What is CUNY MFA?
CUNY Multi-factor Authentication (MFA) is an extra layer of security placed on the CUNYfirst account (@login.cuny.edu). This means in order to access CUNYfirst and its related applications, the CUNY MFA must be set up to verify that the account owner is signing in. For security purposes, it is mandatory to set up the CUNY MFA.
Affected Applications Include:
- CUNYfirst
- Brightspace / Blackboard
- CUNYBuy
- DegreeWorks
- Other applications requiring the @login.cuny.edu user name.
Because this extra layer of security is associated with a personal device (such as a personal smart phone), this makes it harder for attackers to falsely log into an account and access sensitive information. As such, so long as the attacker does not have access to the device associated with the CUNY MFA, they would not get into someone's CUNY accounts.
What if Your Device Can't Set-Up the CUNY MFA?
If you believe your device might not be suitable for the CUNY MFA set-up (for example if your phone is not a smart phone, your phone is broken or limited, your phone is outdated, etc.) then you may be eligible for a Key Fob.
A Key Fob is a small device used to authenticate a user's login instead of using an authenticator app. In order to be loaned a Key Fob, you must request it via BMCC's IT Ticketing Service. However, since Key Fobs are limited in supply, there is no guarantee that there will be a Key Fob available for immediate use.
If you already have a CUNY MFA method set up, it is less likely that a Key Fob will be assigned to you.
How to Request a Key Fob?
Since Key Fobs are given out on a first-come first-serve basis, submitting a ticket request for a Key Fob ensures one will be assigned to you when it is available. That being said, it will take some time for BMCC IT to have the devices ordered and set-up. After submitting your ticket, check your emails frequently for updates on available Key Fobs.
(The following example images shows how someone named "Joe Doe" who has the EMPLID numbers "XXXXXX45" would request a CUNY MFA Key Fob).
Requesting a Key Fob for Your CUNY MFA
1. To submit a ticket, go to BMCC's general IT service request form by clicking the following link (it will be called a "Student Request Form"): General IT Service Request Form
- If the previous link is not working you can go to the BMCC Service Desk Website.
- On the website, click on "IT Services" to be taken to the Student Request Form/Ticket.
2. Under Title, name your ticket "CUNY MFA Key Fob Request".
3. Next, in the "Description" of the ticket provide a brief explanation as to why you are requesting the MFA Key Fob.
4. Please include your CUNY Login (@login.cuny.edu) username so the Key Fob can be assigned to your account.
5. Please include your EMPLID (Employee ID) numbers in the ticket as well.
- If you do not know your EMPLID numbers, you can find them:
6. Please provide some alternative contact information to be notified by the IT Department when your Key Fob is ready for you.
7. Under "EMPLID" please confirm your Employee ID numbers.
8. You may now click on Submit to submit your ticket request for a CUNY MFA Key Fob.
9. Remember/write down your Service Request ID number (ticket number) somewhere. You can provide this 6-digit ticket number to the Service Desk (S141) for status updates and ticket tracking.
10 Wait patiently and check your calls/emails. After BMCC IT receives your request, they will open a ticket with CUNY Central to register your Key Fob.
11. When CUNY Central is finished, you will be contacted to schedule a time to pick up the Key Fob at the Service Desk in Rm-S141.
12. Sign the agreement before picking up your Key Fob.
