Why?

This extra security measure added by Microsoft is designed to combat “MFA fatigue,” and prevent accidental approvals and attacks where users are bombarded with approval requests. IT is rolling out the option now because as of May 8 Microsoft will implement this for all Authenticator app users.

Impact

Beginning April 28, 2023, Multi-Factor Authentication (MFA) verification to WPI resources through the Authenticator app will require typing a number displayed on the login screen to complete the authentication process.  Individuals who receive a text message or a phone call to verify their identity will not be affected by this change. WPI passwords or other account details will not be affected.  

Action Needed

Instructions for number matching can be found in Details (below) or Configure Multi-Factor Authentication (Related Item). Learn more about "MFA Fatigue" in NCSAM 2022 Resources (Actions).

Details

What to Expect:

  • Authenticator App: Number matching will be implemented for everyone using the app for WPI resources.
  • Apple Watch: According to Microsoft, with the addition of number matching, the Authenticator app will not work on an Apple Watch. If you use an Apple Watch with the Authenticator app, please refer to Configure MFA below to setup verification methods on a different device.

How number matching works

When you login to a WPI resource requiring MFA, a number will be displayed. Type that number into the Authenticator app complete the approval.

Left: Approve sign in on login screen displays a number. Right: Authenticator app requires you to enter the number shown to sign in.