Multi-factor authentication for all faculty and staff required by Oct. 20

1. All employees will need to follow the directions on this webpage in order to sign up for Multi-Factor Authentication (MFA) so you can access HFC login-based resources from off-campus.
2. The deadline to sign up is 11:59 p.m. on October 20, 2025. After that time, Multi-Factor Authentication will be required to login from off-campus.
3. The enrollment process could take several minutes to complete. Please allocate enough time to get set up.
4. Please note, you will need a computer with internet access AND your cell phone to complete the initial setup!
5. You will only need to re-authenticate every few days, and once you are set up, authenticating only takes a few seconds.
6. Multi-factor authentication is a critical step in securing HFC systems and services. Thanks for your cooperation!

(To understand what Multi-factor Authentication is, please refer to Section 3 below)

Please refer to the following PDF documents to walk you through the process. You may choose just the PDF files you need (see subheads immediately below), or download all instructions in a single document (see first item immediately below).

• Entire setup document, 25 pages, including background and all MFA setup options.

If you do not want the entire document, use the following segments of the document instead, choosing only the ones you need:

For everyone: Get started with setup, and select your authentication method

• Get started and choose your MFA method
• Verify your cell phone number

Method 1: If you choose to use an app on your phone for authentication

(If you choose this method, be sure you will always have your cell phone with you when you need to login)

• Download the app
• Set up the app on your phone
• Test app to be sure it works

Method 2: If you choose to use a hardware token (such as Yubi) that you carry with you for authentication

(If you choose this method, be sure you will always have your token with you when you need to login)

• Set up hardware token
• Test hardware token to be sure it works

For everyone: References

• Authentication example (this is what it will look like when you are using MFA to login)
• FAQs

Dear HFC employees,

Thanks for your efforts to help keep College data and technology resources secure, including participating in cybersecurity trainings and following the guidelines we provide on best practices.

Some events from the past month have confirmed that we must now take the next step in securing our networks and technologies. Eight employee user accounts were compromised as part of a phishing attack earlier this month. The student accounts this week that were phished show just how damaging successful “phishes” can be.

Starting Monday, October 20, we will require Multi-Factor Authentication (MFA) for all employees from off campus. Most higher education institutions have already implemented MFA. At this point, we will not require MFA for students.

What is Multi-Factor Authentication?

Multi-factor authentication (MFA) is a security process that requires more than just a password to login to a system or device. Users need to provide another verification factor – either an SMS push to your phone acknowledging your attempt to login, entering a six digit code from the Advance Auth app that changes at 30 second intervals , or a FIDO compliant hardware security key — to login. There is an excellent explanation of FIDO here: https://www.passkeys.com/what-is-fido-and-fido-alliance. Just as an FYI, I use a YubiKey and am very happy with it. https://www.yubico.com/product/yubikey-5-series/yubikey-5c-nfc/. There are many other lower cost options for FIDO compliant devices.

Multi Factor Authentication is the most effective tool in preventing things like phishing attacks. It will protect anything requiring an HFC authentication via the web.

Many of you are already using some form of MFA because your bank or credit card company requires it. Most Local 71 employees, exempt administrators, and SSA members were migrated to MFA last year. If you are a new enrollee, the instructions take less than a half hour to complete.

How do I sign up for MFA at HFC?

This webpage provides a set of instructions developed over the last two years that cover HFC’s MFA implementation. They are easy to follow, and they cover Android and Apple products. HFC’s implementation of MFA uses the Advance Authentication product by NetIQ. Instructions to download are in the attached document.

Follow the instructions provided. When you have successfully completed the test, email mfa@hfcc.edu (Multi Factor Authentication) to let ITS know you have successfully completed the test. You’ll be added to the group that requires MFA while off campus. This will immediately protect your account from further phishing attempts. You will also be protected from email compromises, because off-campus authentication will require access to your personal cell phone or FIDO compliant key. (I keep my Yubi key on my keychain, so I always have my device with me.)

What else do I need to know?

You MUST set up your CELL PHONE number in Self Service (sss.hfcc.edu), as this is the information the MFA app uses to send you authentication notifications. Instructions for how to do this are included in the instructions.

We have had several people enter their HOME numbers by mistake. Please review your information to be sure you are using a cell phone and not a landline.

If you try to go through the login process and are immediately sent back to the username screen, this can mean a browser cache problem. In this case, you will need to use another browser or clear the browser cache. This might also be an indication that your phone number was entered as a home number or was typed incorrectly in Self Service.

You will not currently need to use MFA when you are on campus. We may revisit this decision later.

You will only have to complete MFA once every five days from any device that you have already used with MFA. We are doing our best to balance convenience and security.

What is the timeline?

We recommend you follow the instructions to sign up for MFA immediately.

Starting Monday October 20, 2025, MFA will be required for all employees.

After that date, you will not be able to access any systems requiring an HFC web login off-campus without MFA, and you also will not be able to enroll your device from off-campus.

I appreciate everyone’s support and understanding as we try to make HFC safer.

Joe Zitnik
Director, Network and IT Infrastructure