Two-Factor Authentication

Let's face it . . . technology is great but it does come with some risks.

That's why VSU Information Technology utilizes an established security method known as two-factor authentication (2FA) when you access your VSU online accounts. 2FA prevents attackers from gaining access to your VSU email accounts and to sensitive academic, financial, and human resources information in the event that your password credentials are compromised.

AT VSU, 2FA IS ENFORCED WHEN:

  • Current Students and Alum log in to the MyVSU Portal (Beginning May 23, 2019)
  • Employees and Retirees log in to the MyVSU Portal, OneUSG, or GeorgiaFIRST Financials

HOW TO SET-UP AND USE 2FA:


2FA & the Microsoft Authenticator Mobile App

-The recommended method

[Return to top]

Set Up 2FA with MS Authenticator App

  • You will be prompted to set up your verification method upon your next login attempt only after VSU Information Technology has enrolled your accounts into the 2FA system. If you are able to log in to MyVSU as normal, your account has not been enrolled.

  • Complete setup using two devices: a mobile device (i.e., smartphone/tablet) and a secondary device (i.e., desktop computer/laptop). Instructions may vary depending on the device and platform you use.

3 easy steps:
Install App > Add VSU Account > Answer Security Questions

SELECT METHOD

On your computer/laptop:
1. Log in to MyVSU
2. Select ‘Mobile app’ when asked: “How should we contact you?

INSTALL THE APP AND ADD ACCOUNT

On your mobile device:
Install Microsoft Authenticator App padlock-Authenticator logo for Android, IOS, or Windows.

  1. Open the app and click the ADD ACCOUNT (+) link. Select Work or school account.          
  2. Scan QR code or manually enter the code.
  3. Close app when your account name and a six-digit code are displayed. (You don't need to do anything with the 6-digit code.)   

After the initial setup, you should not have to open the MS Authenticator app or make changes to it unless your device settings changed or updates occurred.

COMPLETE 2FA SETUP

On your computer/laptop:
Establish your four security questions to complete the process.

[Return to top]

Log in Using MS Authenticator App

Now that you've completed the setup, you can begin logging in to your VSU accounts more securely:

  1. At the MyVSU, OneUSG or GeorgiaFIRST  login screen, enter your username and password and click SIGN IN.
  2. Select ‘Send notification to my mobile app’.
  3. On your mobile device, select Approve (or Deny).

The app does not have to be open on your device in order to receive verification prompts. Power Save and other device settings may interfere with notification appearing.

[Return to top]

2FA Management Portal

Log in to the 2FA Management Portal using your MyVSU username only and password if you ever need to change your settings: contact method, phone number, PIN, security questions/answers or activate the mobile app.

NOTE: When logging in to the 2FA Management Portal, a prompt will NOT display, but you will have to authenticate the login using your current contact method.

[Return to top]

Frequently Asked Questions

[Return to top]
  • What if I can't or don't want to set up 2FA using the MS Authenticator app?

    Although using the Microsoft Authenticator app is the recommended and easiest way to verify your identity via 2FA, there are alternate 2FA verification methods:

    • Phone Call - Receive a call from Microsoft and then enter a PIN (personal identification number) that you have established.
    • Text Message - Receive a text from Microsoft to reply with a verification code from your cell phone.
    • Security Questions - Correctly answer established security questions. To initiate the security questions prompt, wait 60 seconds after attempting one of the other methods and then choose ‘Use a different verification option’. The security questions method is not a default or primary option.

    Reference the 2FA Guide to learn how to initially setup and use 2FA with these alternate methods.

    The Two-Factor Management Portal link on the MyVSU homepage allows you to easily change your authentication method and update your phone numbers.

  • I've set up 2FA using an alternate method. How do I switch to the recommended Authenticator app?

    If you have already completed the initial 2FA setup and now would like to change your verification method to the Microsoft Authenticator mobile app, follow these steps:

    NOTE: Complete this process using two devices: a mobile device (i.e., smartphone/tablet) and a secondary device (i.e., desktop computer/laptop). Instructions may vary depending on the device and platform you use.


    INSTALL APP ON YOUR MOBILE DEVICE

    Install Microsoft Authenticator App for Android, IOS , or Windows.

