|
As of April 3, 2024, VIP will require multi-factor authentication (MFA).
MFA has already been integrated into many UM applications, and extending its implementation to VIP is an important step forward in our commitment
to bolstering data security. If employees are already using MFA, no action will be required other than to begin using it for VIP / ESS when prompted.
What will change?
Login Experience:
All VIP users, including those utilizing the Employee Self-Service (ESS), will notice a change in their login experience.
-
Instead of using their UMNetID, users will be asked to log in with their email address and password.
-
They will then receive a message requesting authentication through Entra MFA.
Screenshots illustrating the process are provided below.
  
MFA Authentication for every login
-
Users must authenticate every time they log in to VIP. Validating the logout function is an important feature to keep private information safe. As a result, users will be required
to log in to VIP even though they have already logged into university systems in their browser. They must also re-authenticate to get back into VIP if they close their browser or if their session times out.
-
For those employees who didn’t complete their MFA setup when it was rolled out to staff in January,
instructions
are available on the IST website. Hardware tokens will be available for staff who choose that authentication method.
-
Employees will be made aware of this change by an all-employee email and a UM Today story.
I would like to thank the VIP Evolution Project Team for advancing this important work. Protecting employee
information contained in VIP by implementing MFA is a crucial step in safeguarding the university's sensitive data.
I highly value your feedback and encourage you to share any insights or questions you may have regarding this change with
the VIP Evolution project manager, Marty Lepage.
|
