What is Multi-Factor Authentication?
Single factor authentication, such as typing a password, is increasingly insufficient protection for online accounts. The combination of phishing, malware, and brute-force guessing present a formidable threat to single factor authentication.
Multi-Factor Authentication (MFA) requires more than one factor to authenticate. Most commonly, MFA requires typing a password (first factor) and entering a one-time code (second factor) generated by a device, such as Google Authenticator on you phone. With MFA, an attacker will not be able access your account simply by knowing your password. The attacker must also have the device capable of generating a code, a much more difficult tasks.
How to use MFA at Berkeley Lab?
Most people already use MFA at Berkeley Lab and/or to secure their personal accounts.
When using MFA at Berkeley Lab, after entering your username and password you will be prompted for a one-time code, as follows:
If you are a member of an Operations division, MFA was required to login Berkeley Lab enterprise applications (Gmail, LETS, FMS, etc.) in May 2018
If you are a member of a Scientific division, you can opt-in to use MFA for Berkeley Lab enterprise applications beginning September 2018.
MFA Frequently Asked Questions (FAQ)
- How do I opt-in to MFA?
- How can I manage my Google Authenticator MFA tokens?
- How do I manage my Yubikey MFA tokens? (Operations Only)
- I lost my MFA token and can't login?
Other MFA resources Berkeley Lab
- Multi-Factor Authentication for FMS and HRIS - MFA for FMS is required for any users that have been opted or required to use MFA
- Multi Factor Authentication for HRIS - MFA for HR personnel logging into Berkeley Lab HR databases and accessing Personally Identifiable Information (PII) data
- Multi Factor Authentication for Windows (StrongID) - MFA for Operations personnel logging into Windows Active Directory computers (sometimes known as StrongID)
- Multi Factor Authentication for Privileged Server Access - MFA for access to critical servers and services via gateways (sometimes known as L4 Gateways, or L4 StrongID)
- Lawrencium HPC Cluster - MFA for HPCS Clusters
If you have questions regarding MFA enrollment, please submit a help ticket.
