Multi-Factor authentication (a.k.a. MFA) is a security method to help better protect email accounts and Office 365 access by adding a layer of protection to the sign-in process. In addition to entering a password, this added security requires users to approve their sign-ins using a mobile device or telephone. This way if a user account password is somehow exposed, the account can stay protected by the second factor that is required to gain access.
All MCLA accounts will soon have MFA turned on. MFA will not be required when signing on to the main MCLA Portal, but will appear when accessing any Microsoft related services that MCLA has available, such as emailIf you are using Mac OS, teams, and sharepoint. This documentation will walk you through how please refer [[MCLA_Remote_Access_(MacOS)| to prepare for the use of this security requirement and provide guidance on usagethese instructions instead]].
==Step 1 - Prepare'''Description'''==For various reasons pertaining to security, certain services within the MCLA network are protected from direct access to the Internet. Access to these resources from other networks requires special software to provide a secure “tunnel” from your computer. MCLA employs an SSL VPN to provide this function and this document explains how to access, install and use this tool for Windows based machines.
We recommend you follow this checklist to prepare for the account security transition to MFA. These steps can be completed anytime, but its best to do before MFA is turned on for your account.=='''Download and Install Sophos Connect Client'''==
* Review 1. Before you start, ensure you do not have the outdated "[httpsSophos SSL VPN" client installed. If you do, please follow these steps to uninstall://support**a. Select Start , then select '''Settings > Apps > Apps & features'''.microsoft**b.com/en-us/topic/what-is-multifactor-authentication-e5e39437-121c-be60-d123-eda06bddf661 What is: Multifactor Authentication]" Microsoft articleSelect the the 'Sophos SSL VPN' application in the list and then select '''Uninstall'''.* 2. Download the VPN software (Sophos Connect) which is located here: [https://wwwmcla.microsoftsharepoint.com/en-ussites/securityDesktopSupport772/mobile-authenticator-app Download the Microsoft Authentication App] on your [https:_layouts/15/playdownload.googleaspx?UniqueId=be08b547%2D68e2%2D47e0%2D8426%2D5fac2617e9e8 Sophos Connect].com *3. Open the installer once downloaded and complete the client installation.*4. Login to https:/store/apps/details?id=commclautm.azuremcla.authenticator Android] edu using your A# and password. [[https://appstechhelp.applemcla.comedu/appindex.php/microsoft-authenticator/id983156458 Apple IOS phoneSetup_Microsoft_Authenticator_App_for_MCLA_VPN_Access MFA code may be required]]. * Confirm that your security information is updated and complete5. To check login to https://akaOnce logged in select the '''Remote Access''' link on the page.ms/mfasetup*6. You will want Click the download button next to the description "'''Click here to download the configuration file to ensure you have setup your primary phoneset up SSL VPN on Linux, MacOS X, office phone BSD or Solaris.'''" '''Download''' and/or alternate phone as a security method'''Save''' the .opvn file.*7. This is helpful in Open the Sophos Connect software, click the event you don't have access '''Import Connection'''' option*8. Navigate to your mobile phonethe .opvn file that you saved, select it and click ''''Open''''. This will import the other phones you specify can be used to sign you inVPN server connection information.
==Step 2 - Setup'''Connect to the VPN using Sophos Connect Client'''==
MCLA IT will notify you when MFA will be turned on for your account*1. After its been turned on, [https://support.microsoft.com/en-us/office/set-up-your-microsoft-365-sign-in-for-multi-factor-authentication-ace1d096-61e5-449b-a875-58eb3d74de14 follow these steps Open the Sophos Connect software by either selecting it in this link] to setup your account to work with MFA. start menu or system tray*[https://support2.microsoft.com/en-us/office/set-up-your-microsoft-365-sign-in-for-multi-factor-authentication-ace1d096-61e5-449b-a875-58eb3d74de14 Set up your Microsoft 365 sign-in for multi-factor authentication] *'''Important Note''': During Confirm that the setup process you'll be asked what your preferred authentication method ismclautm. The most convenient method is to approve sign-ins using notifications served through the Microsoft authenticator appmcla. To set this, select "edu'''Notify me through app'''" as the default verification option and check the box next to "'''Authenticator app or Token'''", You can server connection is selected then select "'click 'Connect'Set Up Authenticator App'''" to proceed with how to configure the Authenticator app on your phone. [[image:MFAOptions.png]] ==Step *3 - Use and Manage==Its important to note that when MFA is turned on - all access sign ins to Office 365 services will require the use of it. This includes access to MCLA Email, Microsoft Teams and Sharepoint/OneDrive. To ensure you don't lose access to Type in your account, you should remember to [https://aka.ms/mfasetup update your security information] whenever you change your phone A numberand password. Here are some additional resources we recommend you review to help enhance your experience with using MFA by learning more about the different security methods you can setup and how to effectively manage themcode may be required. *[https://support4.microsoft.com/en-us/account-billing/sign-in-Connection status will show a green click mark when successfully connected to-your-work-or-school-account-using-your-two-step-verification-method-c7293464-ef5e-4705-a24b-c4a3ec0d6cf9 Using your two-step verification methods]*[https://support.microsoft.com/en-us/account-billing/common-problems-with-two-step-verification-for-a-work-or-school-account-63acbb9b-16a1-47b9-8619-6a865e8071a5 Common Problems with two step verification methods]*[https://support.microsoft.com/en-us/account-billing/back-up-and-recover-account-credentials-in-the-authenticator-app-bb939936-7a8d-4e88-bc43-49bc1a700a40 Backup and Recover your credentials with Authenticator App]VPN
