Multi-Factor Authentication (MFA) is a control that would provide a critical layer of security to prevent the exploitation of compromised credentials and has been identified as a priority. This proposal outlines an approach and plan to implement Multifactor Authentication (MFA) for O365 / Email for McMaster over the coming months. Following this focused implementation of MFA, further work will be presented in a future proposal to continue the development of a comprehensive strategy and roadmap for MFA across the University’s applications and environments.

This project will develop and implement a plan for Multi-Factor Authentication (MFA) for O365 / Email, including associated policies, processes and communication.

Project deliverables include:

• Implement MFA for O365/ Email to provide an additional critical layer of information security protection to prevent exploitation of compromised credentials.
• Enable SSPR (MS Self Service Password Recovery).
• Collect feedback from end users to inform the comprehensive MFA strategy and roadmap.
• Create a robust communication and change management plan that will highlight the benefits of MFA to end users and encourage our community to adopt and use MFA with little impact to their productivity and user experience.