Why?

We need to ensure WPI accounts are not using legacy MFA methods as adversaries and malicious software utilize insecure MFA methods to compromise logins. Information about the Modern MFA campaign that was sent to the community is linked in Actions.

Impact

Microsoft Authenticator app is the required default MFA method. Beginning January 16, 2024, all other verification methods will be turned off. To continue accessing WPI resources that require MFA without disruption, please take action immediately.

Action Needed

Configure the Microsoft Authenticator App as your default MFA method.  If you need assistance installing Microsoft Authenticator, or are unable to use this app, please contact WPI IT Service Desk staff at 508-831-5888 or its@wpi.edu.  

Details

Action Needed:

1. Ensure you are using the free Microsoft Authenticator app with this logo.

Microsoft Authenticator App logo

There are numerous authentication apps, many with similar logos and payment required. You do not have to pay for this app. If you are unable to use Microsoft Authenticator with number matching, please immediately contact the IT Service Desk to discuss a supported alternative.

2. Configure the Microsoft Authenticator App as your default MFA method. Step-by step instructions are the related article, Configure Multi-Factor Authentication.

3. Remove other MFA options. After successfully downloading and testing the Microsoft Authenticator App, please remove other options including calls, emails, or text messages, from your WPI account.

If you need assistance installing Microsoft Authenticator, or are unable to use this app, please contact WPI IT Service Desk staff at 508-831-5888 or its@wpi.edu. 

We thank you in advance for making this change to better secure your WPI account.

January 16th - Other MFA Methods Discontinued

Multi-factor authentication will no longer use calls to mobile devices or desk phones, SMS text messages, email. Access to WPI resources requiring MFA will only be available if you have setup the Microsoft Authenticator App or a security key.