Multifactor Authentication

Multifactor authentication (MFA) is the process of identifying yourself by more means (or factors) than just your password. Typically, these are:

• Something you know (your password);
• Something you have (a trusted mobile device or physical token); and
• Something you are (a biometric such as a fingerprint or facial scan).

MFA is critical in securing government applications and data. Users will see prompts for MFA periodically, especially if they are accessing government applications and data from a non-government device or location.

The Microsoft Authenticator app is the default and recommended modern MFA method, and FIDO2 security keys with a biometric fingerprint reader are another option. Learn if you have the Authenticator app installed correctly by following the instructions in the How to Check Your Multifactor Authentication Readiness document. If it’s not installed correctly, use the Enrolling in the Microsoft Authenticator App document to do so. Follow the instructions in the Enrolling a FIDO2 Security Key document if you have procured the device and need to set it up.

Ensure the ServiceNow Password Reset Enrollment is completed in the event MFA fails.

Additionally, legacy methods of MFA, such as text messages, are no longer secure enough to protect government applications and data.