MFA Self help

The Griffith email including all the O365 applications are secured with MFA and hence should prompt you for MFA everyday upon login. However, Office 365 also asks you during login if you would like to stay signed in which reduces the number of times you are asked to sign in.

If you select Yes, O365 does not sign you out for a long time, and hence no MFA.

We recommend selecting No and setting Don’t show this again on this prompt to be able to enforce MFA on O365 login every day.

If you have already said Yes to this prompt before, follow the steps below to be able to reset it:

1. Sign out of your Griffith email or Microsoft suite application by clicking on your name icon on the top right corner of the browser window and selecting Sign out from the options.

2. Close all the browser windows and launch a new one

3. Access https://portal.office.com from the new browser window

4. Provide your Griffith email ID as username

5. It will redirect you to Griffith SSO login page. Provide your Griffith sNumber and password, click Login

6. You will be prompted to authenticate using your device as set up for MFA. Provide that authentication by swipe/password as required

7. Check Don’t show this again checkbox and click on No on the Microsoft’s Stay Signed in prompt.

8. Once signed in, select the Microsoft application that you would like to access from the deck..

Multi-Factor Authentication (MFA) is being implemented in response to the threat of Cyber criminals targeting educational institutions to obtain identity details and access confidential data and intellectual property. MFA ensures that our accounts are highly secured with not just one, but multiple layers of security. MFA never uses or sees your password.

For the most part, you will only need to use MFA once a day when you first login to a Griffith application using Single-sign on. However,  if you clear your cache, open an incognito/guest window you will need to use MFA.

If you have Griffith purchasing authority you can purchase a Yubikey from Griffith Marketplace using the steps below:

1. Login to Griffith Portal > My Finance Page > Purchases and Payments > Make and Manage Purchases > Griffith Marketplace
2. Input ‘Yubikey’ in the search box > select the Yubikey product catalogue from the fetched result.
3. Add the quantity of Yubikeys required and click ‘Add to Cart
4. Select your cart and checkout.
5. Enter a name in ‘requisition name’ box for the ease of tracking the progress of your requisition.
6. Click on ‘Enter Purchasing Information’ > Input your Speed Type/ Class > Ok > Select the approver from auto populated list (based on the speed type) > Save and Submit.
7. Request is raised and is sent to approver for approval. You will see a request number and be able to view this request number in ‘Track Requests
8. Once the Yubikey is received, follow the instructions on how to setup a yubikey for MFA.

If do not have Griffith purchasing authority and wish to personally purchase a Yubikey visit Mi.token.

For more details regarding approval of Yubikeys for business requirements visit the MFA web page.

Yes, each separate device requires authentication with MFA. Once authenticated, the session will last for 12 hrs when accessing applications from a browser.

VPN currently does not require MFA authentication to use, however this will be activated in the near future.

Use your mobile device to authenticate when you log into Griffith applications on Lecture Theatre common computers.

If you have student and staff status you will be enabled with MFA along with your staff group.

If you believe you are no longer a staff member contact People and Wellbeing.

No, think of MFA as an add-on to the Griffith Single Sign-On page where you enter your sNumber and password. Whenever you do this you will then be prompted to authenticate using MFA. For most people that will be once or twice a day in the web browser, maybe more if you change computers or browsers.