MCC Daily Tribune

Tech Alert: MFA (Multifactor Authentication) Microsoft Authenticator Update

Microsoft has announced that it will be making a minor change to the Microsoft Authenticator MFA push notification process in February by adding number matching. This simply means that when you respond to a MFA push notification, you will be shown a number that you need to type in to complete the approval. Number matching combats “MFA fatigue” cyberattacks which are currently the biggest weakness in the Authenticator process. Once a cyber-criminal has obtained someone’s credentials and discovers they are protected with MFA, they will typically send dozens of repeated push authentication requests to overwhelm the owner. Unfortunately, users may succumb to the annoyance and accept these requests to make the authentication notifications stop. This allows hackers to access their accounts and puts the college at risk.

Note: This update only affects users of the Microsoft Authenticator app. 

MCC will roll out this change to all users on Monday February 13. Members of the MCC community who use Microsoft Authenticator push notifications as their MFA authentication method of choice will be prompted by the app to enter a 2-digit number that is presented at the time of authentication, instead of just tapping the Approve button. The Authenticator app will also show a map showing the approximate geolocation of the authentication request to assist users in determining the validity of these push requests. When prompted for authentication on a mobile device, be alert and note the number as the Authenticator app may make it difficult to read.  
 
The use of the Microsoft Authenticator app is still the most secure MFA option and we encourage members of the MCC community to make it their default authentication choice. Please ensure you are using the latest version of the app by checking your device’s App Store for updates. For assistance, employees should call the Employee Technology Support Center at 292-8324 (TECH), option 3, Monday through Friday, 8:45am to 4:45pm. Students should call the Student Technology Helpdesk at (585) 292-8324, option 1 or email technologyhelp@student.monroecc.edu. 

Ann Penwarden
Computing & Information Technology Services
01/26/2023