{"id":3016,"date":"2024-10-04T06:34:24","date_gmt":"2024-10-04T06:34:24","guid":{"rendered":"https:\/\/support.almamater.si\/?page_id=3016"},"modified":"2026-06-24T11:35:51","modified_gmt":"2026-06-24T11:35:51","slug":"multifactor-authentication","status":"publish","type":"page","link":"https:\/\/support.almamater.si\/en\/multifactor-authentication\/","title":{"rendered":"Multi-factor authentication (MFA)"},"content":{"rendered":"\n

\"\"<\/p>\n\n\n\n

In today’s digital world, security is crucial for businesses and their data.
The steady rise in cyber-attacks and identity theft poses a serious threat to organizations of all sizes.
In this situation, it is essential to ensure effective security measures to protect sensitive information such as business data, customer financial data, intellectual property and other important data.<\/p>\n\n\n\n

One of the key methods to increase security is to use multi-factor authentication (MFA).
MFA is a security mechanism that requires more than one factor of identity verification when accessing accounts and systems.
While traditional authentication methods such as using only passwords are becoming less reliable, MFA provides businesses with additional protection against attacks and unauthorised access.<\/p>\n\n\n\n

TERMINOLOGY<\/h2>\n\n\n\n

To make it easier to understand the content of the document, let’s define the terms that will be used in the following chapters.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n
\n

The concept<\/p>\n<\/td>\n

\n

Explanation<\/p>\n<\/td>\n<\/tr>\n

\n

Authentication<\/p>\n<\/td>\n

\n

In computing, authentication is the process by which a server makes sure that a user is really who they say they are.
The most common method authentication is the entry of a username and password in the process of logging into a specific IT system.<\/p>\n<\/td>\n<\/tr>\n

\n

Authentication app<\/p>\n<\/td>\n

\n

An app installed on your smartphone to confirm a new registration.<\/p>\n<\/td>\n<\/tr>\n

\n

Authentication method (enrollment method)<\/p>\n<\/td>\n

\n

The authentication method is the authentication security mechanism that will be used to authenticate new logins to your profile.
Typically, these methods are:<\/p>\n

    \n
  • validating the application by obtaining a random number from the SMS to mobile phone<\/li>\n
  • confirmation of registration by calling and confirming registration on your mobile phone<\/li>\n
  • confirming your registration by calling and confirming your registration at business phone<\/li>\n
  • validation of the application with an approval sent to a pre-established authentication application on a mobile smartphone<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
\n

Multi-Factor Authentication (MFA for short)<\/p>\n<\/td>\n

\n

Multi-factor authentication is an additional security mechanism to give your profiles a higher level of security.
MFA is an acronym in the Microsoft world, but is also known more widely as 2FA (two-factor authentication).<\/p>\n<\/td>\n<\/tr>\n

\n

PIN number<\/p>\n<\/td>\n

\n

A four- or multi-digit number that can serve as a security mechanism as an alternative to a password.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n

SETTING UP MULTI-STAGE VALIDATION<\/h2>\n\n\n\n

The following section explains how to set up MFA for a service user account.
In the presented example, we used a mobile smartphone with Android operating system and a PC to add security mechanisms.<\/p>\n\n\n\n

If you don’t have a smartphone, you can use a regular mobile phone (text, call) or a landline or security key.<\/p>\n\n\n\n

Once you have set up MFA with at least one of the security mechanisms, please fill in the form on the link that manages user accounts to activate MFA validation on your user profile.
You can do this via the following form: <\/strong>https:\/\/bit.ly\/MFA-aktivacija<\/strong><\/a><\/p>\n\n\n\n

If you have any problems, you can always contact IT Support: <\/strong>support@almamater.si<\/strong><\/a><\/p>\n\n\n\n

\n1. Adding security mechanisms to a user profile<\/summary>\n
\n
    \n
  1. \n

    Open Office.com<\/a> in the web browser of your choice and log in with your profile (user\/student account):<\/p>\n

