Multi-Factor Authentication

Multi-Factor Authentication

1.What is MFA?

MFA

2.MFA - VPN Client

3.MFA Troubleshoot

4.Setup MFA via Office Portal

5.Yubikey & Yubico

SD INDEX

1.What is MFA?

1.What is MFA?

2.MFA - VPN Client

3.MFA Troubleshoot

MFA Definition

What is Multi-Factor Authentication (MFA)?

4.Setup MFA via Office Portal

Multi-factor Authentication (MFA) is an authentication method that requires the user to provide two or more verification factors to gain access to a resource such as an application, online account, or a VPN When users sign into an application or service and receive an MFA prompt, they can choose from one of their registered forms of additional verification methods: Microsoft Authenticator app, Voice Call etc.

5.Yubikey & Yubico

+ info

SD INDEX

2.MFA - VPN Client

1.You can write a title here

2.MFA - VPN Client

3.MFA Troubleshoot

MFA - Cisco AnyConnect VPN Client

You can write a subtitle here

For security protocols, Multi-Factor Authentication (MFA), also known as Two-Factor Authentication (2FA), will require further identification when logging into VPN. This will be similar to how services like online banking and personal e-mail accounts are further secured.

4.Setup MFA via Office Portal

+ info

5.Yubikey & Yubico

SD INDEX

3.MFA Troubleshoot

1.You can write a title here

2.MFA - VPN Client

3.MFA Troubleshoot

MFA as part of troubleshooting

MFA - Continental Cisco AnyConnect VPN Client

First of all, if the MFA reset procedure is used as part of basic troubleshooting, an Incident must be created The Work Order that that has been generated as a result of the MFA reset, must be related to the Incident Note: ALWAYS change the Customer and the Contact in the Work Order with the user‘s name

4.Setup MFA via Office Portal

5.Yubikey & Yubico

SD INDEX

+ Standard text

4.Setup MFA via Office Portal

1.You can write a title here

2.MFA - VPN Client

3.MFA Troubleshoot

Setup MFA via Office Portal

When the authentication by phone call fails or you need to setup a new authentication method.

In order to improve the security of Continental information, Multi-Factor Authentication (MFA) has been implemented for the VPN connection via the Cisco AnyConnect app installed on your computer. When not sitting in a Continental office, VPN must be utilized when using your company issued device.

4.Setup MFA via Office Portal

5.Yubikey & Yubico

SD INDEX

+ info

5.Yubikey & Yubico

1.You can write a title here

2.MFA - VPN Client

3.MFA Troubleshoot

How to Setup Yubikey & Yubico MFA Authentication via Office Portal

When company phone is issued and your personal phone is not functioning.

4.Setup MFA via Office Portal

In order to improve the security of Continental information, Multi-Factor Authentication (MFA) has been implemented for the VPN connection via the Cisco AnyConnect app installed on your computer. When not sitting in a Continental office, VPN must be utilized when using your company issued device. One of the most recent methods for the VPN authentication is through Yubikey & Yubico. If you do not have a YubiKey, please submit an IT ticket.

+ info

5.Yubikey & Yubico

SD INDEX

MFA - Continental Cisco AnyConnect VPN Client

>>Link<<

MFA Onboarding

MFA as part of troubleshooting

Work Order Task Handling

• Assign the MFA Request Task to yourself and change the status to “In Progress”
• Identity confirmation must be attached to Task
• Task must be documented with all actions taken, after which it will be closed with status „Closed“
• Note:
• No identity confirmation is needed if the user is the requestor!.
• ALWAYS choose the correct status reason, in accordance with the actions taken (Success, Failed, Cancelled)

How to Setup MFA via Office Portal

When the authentication by phone call is not working

• For setting up MFA please open the following link: https://myaccount.microsoft.com/

• Select "Security info" in the left bar

• Click on “Add method”.

• Select:Authenticator app and then click “Add”.

• Click on "Next" (twice).

• Open Microsoft Authenticator app click on the "+" in the upper right corner of the app's start screen, select "Work or school account" and then "Scan QR code". Now you can also scan the QR code and click "Next".

Got an idea?

Let the communication flow!

With Genially templates, you can include visual resources to wow your audience. You can also highlight a particular sentence or piece of information so that it sticks in your audience’s minds, or even embed external content to surprise them: Whatever you like! Do you need more reasons to create dynamic content? No problem! 90% of the information we assimilate is received through sight and, what’s more, we retain 42% more information when the content moves.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.

Got an idea?

Let the communication flow!

With Genially templates, you can include visual resources to wow your audience. You can also highlight a particular sentence or piece of information so that it sticks in your audience’s minds, or even embed external content to surprise them: Whatever you like! Do you need more reasons to create dynamic content? No problem! 90% of the information we assimilate is received through sight and, what’s more, we retain 42% more information when the content moves.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.

MFA setup via Cisco AnyConnect Client

When the user wants to login to the VPN via Cisco AnyConnect.

• Start the Cisco AnyConnect Client and connect to “Frankfurt GW6 MFA Only ".
• sign in via clicking on your O365 account (e.g. uid12345@contiwan.com).
• In the next window, please select “Mobile app” in the drop-down menu.
• Select "Receive notifications for verification" or alternatively "Use verification code", which you can retrieve after the configuration in your app account.
• Click on "Set up".
• "Scan QR code" on the start screen, scan the QR code and confirm by clicking on "Next".
• The Microsoft Authenticator app has been configured.

+ info

MFA: SSP7 Request is created / MFA Task is received in the SD groups

Standard Text

Dear Mr/Mrs…….    My name is ………… and I am from the Service Desk team. We received a Multifactor Authentication (MFA) Reset request from Mr/Mrs <Requestor name> for your account uiXXXXX and as per process we need your confirmation as well before proceeding with the reset.   Can you please advise if you approve the MFA Reset request mentioned? Best regards,  Your IT Service Desk Team.”

MFA setup via Cisco AnyConnect Client

When the user wants to login to the VPN via Cisco AnyConnect.

• Enter a phone number for additional security verification
• Confirm by clicking "Done".

• Select whether to stay signed in or not. If you don't want to be asked that at further logins, please enable "Don't show this again" and click on "No".

• Connection establishment with the VPN gateway is completed.

Got an idea?

Let the communication flow!

With Genially templates, you can include visual resources to wow your audience. You can also highlight a particular sentence or piece of information so that it sticks in your audience’s minds, or even embed external content to surprise them: Whatever you like! Do you need more reasons to create dynamic content? No problem! 90% of the information we assimilate is received through sight and, what’s more, we retain 42% more information when the content moves.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.

Requirements for the MFA setup with your YubiKey

How to Setup MFA via Office Portal

When the authentication by phone call is not working

• Once the QR is scan a notification for approval should appear in the Microsoft Authenticator app.

• After a successful approval, confirm by clicking on “Next”.

• Then click on "Set default sign-in method".

• select whether you want to receive a notification for approval or retrieve a 6-digit verification code

• Add a second MFA validation