you haven’t done so already, you can visit this link to sign up for MFA: https://ubc.service-now.com/kb_view.do?sysparm_article=KB0016166

On December 4th, 2023, UBC IT will enable Multi-Factor Authentication (MFA) for the ECE myVPN pool. This is important if you use ECE myVPN to get access to software for your studies, work, or research. This additional security will prevent coordinated attacks against UBC systems.

Instructions

When MFA is turned on, instead of logging into ECE myVPN with your username as yourCWLusername.ece you should use yourCWLusername.ece@app. This will send a Duo/MFA challenge request to your default MFA device automatically that you will need to click ‘Approve’ for ECE myVPN to connect successfully. In detail:

Append @app starting November 1st:

CiscoAnyConnectMFA.png

Then: - Type your CWL password normally - Answer the Duo challenge pushed to your phone

Not using the Duo App?

Alternatives include yourCWLusername.ece@phone or yourCWLusername.ece@123456 where 123456 is your 6-digit passcode generated by Duo App or a hardware token.

Resources

Documentation: https://ubc.service-now.com/kb_view.do?sysparm_article=KB0016157
Sign up for MFA: https://ubc.service-now.com/kb_view.do?sysparm_article=KB0016166
ECE Help site reference: https://help.ece.ubc.ca/MFA_Rollout
ECE myVPN not needed? Replace yourCWLusername.ece@app with yourCWLusername for campus-wide myVPN (without access to ECE specific software and services).
Need help? Open a ticket or call 604-822-2008: https://it.ubc.ca/got-question-about-it-products-and-support