    ACTIVATE MOBILE APP

    On your secondary device:

    1. Log in to the 2FA Management Portal using your MyVSU username only and password: https://2fa.valdosta.edu
    2. Authenticate your account using your current method. (Phone Call or Text Message)
    3. Click Activate Mobile App listed under 'My Account'.
    4. Click Generate Activation Code.

    ADD ACCOUNT

    On your mobile device:

    1. Open the app and click the ADD ACCOUNT (+ or . . .) link.
    2. Select Work or school account. If prompted, Allow app to take pictures or video.
    3. Scan the QR code displayed on your secondary device screen using your mobile device.

    When the app displays your account name and a six-digit code, the account has been activated—Close App.

    CHANGE AUTHENTICATION METHOD

    On your secondary device:

    1.  Click the Change Method option listed under 'My Account' on the 2FA Management Portal.
    2.  Select Mobile App in the drop-down list.
    3.  Click Save. You can now log out of the 2FA Management Portal.

    LOG IN USING MICROSOFT AUTHENTICATOR APP

    Now that you've changed your notification method to the app, you can begin logging in to your VSU accounts more securely:

    1. At the MyVSU, OneUSG, GeorgiaFIRST login screen, enter your username and password and click SIGN IN.
    2. Select ‘Send notification to my mobile app’.
    3. On your mobile device, select Approve (or Deny).
      Power Save and other device settings may interfere with notification appearing.

    NEED HELP? Contact VSU Solutions Center

  • Can I modify my 2FA settings?

    Absolutely! The 2FA Self-Service Management Portal allows you to change your method of contact, phone number, PIN, security questions/answers, and activate the mobile app. You can log in to the 2FA Management Portal using your MyVSU login credentials

    A prompt will not display, but you will have to authenticate the login using your current 2FA method (e.g., Authenticator mobile app).

    Reference the 2FA Guide to learn how to modify your 2FA settings.

    If you have trouble logging in to the Portal, try one or all of the following tricks:

  • Do I have to authenticate every time I log in?

    At VSU, 2FA is enforced when:

    • Current Students and Alum log in to the MyVSU Portal (Beginning May 23, 2019)
    • Employees and Retirees log in to the MyVSU Portal, OneUSG, or GeorgiaFIRST Financials

    While on and off campus, you will have to authenticate using the 2FA method each time you log in for the first seven (7) days after enrollment. Following the enrollment period, you will only have to authenticate if you log in:

    • while connected to a wireless network, including VSU WiFi;
    • when you are off-campus; and
    • to OneUSG and GeorgiaFIRST--every time, whether on or off-campus (employees only).

    This includes accessing these resources through the latest version of V-State Mobile App.

    While on campus, 2FA is not required when using the Outlook desktop client (including via remote access).

  • What if I receive a verification notification when I'm not trying to log in?

    This would only happen if someone else was trying to log in to your account, and that person knew your VSU account password. The 2FA notifications (app, text, or phone call) are only sent after the username and password are entered at login and verification is being attempted. If this happens, two-factor authentication has just saved your account from illicit access!

    When you receive the illicit notification, do one of the following depending on the type of notification method you set up:

    • Select 'Deny' from the mobile app
    • Do not reply to the text message with verification code
    • Do not enter your PIN when you receive the phone call

    Reset your VSU password as soon as possible. Visit Information Security site to learn how to create a more challenging password.

    Contact VSU Solutions Center for additional assistance.

  • Can I write my own security questions or change my answers?

    No, you cannot write your own questions; but you can log in to the Two-Factor Management Portal at any time to change your question options (and answers) by selecting 4 questions out of 11 prescribed questions.

    As an added layer of security, your answers do not have to match the syntax of the questions. For example, Q: What's your favorite color? A: The Eiffel Tower

    Keep in mind, you will need to remember the answers to the questions you have selected.


    Note, when attempting to log in to your VSU account using the question method, you will only be prompted to answer two of your selected four questions.

    To initiate the security questions prompt, wait 60 seconds after attempting one of the other methods and then choose ‘Use a different verification option’. The security questions method is not a default or primary option.

  • Can 2FA be configured to run on a Mac computer or Apple device?

