Interamerican University of Puerto Rico
System Central Office
Information Technology and Telecommunications Center
Multi-Factor Authentication (MFA)
End User Guide
Revised: September 2024
Introduction
Recently, companies and individuals have experienced a substantial increase in the number of cyber attacks, fraud attempts and identity theft. Faced with this scenario, the University System's Information Technology and Telecommunications Centers (CIT) are in a constant process of reviewing their policies for access to the most critical systems. As part of our efforts to strengthen the protection of access to data and applications, we have implemented MultiFactor Authentication (MFA) for Administrative Banner, Self-Service (Inter Web) and Blackboard.
What is Multi-Factor Authentication?
Multi-Factor Authentication, or MFA, is a security technique that requires users to use at least two authentication methods to verify their identity when logging into a system or performing transactions. Its objective is to create a layered defense that makes it difficult for unauthorized persons to access systems. Under this type of security, once one of the authentication methods is compromised, the attacker must face at least one additional barrier before gaining unauthorized access to a system. To achieve this, MFA combines two or more independent credentials where the first part is the password we currently use, and the second part is composed of a security token that is sent to your institutional email. In addition, the user has the option to add as additional methods: Okta Verify, Google Authenticator or a security question.
To implement this level of security, the Okta platform was contracted. This document provides the basic instructions that will guide you through the process of defining the authentication factors, as well as how to authenticate with each one of them. It also includes the list of contacts available for technical support in each of the Academic Units of the University System.
Account activation - new users
All new users must define the password with which they will access the primary systems, i.e., Banner Administrative, Banner Self-Service (Inter Web) and Blackboard. The account activation process can be performed on any of the three platforms. Listed below are the steps that will guide you through the process of defining your account.
Banner Self-Service and Banner Administrative account activation
- Access to Banner Self-Service or to Administrative Banner.
- Select the option Forgot Password.
- Select the option Reset Password
- In the screen entitled Forgot your Password?, If you do not enter your ID number, you must enter your ID number. Then, type the characters displayed on the screen and press the button labeled Continue.
- The system will present the e-mail address assigned by the University, to which a verification code will be sent. Press the button entitled Continue.
- In the space provided, type the code received in your e-mail and click on the button labeled Continue.
a. The code is sent from the address adselfservice@auth.inter.edu.
- Type your new password in both spaces. The password must meet the requirements shown under the spaces provided for entering the password. While defining the password the system places a check mark next to each requirement you have met. At the end you must press the button titled Reset Password.
- The system will confirm that the process was successfully completed by displaying a message on the screen and sending an e-mail message.
Account activation from Blackboard
- Access to the Blackboard and check Login.
- Select the option Forgot Password located under the button entitled Sign in.
- Select the option Reset Password
- In the screen entitled Forgot your Password?, If you do not enter your ID number, you must enter your ID number. Then, type the characters displayed on the screen and press the button labeled Continue.
- The system will present the e-mail address assigned by the University, to which a verification code will be sent. Press the button entitled Continue.
- In the space provided, type the code received in your e-mail and click on the button labeled Continue.
a. The code is sent from the address adselfservice@auth.inter.edu.
- Type your new password in both spaces. The password must meet the requirements shown under the spaces provided for entering the password. While defining the password the system places a check mark next to each requirement you have met. At the end you must press the button titled Reset Password.
- The system will confirm that the process was successfully completed by displaying a message on the screen and sending an e-mail message.
Adding additional Multi-Factor Authentication (MFA) options
Once you authenticate for the first time in any of the services, Okta will activate as authentication factors the password defined by you and the institutional e-mail. In addition, you can activate one of the following optional methods:
- Okta Verify - is an application that you download to your cell phone that provides the validation code required by Okta. You can download it from the Apple Apps Store or the Android Play Store.
- Google Authenticator - is an application that you download to your cell phone and provides the validation code to be used in various systems that require multiple authentication factors. You can download it from the Apple Apps Store or the Android Play Store.
- Security Question - is an option that allows you to select one of the questions defined in Okta or define one of your preference.
We recommend that you configure as many factors as possible, according to the technological resources you have available.
To add additional authentication factors or make changes to any optional factor previously defined:
- Log in to the Inter Okta portal.
- The system will require you to validate with one of the factors already defined.
- Type your new password in both spaces. The password must meet the requirements shown under the spaces provided for entering the password. While defining the password the system places a check mark next to each requirement you have met. At the end you must press the button titled Reset Password.
- Click on the user name located in the upper right corner of the screen and select the Settings option.
- Go to the section entitled Security Methods. In this section you will be able to:
a. Set up additional factors by pressing the button titled Set up located on the right side of each unconfigured method.
b. Remove factors that you need to update or no longer wish to use by pressing the Remove button located on the right side of each previously configured method.
