How to Use MFA Authentication with Purdue Login

Overview

The Purdue login system utilizes 2-Factor Authentication protections to validate log ins and access. The first factor is your career account username (alias@purdue.edu) and career account password. This is commonly referred to as Purdue Web SSO (Single Sign On) for web applications. The second factor is commonly the Microsoft MFA Universal Prompt on your smartphone and provides several methods to verify your identity.

Details

The Purdue Login Screen

When visiting a Purdue Web SSO-protected application such as mypurdue.purdue.edu or purdue.brightspace.com, you will encounter the Purdue login screen.

You will need to enter your career account username (username@purdue.edu), click Next, Enter your Password, then click on “Log in”.
 

The MFA Universal Prompt

After successfully entering your career account username and password on the Purdue login screen, you will come to the MFA Universal Prompt. If this is your first time logging in, you will be prompted to set up MFA. This is explained in further detail below under “Setting Up MFA”.

If you have already set up MFA, you will see a prompt to verify your identity (example image available below) and verify your log in by typing the provided 2-digit code on your phone in the Microsoft Authenticator app. The method displayed will default to your preferred method unless a more appropriate method is required by Microsoft.

Other verification methods are available, depending on what you have set up by clicking on “I can't use my Microsoft authenticator app right now” (example image below). The options available are explained in further detail, below, under “MFA Verification Methods”.



If you are having difficulty completing verification, please consult the Troubleshooting Tips section below. You can also contact Purdue IT for assistance at 765-494-4000.

 After completing verification, you will be redirected to the website you are attempting to access.

Setting Up MFA

On your first login to a Purdue Web SSO-protected application, you will be prompted to set up MFA. Please follow the on-screen prompts. More information on the available verification methods is provided in this article:

Article - How to set up Microsoft mul...

Recommended MFA Authentication Methods

When setting up MFA, we require using the Microsoft Authenticator app as your primary authentication method. We recommend setting up at least two authentication methods so that you can still sign in if you get a new device. You can add your cell phone number to receive texts/calls, and you can also add an office phone as an alternate to receive authentication calls. 

Required primary method:

• Microsoft Authenticator app (push notifications or passcodes)

MFA Verification Methods

A list of available verification methods and a description of their use is available below.

• MFA Verified Push: This option is available if you have set up the Microsoft Authenticator app on your smartphone or tablet.  The MFA Universal Prompt displays a numeric two-digit code on-screen when you choose to use the MFA app notification to log in.  A push notification will be sent to the Microsoft Authenticator app.  Enter the code shown on your screen into the MFA Push request received on your mobile device. Tap Approve to finish approving the login request. This method requires that you are connected to the internet.

• One-time Password Code: This option is available if you have set up the Microsoft Authenticator app on your smartphone or tablet. You will be prompted to enter a 6 digit passcode. This passcode can be found in the Microsoft Authenticator app under your Purdue account. Tap on your account name in the app and you should see a 6-digit code next to the phrase “One-time Password Code”. Enter this number to complete verification. This method does not require an internet connection. Each passcode is valid for approximately 30 seconds and automatically refreshes to a new passcode after the 30 seconds are up.
• Temporary Access Passes: This option (TAP for short) is available to users who have lost, for whatever reason, access to their device and/or app. A single-use temporary access pass that is good for 1 hour can be obtained by contacting the Purdue IT Service Desk at 765-494-4000. Please note that you will be required to verify your identity by the service desk before a TAP is issued. TAPs are meant for recovery purposes, and we recommend you add an authentication method that you have with you after receiving the TAP.
   
• Hardware Token Passcode: This option is available if you have purchased an approved hardware token. By selecting this method, you will be prompted for a 6-digit passcode. Press the hardware token’s button to generate a 6-digit passcode, then enter that passcode in the prompt. Please refer to this article for instructions on purchasing and setting up an approved Hardware Token:
  • Article - How do I obtain a physical ...
• Security Keys: You can use security keys as a passwordless sign-in method within your organization. A security key is a physical device that's used with a unique PIN to sign in to your work or school account. Because security keys require you to have the physical device and something that only you know, it's considered a stronger verification method than a username and password. Set up a passkey (FIDO2) as your verification method - Microsoft Support

Managing MFA Devices

You can manage your devices at My Sign-Ins | Security Info | Microsoft.com.  You will be required to complete verification in order to manage your devices. Please refer to these guides for adding additional methods and adjusting your default method when the preferred method is not available.

Set Default Method: Article - How do I Change my Default ...

Add/Change Additional Methods: Article - How to change Microsoft MFA...

If you are already signed in and are having difficulty accessing  My Sign-Ins | Security Info | Microsoft.com with your Purdue account, simply go this site on a web browser you have not signed in with yet, or through a “private” or “incognito” tab on the web browser you’re currently using. Please refer to your web browser’s support for more information. Alternatively, you can sign out in your browser and sign in with your Purdue account.

Troubleshooting Tips

If any of the troubleshooting tips below do not resolve your issue then please contact your campus’s Purdue IT Service Desk. The Purdue IT Service Desk can be reached at 765-494-4000.

I’m not receiving push notifications: First verify that your device has a good internet connection (WiFi, mobile data, etc). Next, make sure you have the Microsoft Authenticator app open and try logging in again. If issues persist, try swapping networks on your device from WiFi to data or vice versa. You can also try restarting your phone or turning airplane mode on and off again.

I forgot my password: Go to boilerbot.purdue.edu and follow the prompts to reset your career account password.

I have a new device/lost my previous device: If you still have a valid authentication method with you (phone number, other device, hardware token), you can go to My Sign-Ins | Security Info | Microsoft.com to add your new device. If you have lost your device and have no other authentication method with you, please contact the Purdue IT Service Desk for assistance.

I need a bypass code: Contact the Purdue IT Service Desk at 765-494-4000. Please note that you will be required to verify your identity by the service desk before a TAP is issued.

My Microsoft Authenticator Passcode isn’t working: Open the Microsoft Authenticator app and wait for a new password code. Each passcode is valid for approximately 30 seconds. If you are still having issues, make sure your device’s time and date settings are properly set. Refer to your device manufacturer’s support for more information.

I'm receiving unwanted Microsoft Authenticator Push notifications: In the Microsoft Authenticator app, press "No it's not me" and then contact the Purdue IT Service Desk for assistance resetting your password.

Additional Microsoft Authenticator Common Issues:

Troubleshoot problems with Microsoft Authenticator - Microsoft Support

Still need help?  Click the 'Purdue IT Request' button to start a ticket.