Over the summer, Multi-Factor Authentication (MFA) was enabled Faculty and Staff CUNY Login Accounts across all applications that use the CUNY Login Single Sign-On (SSO).
If you receive a “CUNY Login Multi-Factor Authentication (MFA) Error” when trying to access any CUNY Login application, it likely means MFA has been enabled and you have not yet set up at least one authentication method through the If you CUNY Login MFA Self-Service portal.
To avoid disruptions and ensure a smooth experience, please set up your CUNY Login MFA as soon as possible. Our IT Help Desk is currently experiencing a high volume of requests, so completing the setup on your own will be the fastest way to get access.
Step 1: Set up at least one MFA factor using the CUNY Login MFA Self-Service portal. This is a one-time setup.
Important Note: If you visit the MFA Self-Service portal more than three times without completing your setup, your account may be locked out. If this happens, you will need to contact the IT Help Desk.
eResources for Setting up CUNY Login MFA:
- Abbreviated Instructions for Setting up CUNY Login MFA (text only) – a quick overview of what to expect and how to get set up
- Setting Up CUNY Login MFA (Full Instructions with Images) – a step-by-step guide with visuals to walk you through the process
Step 2: When logging into any CUNY Login SSO-enabled application (CUNYfirst, Brightspace, Navigate, Lehman 360, Lehman Automated Forms, etc.), you will be prompted to enter a One-Time Passcode (OTP) from your registered MFA factor (Step 1).
- Abbreviated Instructions for Responding to MFA Requests/Prompts (text only) – a quick overview of what to expect and how to get set up
- Responding to MFA Requests/Prompts (Full Instructions with Images) – a step-by-step guide with visuals to walk you through the process
From August 6 through the end of September, Multi-Factor Authentication (MFA) will be enabled for your CUNY Login across all applications that use CUNY Login Single Sign-On (SSO), including Lehman 360 and other Lehman College supported Apps. This change enhances the security of your account and protects you and the broader CUNY community.
To avoid disruption and ensure a smooth experience, please complete the following steps immediately:
Starting August 5th
Step 1: Set up at least one MFA factor using the CUNY Login MFA Self-Service portal. This is a one-time setup.
Important Note: If you visit the MFA Self-Service portal more than three times without completing your setup, your account may be locked out. If this happens, you will need to contact the IT Help Desk.
Resources for Setting up CUNY Login MFA:
- Abbreviated Instructions for Setting up CUNY Login MFA (text only) – a quick overview of what to expect and how to get set up
- Setting Up CUNY Login MFA (Full Instructions with Images) – a step-by-step guide with visuals to walk you through the process
VPN users who have already set up CUNY Login MFA can skip Step 1 and go to Step 2.
Once MFA is Enabled for Your CUNY Login Account
Step 2 When logging into any CUNY Login SSO-enabled application (CUNYfirst, Brightspace, Navigate, Lehman 360, Lehman Automated Forms, Lehman Digital ID, etc.), you will be prompted to enter a One-Time Passcode (OTP) from your registered MFA factor.
Resources for Responding MFA Requests/Prompts:
- Abbreviated Instructions for Responding to MFA Requests/Prompts (text only) – a quick overview of what to expect and how to get set up
- Responding to MFA Requests/Prompts (Full Instructions with Images) – a step-by-step guide with visuals to walk you through the process
If you have not completed MFA setup and the MFA is enabled for your CUNY Login, you will likely receive an error message when trying to access CUNY Login Apps. In that case, follow Step 1 under "Starting today, August 5th " to complete the setup for at least one MFA factor using the CUNY Login MFA Self-Service portal. This is a one-time setup.
