MFA will be required for student workers logging in to the Workday ERP. This is for your protection since Workday allows managing banking information and a compromised password could have financial implications. Other students may elect to use MFA, if desired. In either case, you still need to practice good password habits as not all systems have MFA protection.
It is critical that you follow the steps exactly or you will lock yourself out of CAS SSO logins (Moodle, Gsuite, Zoom, Workday, etc).
Step 1: Install a TOTP MFA token generator from your phones app store. Examples include Google Authenticator (shown in the video walk-through), Authy, FreeOTP, etc. Some Password management tools also include a TOTP token generator.
Step 2: Enable MFA on your account by visiting the website http://mfa.latech.edu/ . You will find similar instructions there. DO NOT enable it unless you are ready. You cannot turn it off yourself.
Step 3: After enabling MFA, your next subsequent CAS based login will present a QR code to scan using the installed TOTP MFA token generator. After scanning the QR code, use the print button to print the “scratch codes”. These can be used in an emergency if you do not have your phone available. Keep them in a secure place. Click register to complete the process. DO NOT click the register button without scanning the QR code. You will lock yourself out of your account.
Step 4: After the registration, you will be asked to enter a code. The code will be displayed in the TOTP app on your phone. Enter it on the screen to confirm the login.
Step 5: You will be asked to enter a name for the device you are using to login. You will not have to confirm again for 30 days on this device. Currently there is no way to skip this step, so if you do not want a device remembered, use an incognito/private window. We’ll be looking to add a skip option on this screen soon.
If you lock yourself out… You will need to have MFA removed from your account and restart the MFA enrollment process. To have MFA removed from your account you must contact the Help Desk and provide a photo with your Student ID as proof of identity.