    Yes, and you should not experience compatibility issues when using a Mac computer or Apple device. 2FA is web/server-based and applies when you attempt to log in to your MyVSU account via a web-based app or web browser, including Apple’s Safari web browser, when you are off campus or are using VSU WiFi. Additionally, the Microsoft Authenticator App is designed for both iPhones and iPads and is available for download at the iTunes App Store.

  • What if I already have an authenticator app (i.e., Google Authenticator) installed on my device?

    You will need to install and use the Microsoft Authenticator App to successfully log in to your VSU accounts. If you log in to MyVSU, OneUSG, or GeorgiaFIRST using multiple mobile/tablet devices, you will need to install MS Authenticator on each device--up to 3 devices. You, of course, can still use your existing authenticator app (such as Google Authenticator) as you had before for other non-VSU applications.

    Note: The MS Authenticator App does not have to be open on your device in order to receive verification prompts. Also, after the initial setup of the app, you should not have to open the app or make changes to it unless your device settings have changed or updates occurred.

  • How can I get even more help with 2FA?

    For setup assistance or a one-time login pass, contact:

    VSU Solutions Center:

    229-245-4357 (HELP)

    solutions@valdosta.edu

    Odum Library 2nd Floor – next to Circulation Desk

    Mon-Thurs: 8 am - 9 pm

    Friday: 8 am - 5 pm

    Saturday: 8 am - 1 pm

    Sunday: 8am - 2 pm

  • Microsoft Authenticator Video Transcripts

    Transcript taken directly from Microsoft Cloud: https://youtu.be/VzZFKS8AfQU
    00:00
    hey everyone this is Paul Blatter with Microsoft here to tell you how to stay
    00:04
    more secure online with a Microsoft Authenticator and 2-step verification as
    00:09
    you know your email or other favorite apps online are protected so that they
    00:14
    can only be accessed by you you accesses stuff by signing in with your username
    00:19
    and password occasionally though when trying to get to something really
    00:24
    important like personal billing information or sensitive company data
    00:28
    this isn't enough unfortunately we hear about passwords being stolen all the
    00:32
    time and so we'll ask for something extra after entering your password this
    00:37
    process is known as 2-step verification the first step being the password you
    00:41
    entered and the second being possession of a device such as a phone or tablet
    00:45
    how do we know you have this device that's where the Microsoft Authenticator
    00:50
    comes into play after setting up the app with your personal work or school
    00:55
    accounts to access your stuff first you'll enter your password step 1
    00:59
    then you'll get a notification sent to your device
    01:02
    just tap approve and you're good to go our app also supports any other accounts
    01:09
    you might have including Google and Facebook for these accounts you'll enter
    01:12
    the security code displayed in the app when prompted notice that for extra
    01:16
    security these codes are refreshed every 30 seconds a handy timer lets you know
    01:20
    when the next code will appear setup only takes a second first you'll choose
    01:25
    which type of account to add a personal Microsoft account
    01:28
    a worker school account that uses Azure Active Directory or something else to
    01:34
    add your personal Microsoft account enter your username and password
    01:36
    directly into the app and follow the instructions provided for work or school
    01:43
    accounts using Microsoft's azure active directory you'll scan a QR code each
    01:47
    organization keeps their QR code on their own site your company or school
    01:51
    will tell you how to find yours if you'd like to register your company for Azure
    01:55
    Active Directory check out the link below to learn more and last for any
    02:00
    other accounts like Google and Facebook you'll also scan a QR code which can be
    02:04
    found in your accounts security settings we've packed a couple additional
    02:08
    features into the app as well for Azure Active Directory organizations for
    02:12
    example some come knees ask that you register your device
    02:15
    with them before accessing corporate files emails or apps this can easily be
    02:20
    completed through the app settings registering also enables single sign-on
    02:24
    to many Microsoft powered apps which means once you sign in to the Microsoft
    02:28
    Authenticator you can use compatible apps without re-entering all of your
    02:32
    information with more and more of our lives and data moving online it's
    02:36
    becoming more important than ever to make sure it's all safe thanks for
    02:40
    taking a big step in keeping your account more secure by using the
    02:43
    Microsoft Authenticator