Environment: Stfx Account holder that has been converted to the MFA Environment
Purpose: Help users decide what Muli-Factor Authentication method is right for them
When will I need to use MFA?
|
Microsoft 365 (M365) MFA
|
Forticlient VPN MFA
|
-
M365 Applications
-
Moodle
-
Banner Self Service & Banner Admin Pages
-
Reporting - Mydata and X-Reports
-
Other Services that use the Microsoft login such as;
|
|
|
|
|
Mobile Token vs Hardware Token
Choosing between using a hardware token and a mobile token is the 1st decision you need to make. A mobile token will be an app installed on your mobile device. A hard ware token is a key chain like device that you will need to use to access your code.
If you do not have a mobile device you will need to have a hardware token. StFX members can request a hardware token be assigned to them.
MFA Authentication Method Feature Summary
|
Method
|
M365 MFA
|
VPN MFA
|
Req's Mobile
|
Data/Wifi/SiM
|
Notes
|
|
Microsoft Authenticator App - Passwordless
|
|
|
|
|
-
Perferred Method for M365 MFA
-
Enhanced security against account compromise
-
Reduced risk of phishing attacks
-
Ability to approve sign-ins with a simple notification or use passwordless authentication creating a faster sign-in process
-
Your Mobile device must be available
-
Can be configured on multiple devices
|
|
Microsoft Authenticator App - Code Method
|
|
|
|
|
-
Will not work with VPN MFA
-
Some M365 accounts have this configured on first login
-
Great option for traveling with a device with no data or switched out SIM
-
Your Mobile device must be available
|
|
Microsoft Authenticator App - Notification
|
|
|
|
|
-
Convenient method for authentication as there is no code transfer, notifications will pop up on your mobile device and you choose approve or deny
-
Does require mobile device to be connected to data or wifi
|
|
**FortiToken Authenticator App
|
|
|
|
|
|
|
Phone (Call) (Microsoft Retiring Feb 2026)
|
|
|
|
|
|
|
**Mobile Phone (SMS, Text message) Retiring Feb 2026
|
|
|
|
|
|
|
Hardware Token
|
|
|
|
|
-
Requires a code to be input into your log in device from a token device
-
Battery can die
-
Device must be carried with you to access account
-
Visually impaired options available
|
Request a Hardware Token
What if I am a frequent traveller?
If you travel with your mobile device setting up an authenticator app is recommended method. An authenticator apps works similar to a hardware token where a large number of codes are cycled through a timed based sequence. There is no need to have WiFi or data on your phone to use this option so it's a perfect fit for those who swap out their SIM cards when traveling.
If you do not travel with your mobile device and need access to StFX services while away you will need to request a hardware token prior to traveling.
What if I only use Microsoft 365 Services?
If you access email off campus through any application, you will need to complete authentication methods for Microsoft 365 MFA. Having multiple methods configured for your Microsoft 365 access is essential to prevent access loss. Microsoft 365 will allow for multiple options to be configure and you can choose which method is your default. We recommend the following options be configured.
If you have a mobile device we recommend configuring the Microsoft Authenticator application.
Setting up the Microsoft Authenticator App
What if I'm both a VPN & Microsoft 365 User?
Although many authenticator applications will work with Microsoft 365 MFA, the VPN MFA will only work with Fortitoken. Those requiring access to both M365 MFA and Forticlient VPN MFA can use an authenticator for each MFA system, or can use the FortiToken Hardware token if a mobile device is not an option.
An Authenticator app for each
Microsoft Authenticator for M365 MFA - FortiToken Authenticator for your Forticlient VPN
OR A hardware token - which can be programed to handle your VPN for M365 and Forticlient.