Yes. You can use Duo, however your phone won't be sent a prompt. You will have to enter the 6 digit code that Duo generates instead.

Have students login to their D2L accounts on a campus computer before their exam date to ensure they will be able to access it during exams. For more information on supporting students with MFA, refer to the troubleshooting guide.

If you logged into D2L or your MRU email on a device before the deadline to enable MFA, then as long as you stay logged in, you can still access everything. However, if you log out of that device or login to a new one, you will be locked out and have to contact the IT Service Desk to regain access.

You have lost access to your account because you did not enable MFA. Contact the IT Service Desk to regain it. They are the only ones who can reset your account.

Enabling MFA on your Mount Royal email account will also protect your D2L login. 

No. Mount Royal University retains control of all email accounts. Therefore unlike your personal email account, if you lose your second factor the Service Desk can reset the account for you. You will have to enable MFA all over again but you will still be able to get into your emai. Once you have enabled MFA  on your email, you will also be able to login to D2L.As this process is rather inconvenient, we do encourage you to set up one or more back-up factors in case you lose access to your phone or your authenticaiton key.

MFA does not work with Exchange accounts. Remove your MRU email account from your phone and then add it as a 
Google account. When adding the account, remember to enter your entire address, not just what appears before @.

ITS will provide anyone who does not own an Android smartphone or iPhone with an authentication key. To get your key, fill out the request form. You will only be provide with one. Additional keys can be purchased from Amazon. Details on how to enable MFA  on your MRU email and D2L with an authentication key can be found here. Instructions on how to enable MFA on the GlobalProtect VPN with an authentiation key can be found here.

After February 28, 2022 you will not be able to disable MFA. If you get a new phone, you will have to set it up for MFA before you get rid of your old one. For details on setting up MFA on a new phone for your MRU email and D2L, see Setting up MFA for your MRU email on a new phone. For details on setting up MFA on a new phone for the GlobalProtect VPN, visit the Duo Security website. 

While using your phone is the easiest and most convenient second factor, we understand if you don't want to use it. You can use an authentication key as your second factor. ITS will provide an authetication key for free to anyone that requires one. To receive your key, fill out the request form. You will only receive one. Additional keys can be purcahsed from Amazon.

If you have forgotten your phone or authentication key, you should still be able to access your email and D2L on your regular devices. Usually you will only be asked for a second login factor when you are logging in to a new device. If you do need to login to a new device or are asked for a second factor, click the Try another way link at the bottom of the dialog box and select Enter one of your 8-digit backup code. Enter one of your backup codes that you printed off and you are good to go. If you didn't print off backup codes, then you will have to call the IT Service Desk at 403-440-6000 and get your account reset.

Authentication keys are issued for free by ITS for those who do not have an Android phone/iPhone or who do not want to use their personal device for work. To get your key, complete the request form. You will only recieve one. Additional keys can be purchased at Amazon.

Yes. Each authentication key can be set up as a second factor for multiple services. You will only need one key regardless of how many services you are using it for, however each service will have to be set up separately. Unfortunately, the MFA set up for one service does not transfer over to another.

If you have access to a generic email account, it may be a delegated account, Google group or a shared account. Delegated accounts allow you to access emails from your own Mount Royal email account without logging into the delegated account directly. If you click on your profile pic in Gmail and see the account listed with delegated next to it, it is a delegated account.

 

 

Even though you may have received a notification to enable MFA on that account, you don't have to. We know that it confusing so we are working on identifying all the delegated accounts so we can remove them from MFA notifications. 

With shared accounts, you have to login to the account itself to access emails. They are usually set up because the generic account needs a Youtube channel of its own or to set up its own forms. If you have a shared account, please do not ignore the MFA notifications and contact the IT Service Desk 403-440-6000 to find out if MFA is required. This will be determined on a case by case basis depending on how the account is used.

Google groups aren't actually email accounts so you don't see them listed with your delegated accounts and you will recieve no notifications to enable MFA for them. They are mail lists that you subscribe to or create.  They are often set up to send emails directly to your inbox,  however you can also access the emails from the Google Group app. As Google groups are part of the Google Workspace, you don't need to MFA them separately.  They are protected when you enable MFA on your MRU email account. 

Not for your MRU email or D2L. Google normally only asks for your second factor when you login to a new device or every 30 days. However, it will also ask anytime it thinks something odd is going on with your account. Unfortunately we have no control over what Google considers odd. So if you are being asked more than you like, we apologize but the Great Google is calling the shots.

Unfortunately you will be asked for your second factor everytime you login to the GlobalProtect VPN.  As you are connecting remotely directly to the network, higher security measures are required. 

We have accessibility related accommodations that we can offer to make enabling and using MFA possible for almost everyone on campus. However, we are aware that there may be cases where enabling MFA is not feasible. Please contact the IT Service Desk at 403-440-6000 to discuss your needs and how we can accommodate them.

For security reasons, there is no backup option for logging into the VPN. You will have to contact the IT Service Desk to regain access.