Multi-Factor Authentication (MFA)

What Is Multi-Factor Authentication (MFA)?

Multi-factor Authentication (MFA) is a security process that requires you to verify your identity in more than one way when signing into an account. It is designed to strengthen the account by adding additional layers of protection beyond just a username and password.

MFA uses at least two of the following three categories to confirm your identity:

  • Something you know (such as a password)
  • Something you have (such as a mobile device, hardware token, or security key)
  • Something you are (such as facial recognition or fingerprint)

This layered approach greatly reduces the likelihood of unauthorized access and helps keep your account secure.

Why Use MFA?

Implementing MFA is rated as the number one activity an organization can do to improve their IT security posture. It significantly reduces the risk of security breaches so sensitive data can stay protected. 

Without MFA, accounts at Okanagan College would only require a username and password to gain access to applications and sensitive personal, institutional, and research data.

By using MFA, your digital identity, data, and access to OC systems will be protected even if your username and password are compromised. 

Multi-Factor Authentication (MFA) at Okanagan College

To access your Okanagan College account, you must complete multi-factor authentication (MFA) by providing two verification factors:

  • Factor 1: Your password
  • Factor 2: One of the supported authentication methods below

Supported MFA Methods

Recommendation

Okanagan College strongly recommends using passwordless authentication methods such as the passkey in the Microsoft Authenticator app or a FIDO2 security key. By eliminating the need to enter a password, you significantly reduce the risk of it being intercepted through phishing or fraudulent login pages, making it much more difficult for cyber criminals to access your account.

Access to OC Services

Once MFA is successfully configured, you will be able to securely access the following Okanagan College services:

How To Set Up or Change MFA on Your OC Account

Students

Once your student account has been created by us, you will receive an email from OC-DO-NOT-REPLY@okanagan.bc.ca with instructions on how to reset your OC password and sign in.

During your first login, you’ll be prompted to set up Multi‑Factor Authentication (MFA), with on‑screen steps to guide you through the process. For additional help, please refer to the “OC Students – Getting IT Started – How to Access your myOkanagan Account” knowledge base article.

If you encounter any issues during setup, please contact the IT Help Desk for assistance.

Staff

Once your staff account has been created by us, you will receive an email from ITSecurity@okanagan.bc.ca with instructions on how to reset your OC password and sign in.

At your first login, you will be prompted to complete your Multi‑Factor Authentication (MFA) setup, with on‑screen steps to guide you through the process.

If you experience any difficulties during setup, please reach out to the IT Help Desk for support.

Commonly Asked Questions

When logging into your OC account, you’ll first enter your college email and password. You’ll then be prompted to verify your identity using the MFA method you’ve already set up, such as approving a notification in your authenticator app, inserting a security key, or entering a time‑based code from a hardware token. Once you complete the verification step, you’ll be signed in to your account.

Not always. In most cases, you won’t be prompted for MFA every time you sign in. However, you may be asked to verify your identity more frequently in situations that appear higher‑risk, such as when you’re on public Wi‑Fi, travelling, signing in from an unusual location or IP address, using a new device, accessing a new service, or when other risk factors are detected.

When this happens, you’ll simply be prompted to enter your MFA verification code to confirm it’s really you and help keep your account secure.

SMS is available as an authentication method for students; however, we strongly recommend using the Microsoft Authenticator app instead. The app is faster, more reliable, and significantly more secure than SMS.

Employees should always use a stronger MFA method, such as the Microsoft Authenticator app or one of the other approved options listed above.

If the device you use for MFA is lost or stolen, please contact the IT Help Desk as soon as possible. We will remove the device from your account to prevent unauthorized access and set you up with an alternative authentication method so you can quickly regain access to your Okanagan College account.

If you forget your MFA device, there’s a good chance you won’t be able to sign in, especially if you’re using a new device or signing in from a new location. If this happens, please contact the IT Help Desk. We can help by setting up a temporary MFA method so you can regain access until you have your primary MFA device again.

Employees

If you do not have a mobile device or you do not want to use your personal device, you can either purchase a security key such as a YubiKey or submit a hardware token request to use instead.

Students

If you do not have a mobile device or you do not want to use your personal mobile device for authentication, you can either purchase a security key such as a YubiKey or contact the IT Help Desk for suggestions and assistance with setting up alternative options.

A hardware token is a small, portable device, that generates a new 6‑digit PIN every 60 seconds. They are usually compact enough to clip onto a keychain. At OC, we use DeepNet Security SafeID hardware tokens.

If you meet the requirements for using a hardware token, staff members can request one by submitting a hardware token request.

IT Services could view basic details about your device after you set up the Microsoft Authenticator app. This information includes:

  • Device model
  • Device manufacturer
  • Operating system
  • Microsoft Authenticator app version

Please visit the Microsoft Authenticator FAQ page for more information.

Please contact the IT Help Desk.