Protecting your data

We're committed to enhancing your user experience while ensuring the security of your personal and professional data. That’s why we are introducing single sign-on (SSO) and multi-factor authentication (MFA) as a part of a new log in experience to strengthen access controls and make the ANZCA networks more secure.  

In June, we introduced SSO and MFA to the CPD Portfolio and the CPD Mobile App. We encourage our CPD participants to set up MFA now, so you're ready for when it becomes mandatory for CPD services in August.* 

We'll then enable SSO and MFA on other ANZCA applications and services gradually throughout 2024. Keep an eye out in the monthly ANZCA E-newsletter for updates.

Getting started

Installing and using MFA is simple. Watch this short video or follow our step-by-step guide.

A short video guide to setting up MFA on your CPD services

Help and support with SSO and MFA

About SSO and MFA
Setting up MFA
Support and troubleshooting

About SSO and MFA

What are SSO and MFA?

Single sign-on (SSO) is an authentication solution that enables you to access password-protected services, applications, websites, and datasets using a single set of credentials - College ID and Password.

Multi-factor authentication (MFA) is when two or more different types of actions verify your identity to add an extra layer of protection.  

How will MFA improve data security?

MFA adds an extra layer of protection by requiring an additional authentication method beyond just a password. This ensures that even if someone steals your password, they won’t gain access without the additional code. MFA defends against the majority of password-related cyber attacks.

What policies does this relate to?

Setting up MFA

How do I install and use MFA?

Follow our step-by-step guide to install and use MFA.

I’m in a rush to complete a task and don’t want to set up MFA right now. Can I wait and set it up later?

Yes. When MFA is first enabled for an application, there will be a period of 3-8 weeks you can ‘opt-in’ and choose to set up and start using MFA, or wait to set it up later.

Once MFA becomes mandatory, you will not be able to access MFA enabled applications until MFA is set up.

Once MFA is set up, you will need to continue using MFA and cannot opt-out again.

How does the opt-in period work?

When MFA is first enabled for an application, there will be a period of 3-8 weeks a user can ‘opt-in’ and choose to set up and start using MFA, or wait to set it up later.

Once MFA is set up, you will need to continue using MFA and cannot opt-out again.

At a later advertised date, MFA will become mandatory. At this point, you will not be able to access MFA enabled applications until MFA is set up.

How to identify ANZCA MFA against another organisation?

You can add multiple organisations (accounts) to the MS Authenticator app. Each account’s MFA settings are separate and the app doesn’t share data between accounts. A list of added accounts is visible in the app.

When you log in to an application/site from an account, the app shows the MFA challenge (eg, code). There are no separate processes to follow just because you use the app for multiple accounts or organisations, the app handles this seamlessly.

Support and troubleshooting

I'm trying to set up MFA and keep seeing 'Wrong code entered'

There are 3 common reasons the 'Wrong code entered' message displays while you are setting up MFA. Consider if any of these may apply to you. 

1. The code timed out after 30 seconds and the code updated, so the cody you entered is now incorrect. Retrieve a new code from the app and try again. 

2. After MFA has been set up, the first time you log in you will be prompted for a second, new code. Consider whether this applies to you. You may need to enter a new code. 

3. If MFA was set up with the security key (instead of QR code), consider whether the security key was entered incorrectly. Remove the account from the MFA app; Click on the account, click the settings cog, click remove account). Then go through the steps again to add the ANZCA account. 

Is there after-hours support?

No, there isnt after-hours support. We hope the information on this page will answer your question.

If required, additional support is available during business hours, our friendly college staff would be happy to help. Contact information is available here.

I changed devices/have a new phone, what do I do?

Follow your normal processes for transferring apps to your new device, including for the MS Authenticator app.

If the app did not transfer across, follow the steps to download and set up the MS Authenticator app again.

I changed phone number or email address, what do I do?

If you have changed your email address, please let us know. This notification can be escalated to the service desk as the email address will need to be updated in the system.
 
Changing phone number will not impact MFA unless the authenticator app has been removed and need to be reactivated.

I forgot my college ID

You can find your college ID yourself by clicking “Forgot username?” Or, please contact us during normal bussiness hours fro assistance.

I lost the device with MS Authenticator installed. what do I do?

Contact us and we’ll help you to de-register your device from MFA and register your new device once you have a replacement.

I deleted the MS Authenticator app from my device, can I just re-install the app?

Yes, you will need to re-install the app and go through the set up process again.

Where can I find more information about the MS Authenticator App and more FAQs?

The Microsoft website contains lots of information to help you, including FAQs and troubleshooting.

How will MFA and SSO work if I don’t have a wifi connection?

Mobile data may work without wifi at a location, and therefore the authenticator app may work with mobile data.

Note, MFA is not required on all occasions, especially when mobile phones are used.

I work from remote locations, including overseas. Will MFA and SSO work for me?

The Microsoft Authenticator app is designed to work globally.

Sometimes I get someone else to complete a form/task for me. How will MFA impact this?

Passwords for ANZCA networks/applications should not be shared, and MFA will prevent someone from logging in to an account that is not their own.

We understands there are some instances where a form or task will be completed by an ‘external’ user, and processes for this may be accommodated within the program and application processes.

For example, in the ePortfolio used by many training programs, forms can be set up to be sent to the email address of an ‘external’ user. Where there are administrative forms where we know hospital staff other than a supervisor can complete the form, they are set up to enable completion by external users

Are there differences between using MS Authenticator on Apple or Android devices?

Overall, the core functionality of Microsoft Authenticator remains consistent across Apple iOS and Android devices, but there may be some nuanced differences based on the platform-specific capabilities and design guidelines.

Why do I have to use the Microsoft authenticator app? Why can’t I use an alternative method?

The MFA method of authentication via an app (Microsoft authenticator app) was selected after careful consideration of the data security best practices, operating costs and user experience.

While other authentication apps exist and can be used, only the Microsoft Authenticator app will be supported by the college.

Last updated 12:40 26.06.2024