Q. What is multi-factor authentication and how does it work at Oxford University?

A. Multi-factor authentication verifies your identity in multiple steps using different methods, such as using an authenticator app, sending a code in a text message to your mobile phone, or calling you. Hence, it provides another layer of information security in addition to your login credentials.

Oxford University has implemented multi-factor authentication (MFA) for all Oxford Single Sign-On (SSO) users across the University. In order to access all University systems (including Canvas), you will be asked to verify your Oxford Single Sign-On (SSO) account using a second factor, such as a code from an app on your phone, text message, or a phone call.

You will have MFA enabled on your SSO account when it is created. If for any reason you do not have MFA enabled and an authorised exemption is not in place please request MFA via IT Self-Service.

Full help and guidance: University of Oxford's multi-factor authentication system.

Note: Canvas has its own MFA system for external users who do not have an Oxford SSO (see questions and answers below).

If you have an Oxford SSO account, then you should be using Oxford's MFA system (for access to all University systems) and not the Canvas MFA system.

Q. As an external (non SSO) user, how do I set up multi-factor authentication for Canvas?

A. Click the Account icon in your Global Navigation menu, then click Settings. On the right-hand side of your screen, click the box Set Up Multi-Factor Authentication:

You now need to:

Download and install the (Google) Authenticator app from the app store onto your mobile device.
Scan the bar code from the Canvas screen with your mobile device.
In future when you log into Canvas, open the app on your mobile device and enter the verification number when prompted.
If you regularly use the same desktop computer, you can elect to remember your authentication on that computer.

Q. As an external (non SSO) user, how do I reset multi-factor authentication if my device has got out of sync and I can't log in to Canvas at all?

A. Please contact the suppliers (Instructure) and ask them to reset it for you. To do this (without being able to log in), click on the 'Other Users' login option, and select Help:

Then select the live chat option and explain the problem to them:

**Q. I am an external user with a new phone: how do I reset my multi-factor authentication? OR the verification codes don't work. What do I do?**

A. This sequence is important – you need to be in front of your computer and have your mobile device with the code generator app open.

On your computer: Click the Account icon in the Global Navigation menu, then click Settings.
Click 'Reconfigure multi-factor authentication' and keep it open so that you can use the new numeric code it generates.

Note: once you click ‘Reconfigure’ the previous pairing to your device will not work even though it generates new number codes. It requires repairing with the bar code to work on another device, e.g. laptop or tablet.

To repair: open the code generator app on your mobile and Click + (top right), then 'Scan bar code' (see screenshot below).

Point your mobile at the bar code previously opened on the computer. The cameras on most newer mobile phones will do this; older phones may need a bar code reader app). This will re-link your mobile device and Canvas to the code generator app.

Authenticator App

Click 'Scan bar code' in the app

Note: if you are re-setting your code generator pairing ignore new numbers - they won't work until you re-scan the new bar code.

Canvas multi-factor barcode for added security

Log in to Canvas

Go to Settings > 'Multi-factor authentication'

Hold phone app over the new code on the computer web page. A green frame will appear and grab the code from the Canvas page and pair (or re-pair) it with the code generator app.