    \"\"<\/p>\n<\/li>\n

  2. \n

    The website redirects you to the login screen, enter your username and select Next<\/em>:<\/p>\n

    \"\"<\/p>\n<\/li>\n

  3. \n

    Once you\u2019ve successfully logged in, you\u2019ll be on the website, where you can select Options <\/em>and then Update contact settings.<\/em><\/p>\n

    \"\"<\/p>\n<\/li>\n

  4. \n

    We are then redirected to the MyAccounts page (in case it doesn\u2019t redirect us, we adjust the LINK<\/a>) and select Security Details<\/em>:<\/p>\n

    \"\"<\/p>\n<\/li>\n

  5. \n

    Select \u201cAdd a way to enroll\u201d.<\/p>\n

    \"\"<\/p>\n<\/li>\n

  6. \n

    There are several ways to enroll:<\/p>\n<\/li>\n<\/ol>\n\n\n\n\n\n\n\n
    \n

    Autentikator app<\/em><\/strong><\/p>\n<\/td>\n

    		\n

    Works on Android, iOS smartphone<\/strong><\/p>\n<\/td>\n

    		\n

    Recommended method<\/strong><\/p>\n<\/td>\n<\/tr>\n

    \n

    Phone<\/em><\/p>\n<\/td>\n

    		\n

    Code by SMS or call<\/p>\n<\/td>\n

    		\n

    Recommended as an alternative<\/strong><\/p>\n

    instead of <\/strong>or in place of a smartphone<\/p>\n<\/td>\n<\/tr>\n

    \n

    Replacement phone<\/em><\/p>\n<\/td>\n

    		\n

    Code by SMS or call<\/p>\n<\/td>\n

    		\n

    Alternative in case you can\u2019t use your mobile phone<\/p>\n<\/td>\n<\/tr>\n

    \n

    Business phone<\/em><\/p>\n<\/td>\n

    		\n

    Call<\/p>\n<\/td>\n

    		\n

    Alternative mode in case of inability to use the axle.
    phone<\/p>\n<\/td>\n<\/tr>\n

    \n

    Security key<\/em><\/p>\n<\/td>\n

    		\n

    USB stick, biometric authentication<\/p>\n<\/td>\n

    		\n

    The security key must be inserted in the device at the time of enrollment.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/details>\n\n\n\n

    \n2. Setting up the “Authenticator” method on your smartphone<\/summary>\n
    \n
      \n
    1. \n

      After selecting Add a method to sign in <\/em>on your computer, we are presented with all the possible authentication methods that we can choose.
      If we want to edit the authentication using the Authenticator application, we select the Authenticator application<\/em> option:<\/em><\/p>\n

      \"\"<\/p>\n<\/li>\n

    2. \n

      And we continue with Add<\/em>:<\/p>\n

      \"\"<\/p>\n<\/li>\n

    3. \n

      At this point, a window will pop up where we will select the next step, depending on the application we want to use.<\/p>\n

      \"\"<\/p>\n<\/li>\n<\/ol>\n

      \nFOR STUDENTS ONLY- ADDING THE STUDO AUTHENTICATOR APP<\/summary>\n
      \n
        \n
      1. \n

        We recommend that students use Studo instead of the default Microsoft Authenticator app.
        Follow the steps below to add this method:
        <\/strong>Click on \u201cI want to use another authentication app<\/strong>\u201d (I want to use a different authenticator app) (at the bottom of the dialog) and click Next<\/em>.<\/p>\n<\/li>\n

      2. Open the Studo app on your phone, open the side menu and go to Authenticator<\/em>.
        \"\"<\/li>\n
      3. Click on the + in the bottom right corner and select Scan QR Code<\/em>.
        \"\"<\/li>\n
      4. \n

        3. Scan the code that appears on your laptop.
        \u2192 The new authentication code will appear in the Studo app.<\/p>\n<\/li>\n

