Multi Factor Authentication (MFA) for VCCS

The Virginia Community College System (VCCS) requires the use of multi-factor, or two-step, authentication (MFA). Multi-factor authentication adds an extra layer of security by requiring users to provide two or more forms of identification before accessing their account. There are several MFA methods that can be used, each with advantages and disadvantages:

Time-based One Time Passcode (TOTP)

Advantages

 Highly secure; TOTP generates unique, time-sensitive codes that are valid for only a short period

 Offline access; TOTP apps can work without cellular or internet connection

Disadvantages

 Reliant on having a compatible device (typically a smartphone)

TOTP Setup Instructions

  1. Download one of the many free TOTP apps to your smartphone. Recommended apps include Microsoft Authenticator (iPhone , Android ), Google Authenticator (iPhone , Android ), or RapidIdentity PingMe (iPhone , Android )
  2. Sign in to your MyPVCC account
  3. On the upper right of the portal select your name and then select Profile Settings
Name with profile settings
  1. A window will pop up on the right of the screen. Select the Edit Profile button on the lower right
edit profile
  1. Select the option OPT-IN MFA TOTP
opt-in mfa totp
  1. Click Save.
  2. Sign out of the portal
  3. Enter your username and password and choose Go
  4. Scan the QR code with the TOTP app to link it to the account
  5. Enter the randomized code shown in the TOTP app to sign in

Email Authentication

Tip: The email code will be sent to the alternative email address in SIS. Make sure it is up to date.

Advantages

 Convenient; most people have a personal email account

Disadvantages

 Code delivery may be delayed based on internet speeds and email servers

 Insecure; the email account could be compromised

Email Setup Instructions

  1. Sign in to your MyPVCC account
  2. On the upper right of the portal select your name and then select Profile Settings
Name with profile settings
  1. A window will pop up on the right of the screen. Select the Edit Profile button on the lower right
edit profile
  1. Select the option OPT-IN MFA Email Authentication
opt-in mfa email authentication
  1. Click Save
  2. Sign out of the portal
  3. Enter your username and password and choose Go
  4. The email code should be sent to your email address
  5. Enter the code to sign in

SMS Text Message Authentication

Caution: This method is insecure and should only be used if you don't have a smartphone.
Tip: The SMS code will be sent to the Mobile Phone Number in SIS. Make sure it is up to date.

Advantages

Almost every mobile phone can receive SMS messages; no need for a smartphone

Disadvantages

 Least secure method of MFA

 Reliant on cell tower coverage

 Some cellular carriers may charge for SMS

SMS Setup Instructions

  1. Sign in to your MyPVCC account
  2. On the upper right of the portal select your name and then select Profile Settings
Name with Profile Settings
  1. A window will pop up on the right of the screen. Select the Edit Profile button on the lower right
Edit profile
  1. Select the option OPT-IN MFA SMS
opt-in mfa sms (least secure)
  1. Click Save
  2. Sign out of the portal
  3. Enter your username and password and choose Go
  4. The SMS code should be sent to your mobile number
  5. Enter the code to sign in


Push Authentication

Advantages

 Fast; there is no need to enter a password or MFA code

Disadvantages

 Device dependent; a backup method is recommended

 Reliant on strong internet connection

Push Setup Instructions

  1. Sign in to your MyPVCC account
  2. On the upper right of the portal select your name and then select Enroll Mobile Device
Name with arrow point to indicate enroll mobile device
  1. Select Continue
  2. Instructions will be sent via SMS to the mobile number in SIS
text message including rapid identity enrollment links
  1. Install the RapidIdentity PingMe app (iPhone , Android )
  2. Select the link in the instructions and enter the code provided
  3. Create a PIN in the RapidIdentity Mobile App
create pin
  1. On next sign in, the RapidIdentity Mobile App will be prompted on your phone to Accept

FIDO Key Authentication

Advantages

 Highly secure

 A secondary device like a smartphone is not required, only a physical key

Disadvantages

 The FIDO key could be lost or stolen

 Dependent on device having the same USB port as FIDO key

FIDO Setup Instructions

  1. Sign in to your MyPVCC account
  2. On the upper right of the portal select your name and then select Manage WebAuthn
Select name then manage WebAuthn
  1. Click Add Device
Add device
  1. Enter a descriptive name and select External Security Key
  2. Click Continue
Name the device and select device type
  1. Select USB security key
select usb security key prompt
  1. Insert the FIDO Key into USB port
  2. Tap metal circle on key to send registration key
  3. Sign out of the portal
  4. On your next sign in, you will be prompted to tap your FIDO key

Need More Help?

Connect with PVCC Technology Services:

434.961.5400

help@pvcc.edu

Room M832 in the Main Building (Campus Map)

Print Article