Multi-Factor Authentication (MFA)

This article details everything you need to know about MFA at Murdoch University. You can jump to specific topics by clicking on the following links, or simply scroll through the article: 

 
 




What is MFA? 
 
MFA is an effective cyber security measure that is widely used to protect IT systems and data from unauthorised access - you may already be familiar with MFA as it is commonly used to protect online banking and social media accounts. In addition to your username and password, MFA requires you to provide another form of authentication to verify your identity prior to granting you access to your online account. Authentication is often done using a one-time, time-sensitive verification code that is sent to you via SMS text message or an authentication app. Although not compulsory, MU recommends that you use the Microsoft Authenticator app as it is easier to use and provides better security. 
 
Why do we need MFA?     
As cyber security threats become more sophisticated and frequent, relying on passwords alone is not enough. Whilst hackers can obtain passwords through techniques such as brute force attack and phishing, it is harder for them to gain physical possession of your mobile device. Since MFA requires a second form of authentication via your mobile device, MFA makes it harder for hackers to gain unauthorised access of your MU account, MU systems and the data that is stored in our systems (which includes personal information of our staff and students). 
 
What is an authentication prompt and how do I authenticate?  
From time to time, you will be prompted to verify your identity when attempting to log in to an MU system. This verification process is called authentication, and it is how MFA helps to protect our digital environment from unauthorised access. Authentication is often done by number matching – a verification code is sent to you via the Microsoft Authenticator app or SMS text message, and you will need to enter this verification code into the sign-in pop-up to be granted access to your MU account.  
 
Please refer to the Authenticate using the App Guide to learn how to authenticate with or without mobile or internet (Wi-Fi) reception using the Microsoft Authenticator app (the App). If you have not set up the App and often experience poor mobile reception, we recommend that you follow the App Setup Instructions to start using the App for MFA. 
 




MFA at Murdoch  
 
Is MFA mandatory?  
MFA is mandatory for all MU staff and students under the University’s Password Policy and is automatically enabled on your account. This is an important step in strengthening our cyber security position. From time to time, you will be prompted to verify your identity by verification code sent to you via the Microsoft Authenticator app or SMS text message, as per your chosen authentication method.  
 
Can I be exempted from MFA?  
MFA is mandatory for all MU staff and students under the University’s Password Policy. If you are unable to comply with the University’s MFA requirements please submit a Non-Standard Request and state your reason for exemption. If you are unable to access the Non-Standard Request, please contact the IT Service Desk by calling +61 8 9360 2000 or email to itservicedesk@murdoch.edu.au. Each request will be reviewed for approval in consideration of your circumstances. Please be aware that alternate authentication methods may be provided in place of granting an exemption. 
 




New to Murdoch University – Welcome! 
 
I am a new student or new staff member, how do I prepare for MFA?  
MFA will be automatically enabled on your MU account. After you set your initial MU password, we recommend that you set up MFA to ensure that you are prepared and to avoid any inconvenience when you are prompted to authenticate the next time you attempt to access the University’s online services. MFA Setup is simple and can be done at home or on-campus, please follow the MFA Setup Instructions. 
 
I am an international student, what do I need to do for MFA after moving to Australia? 
After arriving in Australia, you may choose to obtain an Australian mobile number. It is important that you update your MFA setup so that you can continue to authenticate and access the University’s online services. To do this, please follow the step-by-step instructions in the Updating MFA Setup Guide. 
 




Microsoft Authenticator App  
 
Why is the Microsoft Authenticator app recommended for MFA?  
Using the Microsoft Authenticator app (the App) for MFA is a more convenient and secure way to authenticate than the SMS verification code method. This is because SMS messages can be intercepted by hackers, whereas intercepting the App is difficult as hackers would need to gain physical possession of your mobile device and pass security measures to open the App. Using the App is also more reliable as you do not need mobile reception or internet (Wi-Fi) connectivity to authenticate. If you are currently using SMS verification codes to authenticate and would like to use the App for MFA, please follow the step-by-step App Setup Instructions. To find out how to authenticate using the App with and without mobile or internet connectivity, please refer to the Authenticate using the App Guide. 
 
Do I have to use the Microsoft Authenticator app?  
It is not mandatory to use the App and you can continue to authenticate via SMS verification codes. Please note however, that you will be reminded to set up the App at each sign-in. We strongly encourage you to use the App as it provides better security and is easier to use. If you are currently using SMS verification codes to authenticate, please follow the App Setup Instructions to start using the App for MFA.  
 
What is Passwordless Sign-in, and is it compulsory? 
Passwordless Sign-in is a feature available on the App that allows you to sign-in without entering your password. This feature relies on your mobile device’s security measures (such as passcodes, pattern lock and biometric verification) to confirm your identity. It is a more convenient way to sign-in and offers enhanced security if used in conjunction with biometric verification methods (such as face and fingerprint recognition). Passwordless Sign-in is optional. If you would like to use this feature, please follow the Passwordless Sign-in using the App instructions.  
 




MFA and Impact on Online Exams  
 
How does MFA affect online exams?  
For the most up to date information on online exams, please refer to the Online Exams page. 
 
MFA may affect your online exams in the following ways: 
 
Online supervised exams on-campus  

 
Online off-campus exams  
Please have your mobile phone handy as you may be required to authenticate when you log in to the MU system to complete your exam, such as LMS (Moodle).  
 
**Reminder – If you have recently changed your mobile device and/or mobile number, you must update your MFA setup before the day of your exam so that you can access your exam. Please refer to the Updating MFA Setup Guide for instructions on how to update your MFA setup. 
 




Troubleshooting and Support  
 
I don’t have my mobile device with me, how do I authenticate?  
Please contact the IT Service Desk by calling +61 8 9360 2000 or email to itservicedesk@murdoch.edu.au.  
 
I don’t have mobile or internet (Wi-Fi) reception on my phone, how do I authenticate?  
 

 
I have changed my mobile device and/or mobile number, how do I authenticate?  
If you have obtained a new mobile number and/or a new mobile device, you need to update your MFA setup to ensure that you can continue to access the University’s online services. To do this, please refer to the step-by-step instructions in the Updating MFA Setup Guide. 
 
How do I get support?  
If you require support for MFA, please do not hesitate to contact our IT Service Desk by calling +61 8 9360 2000 or email to itservicedesk@murdoch.edu.au.