MFA: I Got a Sign-in Request I Didn't Start

Learn what to do when Microsoft Authenticator asks you to approve a sign-in you didn't start.

Deny it. Someone else has your password.

An MFA request only appears after someone enters your NCU password. If it wasn't you, someone else is trying to get into your account. Approving it gives them access.

What to do

1

Deny the request

In Authenticator, select No, it's not me or Deny. If it asks for a number, don't enter one.
2

Change your NCU password right away

This stops whoever has it. See Changing or Resetting Your University Password.
3

Tell IT

Submit a request through Report Information Security Incidents or call the IT Service Desk at 612.343.4170, or visit Miller Hall 226.

If the requests keep coming

Some attackers send request after request, hoping you'll approve one just to make them stop. Keep denying them, change your password, and contact IT. The requests stop once your password is changed.

How to tell a real request

  • You just entered your password on a sign-in page.
  • The sign-in screen in front of you shows the same number Authenticator asks for.
  • If you're not looking at a sign-in screen right now, it isn't yours.

Already approved one by mistake? Change your password right away and contact the IT Service Desk. See Help! I Have Been Phished!.

NCU IT will never call, text, or email asking you to approve a request or share a code. Sharing your account is against NCU's Acceptable Use of Information Technology policy.

Print Article