Learn about Multi-factor Authentication (MFA) at North Central — what it is, how it protects your account and university data, and how to request help if you have an MFA issue or need access while traveling internationally.
What MFA is and why NCU requires it
Multi-factor authentication makes sure you are who you say you are by requiring two pieces of evidence from different categories before granting access — not just a password.
Passwords alone offer very little protection today. If a bad actor steals your password but is then prompted for a second factor they don't have, they're stopped before reaching your email, financial data, or protected records. MFA also helps NCU meet federal and industry requirements — including FERPA, HIPAA, GLBA safeguards, and Department of Defense grant eligibility — that apply to systems handling sensitive information.
How MFA works
Your credentials must come from at least two of three different categories, or factors. Two-factor authentication (2FA) is just MFA with exactly two factors.
Something you know
Knowledge
A password, PIN, or passphrase. Security questions also fall here, but they're weaker — answers can often be found through social media or phishing.
|
|
Something you have
Possession
A mobile phone (via the Authenticator app or push notification), physical token, key fob, or smartcard. It's much less likely an attacker has both your password and a physical item you own.
|
|
Something you are
Inheritance
A unique physical trait — fingerprint, facial recognition, retinal scan, or voice. Most commonly verified by a fingerprint scan on a mobile phone.
|
MFA at NCU
NCU uses the "something you know" (your password) and "something you have" (the Microsoft Authenticator app on your phone) factors. MFA is required for every site and service behind NCU Single Sign On — especially anywhere personal, financial, FERPA, or HIPAA data may be accessed.
Systems that require MFA
Any site or service using NCU Single Sign On requires MFA, including:
Colleague Salesforce University email VPN Canvas SharePoint Teams and more
Adaptive MFA
Each login is scored against your usual location, devices, and behavior. If something looks unusual — like signing in from a new place — you may be prompted for an extra check.
|
|
Conditional Access
A set of policies that require MFA based on criteria like the application being accessed, the location, the time of day, your role, or your user type.
|
Traveling abroad? Plan ahead
For employees, MFA access is restricted outside the United States. If you'll need access while abroad, submit an MFA International Travel Exception request at least one week before your trip.
Request this service
This service offers two request options. Look for the matching green button in the panel on the right (or at the top of this page on mobile) and pick the one that fits your situation:
| |
|
Report MFA Issue
Use this when: you need help with MFA or the Microsoft Authenticator — for example, the app isn't prompting you, you got a new phone, or you need MFA reset on your account.
Submit a separate request for each person who needs changes to their account.
|
| |
|
Submit Intl. Travel Exception Request
Use this when: you're an employee who will need to sign in to NCU systems from outside the United States. Submit at least one week before you travel.
|
Locked out? Don't use the form — call us
| |
612.343.4170 |
|
If you can't sign in to submit a request, or you've lost access to your MFA device, call or visit the IT Service Desk immediately. We have to take action on your account before you can get back in — the online form won't help.
|
|