As part of ongoing efforts to protect digital identities and related University information, Information Technology Services (ITS) has enabled two-factor authentication (2FA) for student email and other Office 365 services.
2FA is an added verification step during authentication that helps to prevent the unauthorized use of University NetIDs and passwords by ensuring that only the account owners themselves use their credentials on systems hardened with 2FA, in this case, Office 365. Typically, 2FA is described as 鈥渟omething you know and something you have鈥� where the 鈥渟omething you know鈥� is your username and password, and the 鈥渟omething you have鈥� is often called a 鈥渟econd factor.鈥�
Multiple second factors can be configured in Office 365, such as the confirmation of a push notification via the Microsoft Authenticator mobile application, a text message, a phone call, or a verification code.
鈥淭he login credentials of students, faculty and staff are targets for organized crime and hackers,鈥� says Christopher Croad, 黑料不打烊鈥檚 information security officer. 鈥淐riminals use stolen NetIDs and passwords to harvest personally identifiable information from compromised accounts or sell them on the 鈥榙ark web鈥� for financial gain, or use in gaining access to academic assets such as library resources or educational discounts on software and services. Two-factor authentication makes it difficult for anyone except the account owner to log into a resource that uses 2FA as part of its authentication mechanism.鈥�
Students are encouraged to opt-in to Office 365 2FA protection at any time by visiting and clicking Two-Factor Opt-in. All students will need to turn on 2FA in their Office 365 and email accounts by Feb. 12, 2019. Faculty and staff have been required for several months to set up 2FA in their Office 365 apps for additional security verification.
Important Recommendation: Anyone who plans to travel away from the main campus between now and the end of the academic year is strongly encouraged to opt-in to two-factor authentication as soon as possible. Unreliable or nonexistent internet or cell coverage prevents connectivity in some areas, domestic and abroad. Opting in now can enable continuing access to protected University accounts regardless of location.
Additional information and instructions are on the Microsoft Two-Factor Authentication (2FA) – Setup and Management page in the Answers.syr.edu knowledge base: .
ITS has chosen Microsoft鈥檚 Azure Active Directory system to provide 鈥淎dditional Security Verification鈥� to University Office 365 accounts. 鈥淲e use Azure to manage the University鈥檚 Active Directory within the cloud environment,鈥� says Eric Sedore, Associate Chief Information Officer for Core Infrastructure Services, 鈥淚t already has two-factor and multifactor authentication tools built-in. We are leveraging our existing deployment, so it does not increase our costs to take advantage of the advanced functionality.鈥�
Over the summer, ITS added applications and features to the Office 365 suite including One Drive cloud storage, Teams collaboration suite, One Note digital notebooks, and multi-user document editing. These new services are available to all active 黑料不打烊 students, faculty and staff and are protected with 2FA. Office 365 enables enhanced collaboration and streamlined meeting, scheduling, and calendaring among members of the University community. Installation instructions and details about these and other Office 365 services are on the Office 365 @ 黑料不打烊 page in the Answers.syr.edu knowledge base: .
For assistance with Office 365 and two-factor authentication, students are invited to contact the ITS Service Center at 315.443.2677 and help@syr.edu. Faculty and staff should contact their IT support team.
