Multi-Factor Authentication (MFA) enhances security for your account login authentication process.  Traditionally, a password is used as the only authentication factor to verify a person's identity.  If the password is leaked or compromised, attackers may be able to use the account for malicious activities.  MFA has been introduced to provide an additional layer of security to your CityUHK account.  In addition to your password (the first factor), the system will verify your identity with a second factor (e.g. your mobile phone). This makes sure it is you logging in to your CityUHK account even if someone else knows your password.

If you want to enable the MFA for your CityUHK account, please submit your request through the Service Portal.  After setting up the MFA, access to the systems listed under Category A and Category B will be protected immediately:

Category A – You will be asked to log in with the MFA when you access the following systems through the CityUHK Single-Sign-On (SSO) system:

Microsoft 365 Google Workspace AIMS Canvas CityUHK Portal CityUHK Mobile App CityUHK Pay

You have the option to customise the SSO to remember your MFA status by ticking the “Do not challenge me on this device again” option, and the SSO won't ask you for MFA again unless you access those systems on a different device, at a different location (e.g. logging in from home), or from a different web browser or browser version.  (Note: the “Do not challenge me on this device again” option does not work with Incognito/InPrivate/Private browser mode)

Category B – You have to log in with the MFA whenever you access these systems:

• VPN
• Fortinet
• CyberArk
• LaserFiche
• Remote Desktop Gateway

Remarks:  After you have changed your password, you need to re-login to Microsoft Outlook with the MFA.