Enrolling and Using Multi-Factor Authentication (MFA)

Multi-Factor Authentication, aka MFA, combines something you know (password) with something you have (see Equipment Options). Using two factors, instead of one, greatly increases security and protects your account.

MFA is mandatory for all UCLA faculty, staff, and student employees beginning October 31, 2017.

MFA at UCLA is just for logging into UCLA sites that require a (shibboleth) login. For example: financial systems, Box, TRS, Google Apps for UCLA (g.ucla.edu), MyUCLA, CCLE and other protected sites. It is also required if you work remotely and use VPN to secure your session.

MFA is not used for logging into your Library workstation or to Jira, Confluence, or Voyager. It is also not used for Office365.

Here are some useful links with helpful tips and more information:

Multi-Factor Authentication (MFA) Methods
How Do I Enroll in MFA? (Bruin Online)
MFA at UCLA (IT Services)
MFA Knowledge Base FAQ's (Bruin Online KB)

Equipment Options

1		Duo Mobile app screen button press only, no PIN entry required, quick, free SMS Text Message user receives ten 6-digit Passcodes’s at a time, Passcodes’s are use-once only and do not time out, user hand-enters next Passcode to web site, a bit cumbersome, free Phone Call no PIN entry required, quick, free
2		Duo Mobile app screen button press only, no PIN entry required, quick, free
3		SMS Text Message user receives ten 7-digit Passcodes’s at a time, Passcodes’s are use-once only and do not time out, user hand-enters next Passcode to web site, a bit cumbersome, free Phone Call no PIN entry required, quick, free
4		Phone Call no PIN entry required, quick, free
5	Duo Hardware Token	Duo Hardware Token separate device, 6-digit PIN generator, works anywhere (does not require an internet connection), times out in ten minutes, user hand-enters PIN to web site, a bit cumbersome, $20 each. DIIT will pay for it. If you choose this option, we’ll get to you within a day. How do I activate my Duo Token? 1) Enroll in MFA by filling out an online form: https://my.logon.ucla.edu. Initially enroll using a smartphone, cellphone, tablet or work landline. You will change this to Duo Hardware Token in the next step. 2) Activate your Duo Hardware Token by filling out a second online form: https://www.bol.ucla.edu/shib/mfa-duotoken/ The BOL Helpdesk completes the process behind the scenes. Your Duo Token Generator is activated within a few days. You will be notified via email. --OR-- If you want to activate your Duo Token right away, skip the online form and simply head to the BruinOnLine office located in Kerckhoff Hall, Suite 124. You need to bring with you 2 things: Bruin Card Duo Hardware Token No need for an appointment, walk up to the desk and let the technician know that you would like to activate your Multi-factor authentication Duo Hardware Token. The BOL technician will walk you through the rest of the activation steps.
6		U2F Authenticator Universal 2nd Factor (U2F) plugs into your USB port Separate device, works with Windows or Macs, laptops or desktops, physical button press, no PIN entry, quick, $50 each, your department covers the cost Easy to move from one computer to another More info: U2F Authenticators and Duo YubiKey 4 series have been tested by ITS and work properly Using a YubiKey with Multi-Factor Authentication