Setting Up CUNY Login MFA
The following, one-time procedure provides instructions on setting up CUNY Login MFA for use with the Microsoft Authenticator mobile app.
The same general steps apply if you use the Google Authenticator or Oracle Mobile Authenticator app instead.
Before You Begin
Please note the following before attempting to set up CUNY Login MFA:
- Try to complete the initial CUNY Login MFA setup in a single session. Multiple incomplete attempts to set up your CUNY Login MFA will lock your CUNY Login MFA setup and require you to contact the help desk for assistance.
- Do not choose Remember Choice or Set as Default options when setting up or using CUNY Login MFA. There is a software vendor issue that causes CUNY Login MFA to suspend processing when there is a single authentication factor and either option is selected.
- If you do not already have Microsoft Authenticator installed on your mobile phone, please download and install it from either the Apple App Store or Google Play.
1) Open CUNY MFA Self-Service (https://ssologin.cuny.edu/oaa/rui).The CUNY Login page displays.
2)Enter your CUNY Login username and password, then click Log in.
- If you are setting up a CUNY Login MFA for the first time, an Oracle Access Manager page is displayed containing a confirmation message with the instruction to click OK to continue. Go to Step 3 to continue setting up a CUNY Login MFA.
- If you already set up a CUNY Login MFA, a window is displayed prompting you to choose your MFA login method from the displayed list of Mobile Authenticator devices.
- An Oracle Identity Management page is displayed asking you to grant access to continue.
3) Click Allow to continue
The CUNY Login Advanced Authentication - Manage your authentication page is displayed.
4) Click on Add Authentication Factor to display the list of authentication factor methods.
5) Choose Mobile Authenticator - TOTP.The CUNY Login Advanced Authentication - Setup Mobile Authenticator page is displayed.
6) In the Friendly Name field, type a name (such as “CUNY_Login_MFA”) to easily distinguish CUNY Login MFA from any other accounts in Microsoft Authenticator.
If you do not already have Microsoft Authenticator installed on your mobile phone, please download and install it from either the Apple App Store or Google Play before proceeding.
7) Open Microsoft Authenticator on your mobile phone. If you are using Microsoft Authenticator for the first time, select Scan a QR Code and skip to step 10 to take a picture of the QR Code.
8) In Microsoft Authenticator, tap the plus sign (+) to add a new account.
9) In Microsoft Authenticator, tap Other account (Google, Facebook, etc.).
10) In Microsoft Authenticator, do ONE of the following:
- Take a picture of the QR code displayed on the CUNY Login Advanced Authentication - Setup Mobile Authenticator page.
- Tap OR ENTER CODE MANUALLY, type in the friendly name and key from the CUNY Login Advanced Authentication - Setup Mobile Authenticator page, then tap FINISH.
- This sets up a new MFA account in Microsoft Authenticator having the friendly name you typed.
11) In Microsoft Authenticator, tap on the name of the MFA account you just added. Microsoft Authenticator displays the MFA account with a one-time password code that changes every 30 seconds.
12) On the CUNY Login Advanced Authentication - Setup Mobile Authenticator page, click Verify Now. A Verification Code field is added to the CUNY Login Advanced Authentication - Setup Mobile Authenticator page.
13) In the Verification Code field on the CUNY Login Advanced Authentication - Setup Mobile Authenticator page, type the one-time password code from your Microsoft Authenticator app and click Verify and Save.
The CUNY Login Advanced Authentication - Manage your authentication page is displayed with an Authentication Factors window showing the Mobile Authenticator - TOTP MFA account just added.
14) Click on your CUNY Login username in the top right corner of the page and choose Logout. Your CUNY Login MFA method has been set up and the corresponding MFA account is now in Microsoft Authenticator.
Note: Unless you have set up multiple authentication factors in CUNY Login Advanced Authentication – Manage your authentication, DO NOT set up an authentication factor as a default.
The instructional video attached at the bottom go tis article provides a quick overview of setting up your MFA:
View next article on how to respond to MFA Requests/Prompts