Multifactor Authentication

Multifactor Authentication (MFA)

The purpose of using MFA is it adds another method of verification, increasing security. Users will need to input a code well as their username and password when trying to login to a service.

For school's wishing to use Multifactor Authentication and are not getting a prompt for a code, lodge a ticket at support website requesting for Multifactor to be enabled.

MFA setup for individual users to do

MFA Setup

MFA Type	Description	Wiki Documentation
Setting up MFA via CloudworkID Authenticator	Instructions for setting up MFA via CloudworkID Authenticator	Link to Documentation
Setting up MFA via Generic Authenticator App with QR Code	Instructions for setting up MFA via Generic Authenticator app using QR code	Link to Documentation
Setting up MFA via an Authenticator App with setup key	Instructions for setting up MFA via Generic Authenticator app using setup key	Link to Documentation
Setting up MFA via 1Password	Instructions for setting up MFA via 1Password	Link to Documentation
Setting up MFA via SMS	Instructions for setting up MFA via SMS	Link to Documentation

Admins setting up MFA for a user

MFA Setup done as admin for a user

MFA Type	Description	Wiki Documentation
Setting up MFA via CloudworkID Authenticator	Instructions for setting up MFA via CloudworkID Authenticator	Link to Documentation
Setting up MFA via Generic Authenticator App with QR Code	Instructions for setting up MFA via Generic Authenticator app using QR code	https://wiki.studentnet.net/index.php/Set_MFA_with_an_Authenticator_App_with_QR_code Link to Documentation]
Setting up MFA with an Authenticator App with setup key	Instructions for setting up MFA via Generic Authenticator app using setup key	Link to Documentation
MFA with SMS	Instructions for setting up MFA via SMS	Link to Documentation

MFA Settings in the Cloudwork Dashboard for Admins

MFA Micro Management

MFA Type	Description	Wiki Documentation
MFA Whitelist	IP Addresses listed will not require MFA when signing in	Link to Documentation
Enforce MFA for certain OU	Force specific OUs to have MFA enabled to be able to continue using services	Link to Documentation
Enabling Trusted Device	Allow users to remember an device so users are not prompted for MFA	Link to Documentation
Letting users manage MFA	Allow users to manage what MFA option a user can use as well remove MFA options they no longer need	Link to Documentation
Enforcing MFA for a SSO Service	Before users can access an SSO Service, MFA must be enabled	Link to Documentation

Miscellaneous MFA Information

Miscellaneous MFA Information

Information	Description	Wiki Documentation
Creating a Custom CloudworkID Authenticator App	Instructions on how to lodge a ticket for creating a custom CloudworkID Authenticator App	Link to Documentation
Force users to login every day	Instructions and setting configuration in the CloudworkID setting to use that will force users to login each day	Link to Documentation
Disallow MFA via SMS	Instructions on disallowing user from setting up MFA via SMS	Link to Documentation