      5. \n

        4. Click Next<\/em> on your laptop, enter the code shown in the Studo app and confirm.<\/p>\n<\/li>\n

      6. \n

        Read more about Studo Authenticator here: Studo Authenticator<\/a>.<\/p>\n<\/li>\n<\/ol>\n<\/div>\n<\/details>\n

        \nADDING THE MICROSOFT AUTHENTICATOR APP<\/summary>\n
        \n
          \n
        1. \n

          Leave the window open on your computer and take out your smartphone. <\/strong>You can download the Microsoft Authenticator app from HERE<\/a>.<\/p>\n<\/li>\n

        2. \n

          Once the app has been successfully installed, we open the app and accept the privacy terms:<\/p>\n

          \"\"<\/p>\n<\/li>\n

        3. \n

          Leave it unticked and select Continue:<\/em><\/p>\n

          \"\"<\/p>\n<\/li>\n

        4. \n

          After successful installation, we open the application and accept the privacy terms:<\/p>\n

          \"\"
          \"\"<\/p>\n<\/li>\n

        5. \n

          Go back to your computer to the window that is still open<\/strong>, select Next <\/em>and the QR code will appear on your monitor.
          Scan<\/strong> this QR code with your smartphone:<\/strong><\/p>\n

          \"\"<\/p>\n<\/li>\n

        6. \n

          Once scanned, select Next <\/em> on your computer and <\/em> OK<\/em> on your smartphone<\/strong>.<\/em><\/p>\n

          \"\"
          \"\"<\/p>\n<\/li>\n

        7. \n

          A number appears on your computer<\/strong>, which you enter into an app on your smartphone<\/strong>:<\/p>\n

          \"\"
          \"\"<\/p>\n<\/li>\n

        8. \n

          If we have configured a smartphone lock, we need to authorize enrollment using one of the pre-set security methods:<\/p>\n

          \"\"<\/p>\n<\/li>\n

        9. \n

          If we have done everything correctly, we are notified of the success on the computer:<\/p>\n

          \"\"<\/p>\n<\/li>\n

        10. \n

          This is how we added the authentication method using the Authenticator application.
          If you want to add SMS or some other method, you can continue reading the instructions.<\/p>\n<\/li>\n<\/ol>\n<\/div>\n<\/details>\n<\/div>\n<\/details>\n\n\n\n

          \n3. Setting up the “mobile phone” method<\/summary>\n
          \n
            \n
          1. \n

            You are on (https:\/\/myaccount.microsoft.com\/settingsandprivacy\/privacy<\/a>) and select Add enrollment mode<\/em>:<\/p>\n

            \"\"<\/p>\n<\/li>\n

          2. \n

            Select the Phone<\/em> option:<\/em><\/p>\n

            \"\"<\/p>\n<\/li>\n

          3. \n

            Enter the phone number and select \u201cSend me the code in a text message\u201d.<\/p>\n

            \"\"<\/p>\n<\/li>\n

          4. \n

            Take your mobile phone, wait for the SMS message to arrive and type the 6-digit, time-limited number into the window on your computer:<\/p>\n

            \"\"<\/p>\n<\/li>\n

          5. \n

            If the correct 6-digit code is entered, we get a confirmation that the added authentication method was successful:<\/p>\n

            \"\"<\/p>\n<\/li>\n<\/ol>\n<\/div>\n<\/details>\n\n\n\n

            \n4. Changing the default authentication method<\/summary>\n
            \n
              \n
            1. \n

              The authentication methods set up for our profile can be seen on the website (https:\/\/mysignins.microsoft.com\/security-info<\/a>), where we can change the default <\/strong>login method <\/strong>.
              The default method will still be used as the first offered, i.e. preferred authentication method. In any case, you can always choose between the other modes you have previously set up each time you sign in.<\/strong><\/p>\n<\/li>\n

            2. \n

              The default authentication method is set as follows:<\/p>\n

              \"\"<\/p>\n<\/li>\n

            3. \n

              Select a mode from the drop-down menu:<\/p>\n

              \"\"
              \"\"<\/p>\n<\/li>\n<\/ol>\n<\/div>\n<\/details>\n\n\n