Responding to MFA Requests/Prompts
Once a CUNY application or service is enabled for CUNY Login multi-factor authentication, you will be prompted for an MFA authentication method and one-time password code after entering your CUNY Login credentials.
The following procedure provides instructions on providing an MFA authentication method and one-time password code during the CUNY Login process:
- In the CUNY Login window, enter your CUNY Login username and password, then click Log In.
A window is displayed prompting you to choose your MFA login method from the displayed list of Mobile Authenticator devices.
If you are also prompted to share your location with ssologin.cuny.edu, click Allow. 
Notes:
- If you do not see a window prompting you to choose your MFA login method, your CUNY Login MFA setup may be incomplete. Clear the browser cache, close the browser window, and then follow the instructions in Setting Up CUNY Login MFA before attempting remote access again.
- DO NOT choose to Remember Choice. This will set the displayed method as the default which causes issues when only a single TOTP method has been configured.
2. Click on the Enter OTP from device link corresponding to the friendly name you set up for CUNY Login MFA.
A window is displayed prompting you to enter the one-time password (OTP) from your mobile phone.
3. Open the Microsoft Authenticator app on your mobile phone to display the one-time password code.
Make sure to open the account you set up for use with CUNY Login MFA.
4. In the Enter OTP from the registered phone field, enter the one-time password code and click Verify.
The CUNY application or service opens for your use.
Managing Authentication Factors
You may want to add an additional authentication factor if you have more than one mobile phone, want to try a different authentication app, or are migrating your apps and data from an old phone to a new one. If you have more than one authentication factor, you can disable or remove those you no longer need.
Note:
Do not delete or disable your last working authentication factor. If you do, you will not be able to respond to CUNY Login MFA prompts to access applications.
To manage your CUNY Login MFA authentication factors:
- Enter your CUNY Login username and password, then click Log in.
A window is displayed prompting you to choose your MFA login method from the displayed list of Mobile Authenticator devices.
If you are also prompted to share your location with ssologin.cuny.edu, click Allow. 
Notes:
- If you do not see a window prompting you to choose your MFA login method, your CUNY Login MFA setup may be incomplete. Clear the browser cache, close the browser window, and then follow the instructions in “Setting Up CUNY Login MFA” before attempting remote access again.
-
DO NOT choose to Remember Choice. This will set the displayed method as the default which causes issues when only a single TOTP method has been configured.
- Click on the Enter OTP from device link corresponding to the friendly name you set up for CUNY Login MFA.
A window is displayed prompting you to enter the one-time password (OTP) from your mobile phone.
- Open the Microsoft Authenticator app on your mobile phone to display the one-time password code.
Make sure to open the account you set up for use with CUNY Login MFA.
- In the Enter OTP from the registered phone field, enter the one-time password code and click Verify.
An Oracle Identity Management page is displayed asking you to grant access to continue.
- Click Allow to continue.
The CUNY Login Advanced Authentication - Manage your authentication page is displayed with an Authentication Factors window showing your authentication factors and their status. 
Do one of the following:
- To add a new authentication factor, click on Add Authentication Factor button and follow the steps in Setting Up CUNY Login MFA.
- To set an authentication factor as the default, click on its associated menu (…) and choose Default.
- To delete an authentication factor, click on its associated menu (…) and choose Delete.
- To disable an authentication factor without removing it, click on its associated menu (…) and choose Disable.
- To enable a disabled authentication factor, click on its associated menu (…) and choose Enable.
Notes:
- If you have only a single authentication factor, DO NOT set it as the default. You can remove the default setting by clicking on the menu (…) and choosing Remove Default.
- You must always have at least one authentication factor enabled. If you do not, you will not be able to access any applications that require CUNY Login MFA.
- When you are finished managing your authentication factors, click on your CUNY Login username in the top right corner of the page and choose Logout.
If you have any issues with CUNY MFA, you can find fixes here: Common Issues and Fixes for CUNY MFA