Videos

Multi-Factor Authentication (MFA) How To Guide

Added Nov 02, 2022 •

Copy this URL:
Embed code:	<iframe class="edlio-embed-player" type="text/html" width="640" height="360" src="//www.hartdistrict.org/apps/embed/?v=346657" frameborder="0" allowfullscreen></iframe> Change dimensions

This video walks through Multi-Factor Authentication, or MFA, on both AD / Network and Google accounts.

Show Transcript

Hello! At the William S. Hart Union High School District we take cyber security very seriously. That’s why we are implementing Multi-Factor Authentication or MFA.

An overwhelming number of security breaches today involve compromised usernames and passwords. MFA strengthens the security of your account by using a secondary device that you keep on your person, like an app on your mobile phone or authentication key, to verify your identity.

Let’s walk through setting up MFA on your AD Network and Google accounts.

You will be able to choose a primary authentication method when you register, which you can change or update at any time. We recommend using an authenticator app on your mobile device. These apps generate a one-time code to be entered upon login as identity verification. 
There are a variety of authentication apps available. We recommend Google Authenticator which you can download for free at the App Store for Apple devices, or Google Play for Android devices.

To download Google Authenticator, go to Google Play or the App Store on your device. 
Search for Google Authenticator, scroll down until you see the official Google Authenticator app.
Next, download the Google Authenticator App to your device then Open.
The first time you open the app, you will be brought to a welcome page.
Click Get Started at the bottom. 
Now that you have Google Authenticator on your device, you can begin setting up MFA on any of your work or personal accounts.

Let’s walk through setting up MFA on your AD Network account using Google Authenticator
Sign into your work computer as usual.
You will receive a prompt from UserLock to set up MFA.
Select which method of authentication you are using: In this case “Authenticator App”.
You will brought to a screen with enrollment instructions
Open the Authenticator App on your mobile device and scan the QR Code
A code will be generated in your Mobile App, Type that into the Enter Authentication Code field on your work computer.
Click Verify and continue. 
You have successfully enrolled your AD account in MFA!

Let’s walk through setting up MFA with Google Authenticator
When you sign into Google you may be prompted to set up MFA. Click Enroll to Begin. 
If not, you can click on your Google profile in the top right corner to Manage Your Google Account, Click on Security in the left side menu. Scroll down to and click on 2-Step Verification
You will be prompted to enter your Google password again. Then you will be prompted to enter your mobile phone number. Enter your mobile phone number and click Next.
You will receive a confirmation code via text message. Enter that code into the field and continue through the prompts. On the 2-Step Verification screen scroll down to Authenticator App and begin. A QR code will be displayed. Open the Authenticator App on your mobile device, click on the plus sign in the app and scan the QR Code. 
A code will be generated in your Mobile App, click through and type that new code into the Google prompt and click Next.
You can then go back to the 2-Step Verification screen to confirm enrollment or add another form of verification if you wish.

If you do not want to use a mobile device or do not own a smartphone, Technology Services offers authentication tokens, or YubiKey, that generates verification codes similar to  the authenticator apps.

This small, lightweight key is about the size of a USB thumb drive, and has an opening so that it can be affixed to a keychain or lanyard. You will need to carry this key with you at all times to verify your identity for MFA.

Let’s walk through setting up MFA with YubiKey
Sign into your work computer as usual.
You will receive a prompt from UserLock to set up MFA
Select which method of authentication you are using: In this case “USB Token”.
You will see a message stating “No USB token detected!”
Insert your YubiKey into an available USB port on  your computer and Click Continue. 
You will be brought to a screen with enrollment instructions. Select Slot #1, then click the Link YubiKey button.
The gold touchpoint on the YubiKey will light up, place your finger on that just long enough for a code to appear in the field in Step 3. 
Click Verify and continue. 
You have successfully enrolled your AD account in MFA!

Let’s walk through setting up MFA on your Google account with YubiKey
When you sign into Google you may be prompted to set up MFA. Click Enroll to Begin. 
If not, you can click on your Google profile in the top right corner to Manage Your Google Account, Click on Security in the left side menu. Scroll down to and click on 2-Step Verification
You will be prompted to enter your Google password again.Then you will be prompted to enter your mobile phone number or select more options.From the Select More Options dropdown, click on Security Key
Click Next
You will then be prompted to enable your authentication key for your device and send information to Google Chrome on behalf of your account. At the Security key setup prompt click OK
Google will then remind you to have your security key available but not yet connected. 
Without inserting the YubiKey, click NEXT and follow the prompts.
Insert your YubiKey into an available USB port on  your computer and Click Continue. 
You will then be prompted to Touch your security key.
Place your finger on the gold touch point on the YubiKey
Touching this point will generate a one-time code that confirms enrollment with Google.
Give your Security key a name and click DONE.
You will now see the Security Key is successfully installed and you can move onto enabling other forms of MFA if you wish.

The next time you login to your desktop you will see an alert prompting you to use MFA to complete sign-in.
You may use whichever method you have enrolled your account in
Open your Authenticator App on your mobile device and type in the code provided
OR insert your YubiKey and tap the touch point to generate a code
This step will be required upon first AD network login to a unique device daily.

You may elect to have more than one method of Authentication in MFA, meaning you have the ability to use the Mobile App AND YubiKey as alternate ways of verifying your identity.

We understand this is an additional step in accessing your District resources but we greatly appreciate your continued efforts in keeping yourself and the District safe and secure.

If you have any questions you can find our MFA User Guide and other helpful resources at support.hartdistrict.org

Videos

Multi-Factor Authentication (MFA) How To Guide

More videos in Technology Services