Connecticut State Colleges & Universities
IT Support Center

MFA FAQ

Text Message option no longer supported

We stopped supporting the Text Message option to authenticate to the Protective Enclave. If you had the Text Message option and cannot login now, you will need to contact us.

The following are answers to questions that you may have when using a service that uses MFA authentication.

Questions:

Answers:

  •  Why can I no longer use Text Message as my MFA method ?
  • Microsoft no longer supports the Text Message method (also known as Two-Way SMS or Text with PIN) any longer. If you currently have Text Message selected as your MFA method, you will need to login to the MFA portal and change to one of the other options (Phone Call or Mobile App) before April 9, 2021. If you do not change your method before then, you will be unable to authenticate after April 9, 2021.

    If you need to check which MFA method you currently are using, refer to this link in our MFA docs: Checking your MFA method.

    If you are using Text Message, change your MFA method to either Phone Call or Mobile App as described at this link: Changing your MFA method.

  •  I'm trying to login to a service that uses MFA and I'm having problems authenticating. What do I do?
  • If you are having difficulties logging into a service that uses MFA for authentication, try logging into the MFA portal first. You will be able to use a backup method to get in (either phone call or answering your security questions) and then you can change your MFA settings if needed. Once you are able to successfully login to the MFA portal, then try to login to the service that uses MFA authentication again. Note that if you immediately log into the service after successfully logging into the MFA site, there is a short window of time where you will only be prompted for username/password and not your MFA authentication (phone call or Mobile app).

    There are many more FAQ items in this document that may help you as well so be sure to see if your question is answered here first.

  •  I want to add/use a backup phone number but there's only an entry for one phone number, not a backup. Why?
  • If you are using either the Mobile App method, the backup phone number is not displayed on the MFA "Change Phone" screen. To change/add a backup phone number when you are using the Mobile App method, you need to login to the MFA portal where you will get an opportunity to use a backup method including answering your security questions. Once you are logged into the MFA portal, first you will need to change your method to Phone Call and then when you go to the option to change your phone number, you will now see the option for a backup phone number. After you have set a backup phone number, you can then change the method back to Mobile App. The backup phone number will then be listed as an option if you fail to authenticate using the Mobile App even though you can't see it on the "Change Phone" page:

    Note that the backup phone number is only called during authentication if you are using the Phone Call method and you failed to answer your primary phone. You will not get a phone call to your backup number if you are using the Mobile App. For those methods, even though you can't see it on the "Change Phone" screen - the backup phone is used to verify your account after authentication has failed when you are accessing the MFA portal. See the FAQ item next about when the MFA backup method is used for more information.

    Follow the changing or adding a phone number steps in the MFA document.

  •  When is the MFA backup method used?
  • If you are using the phone call method and you do not answer the primary phone number or it goes to voice mail, then it will call the phone number you have defined as your backup phone number after it did not reach you on your primary phone number.

    If you are attempting to login to a service that uses MFA using the Mobile App methods and you don't respond or incorrectly authenticate (enter wrong PIN) it will give you the "Incorrect user name or password" error only and will not use your backup method. If you don't have access to your mobile app, you will need to go to the MFA portal in order to be prompted to verify your account by using one of the backup methods (phone call or answer security questions). After you have verified your account by successfully using one of the backup methods, you can then make changes to your MFA settings and then you can log into the service that uses MFA authentication. See the FAQ item about adding a backup phone number when using the mobile app method.

  •  What if I forget my PIN?
  • If you forgot your PIN, follow the changing your PIN steps in the MFA document. You may need to wait till it times out after entering your username/password, then answer your security questions to initially gain access to the MFA portal.

This FAQ was last updated: Friday, June 11, 2021