To provide additional security to your UPEI account, Microsoft has changed the way multi-factor authentication (MFA) approvals occur in their authenticator app. This change involves moving to a number-matching approach rather than a generic “tap” approval. This specific activity will help reduce the risk of a cyber threat actor gaining access to your account using a technique called “MFA fatigue.” MFA fatigue, also known as “push bombing,” occurs when a cyber threat actor bombards a person with nonstop notifications until the person either approves the request by accident or out of annoyance.

Does this change impact me?

Any faculty, staff, or students currently using the Microsoft authenticator app as a registered MFA method will be affected.

Anyone currently using an Apple watch for approval notifications will need to use their phones when this change occurs.

Any other method such as a non-Microsoft authenticator app, phone number, or hardware token will not be affected by this change.

How does this impact me?

When you are faced with an authentication challenge, the challenge message will contain a number that will then need to be entered into the approval notification on your mobile device. Depending on the UPEI service you are logging into, you may also notice contextual information including the application being accessed and a map location from which the sign-in attempt originated. This information is provided to help you further determine whether it is indeed your activity that is prompting the challenge or not.

Do I have to do anything to prepare for this change?

This change will require the latest version of the Microsoft authenticator app. Visit Google Play or the Apple App Store to ensure you have the latest version installed.

When will this change occur?

This change will occur on January 24, 2023, along with the rollout of MFA for students.

Will this change require me to log in more often?

No. UPEI’s single sign-on service is still utilized, reducing the number of times you are prompted to sign in from within the same web browser or on the same device.

If you require additional assistance or have further questions, contact the ITSS Help Desk at helpdesk@upei.ca or (902) 566-0465.