How to configure Okta Verify
- Using a mobile device, download the Okta Verify app from the Android Play Store or Apple App Store.
- When you use Okta Verify for the first time, a screen is displayed describing how the Apps works. Press the button labeled Next.
- On the main Okta Verify screen, you must select the add account option, which may be represented by the + sign.
- Choose the type of account you wish to add to Okta Verify. For Inter-American University of Puerto Rico purposes, the option must be selected. Organization.
- Okta Verify will require you to read the QR Code that Okta will present on the computer screen.
- As soon as you log on to the computer, Okta will show you the list of available authentication factors to be activated. Click the button labeled Set up that appears next to the Okta Verify.
- A QR Code will appear on the computer screen that you will need to read with your mobile device using the Okta Verify application.
a. On the mobile device go to Okta Verify and select. Yes, Ready to Scan and proceed to read the code on the computer screen.
- Okta Verify will give you the option to enable Face ID in the case of Apple or enable biometric validation in the case of Android.
- A message will appear on the device confirming the validation of the account. You must press the button titled Donate.
Notes:
- For additional information about Okta Verify you can access the following link: Okta Verify.
- If a user gets a new phone, they must set up their Okta Verify account again on the new device.
How to configure Google Authenticator
- Using a mobile device, download the Google Authenticator app from the Android Play Store or Apple App Store.
- On the computer press the button titled Set up located next to the Google Authenticator option.
- A QR Code will appear on the screen that you must read with your mobile device using the Google Authenticator application.
- On the main Google Authenticator screen you will see a code that you must enter in the space provided on the computer.
How to configure a security question
- After logging in to the portal Inter Okta, Press the button labeled Set up located next to the option Security Question.
- Determine if you want to select one of the defined questions or if you will set your own question.
a. If you choose to use one of the previously defined questions, simply select it and type the answer in the space provided. Press the button entitled Verify.
b. If you choose to define your own question, type the question and answer in the spaces provided. Press the button labeled Verify.
- A message indicating that the security question was successfully registered will be displayed on the screen for a short period of time.
Administrative Banner Authentication Process
- Access to Administrative Banner.
- Select the instance you need to access: PROD or INAC.
- The system will present you with the authentication screen where you must enter your ID number and password.
- By pressing the button entitled Sign in, If you do not have access to the Okta platform, your access request will be redirected to the Okta platform, which handles the authentication factors that you previously configured. Okta will present the list of configured factors for you to authenticate using the one of your choice.
a. Okta Verify - you will be required to enter a validation code that you can get from the application installed on your phone and press the button titled Verify.
b. Google Authenticator - you will be required to enter a validation code that you can get from the application installed on your phone and press the button titled Verify.
c. Security Question - requires you to enter the answer to the question that was defined. Once you enter the correct answer, you must press the button labeled Verify.
Request for technical support
If you need support, you can contact the Information Technology and Telecommunications Center of your Academic Unit.
Aguadilla Campus
- E-mail: apoyo_cit@aguadilla.inter.edu
- Telephone: 787-891-0925 extensions #2517, #2406
Arecibo Campus
- E-mail: serviciostecnicos@arecibo.inter.edu
- Telephone: 787-878-5475 extensions 3403, 3404, 3405
Barranquitas Campus
- E-mail: apoyo@br.inter.edu
- Telephone: 787-857-3600 extensions #2013, #2063, #2075, #2022, #2076, #2064, #2024, #2080, #2237
Bayamon Campus
- E-mail: cit@bayamon.inter.edu
- Telephone: 787-279-1912, extensions 2095, 2097, 2047, 2044
Optometry School
- E-mail: cit@opto.inter.edu
- Telephone: 787-765-1915 extensions #1115, #1024
Faculty of Law
- E-mail: itservicedesk@juris.inter.edu
- Telephone: 787-751-1912 extensions #2519, #2045, #2511 #3021, #2066
Fajardo Campus
- E-mail: apoyotecnico@fajardo.inter.edu
- Telephone: 787-863-2390 extensions #2197, #22230, #2193, #2235, #2198
Guayama Campus
- E-mail: edistancia@guayama.inter.edu
- Telephone: 787-864-2222 extensions #2392, #2394, #2208, #2127
Metropolitan Campus
- E-mail: cit2@metro.inter.edu
- Telephone: 787-250-1912 extensions 2519, 2273
Ponce Campus
- E-mail: citayuda@ponce.inter.edu
- Telephone: 787-284-1912 extensions #2067, #2066
San Germán Campus
- E-mail: tecnicos@intersg.edu
- Telephone: 787-264-1912 extensions #7674, #7675, #7103