Time Requirement 

• Please note that setting up MFA on your account may take up to 30 minutes or longer. Please begin the process when you have the necessary time available.

Required Equipment 

To setup MFA make sure you have access to:

1. A desktop or laptop.
2. At least one of the below options. Learn more about these options here.
   1. Smartphone or iPad. This is the preferred method.

   2. Telephone landline.

Supported Email Applications

On all devices from which you access USask email, the email applications used must support MFA.  Once your MFA is enabled, please note that only the below email applications are supported:

• Microsoft Outlook 2016 or later (Windows and macOS). Please note that the versions of Outlook supported by Microsoft change over time; refer to this Microsoft article for the most up to date information available. If you are unsure what version of Outlook you are using, please consult this additional Microsoft Article for instruction on how to determine this information.

• Microsoft Outlook (Android and iOS)
• Mozilla Thunderbird 77 or later (Windows and macOS)
• Mail for macOS Mojave (10.14.x) or later
• Mail for iOS 11 or later
• Gmail for Android
• Outlook on the web (via a web browser https://outlook.com/usask.ca)

After MFA is Enabled

• If you are not able to connect to your email after MFA is set up, you may have to remove your email account from your mobile device or email app and and add it back again. If you encounter this, please follow the instructions in this kb support article. 
• Setting up more than one verification method is recommended for recovery purposes, in the event that you lose access to your preferred authentication method (i.e. losing your cell phone). Learn how to add additional MFA options.
• After setup, learn what the process will look like in Using Multi-Factor Authentication.

Getting Help with MFA

• Follow along with this video showing MFA set up of the Microsoft Authentication app on an Android cellular phone.
• Contact IT Support by filling out the Assistance with Multi-Factor Authentication formor emailing itsupport@usask.ca

Approved Verification Methods

We are currently recommending only two verification methods:

• Microsoft Authenticator App on Smartphone and iPad (recommended) 
• Text message on cell phone, or call to a landline / cell phone.

However, we have instructed clients to contact IT Support if those two methods don't meet their needs. The other options available are:

• Other authenticator apps on a Smartphone (such as Google Authenticator)
• Internet browser authentication extensions
• Hardware token

The steps for the additional options can be found on the agent article Additional Multi-factor authentication options for clients.

The authenticator option you pick should be the one that best suits how you will use it. Pick a method that you can easily access and be in reach of when you try to access your account. Consider if you will be home, travelling - what ever option you pick should be available to you when you need it. 

A SmartPhone (Android or iPhone/iOS) is strongly recommended for the best experience when using multi-factor authentication.

If you find that the options below do not meet your needs, please reach out to IT Support to discuss alternative methods of authentication.

1. Using a desktop or a laptop computer, log in to PAWS with your NSID and password.
   
   
2. People setting up MFA for the very first time are normally presented with the page below. Review (and edit if necessary) the recovery options then Click Save Changes at the bottom of the page.
   
   
   

3. Wait until text appears that shows the status of your MFA. Click on Update MFA Options.
   

   Info
   If the page continues loading and the Update MFA Options text does not appear, click Reload, then wait for a few moments. Continue until the text appears.

4. If it prompts, sign in with your NSID (in the format abc123@usask.ca) and password.
   
   
   
5. Click Next.
   
   
   
6. You will be prompted to download the Microsoft Authenticator app (which you will do on your phone). Do so, then click Next on the computer.
   
7. Following the instructions on your computer, open the Authenticator App on your phone and tap Add Account, then tap Work or School Account.
   
   
   
8. Tap Scan QR Code, and tap OK.
   
   
   
   
9. On the computer, click Next and point your phone at the QR code, keeping it inside the box on the phone screen.
   
   
10. Once the QR code is scanned, click Next on the computer.
    
    
11. Enter the number on the computer screen onto the phone and tap Yes.
    
    
    
    

12. Click Next, then click Done. Your MFA is now set up, with the Authenticator app as your default MFA option.

    Info
    title Next Login
    On your next login in you may be prompted to enter another 2 digit verification code displayed on the computer, to be entered on your smartphone.

    Info
    title This video guide explains how to set up the Microsoft Authenticator app as an MFA method
    Kb add_video VideoSrc https://usask.cloud.panopto.eu/Panopto/Pages/Viewer.aspx?id=38341244-7579-4995-933c-b0000153ea38

1. Using your desktop or laptop, log into MyProfile with your NSID and password. If you are still logged into MyProfile from when you registered for MFA (Section A above), please log out and log in again.

   Info
   If you see the below message after logging into MyProfile that means you have not successfully added a MFA verification method to your account: To add a verification method, using your desktop or laptop, go to the MFA setup page, and add a method as explained in Select an MFA Verification Method above.

2. Approve the resulting verification prompt, which will depend on the MFA method you chose during set up. Learn what this process looks like in Using Multi-factor Authentication (MFA)
   
   

3. Under Multi-factor Verification, MFA should say "Enabled".