How to set up MFA and successfully authenticate
What is MFA and how does it impact the way I sign into my account or applications?
Multi-Factor Authentication (MFA) is a new security feature that provides an additional level of identity verification to help prevent unauthorized access to Deloitte applications. When an
application is enabled for MFA, a second authentication process is required to access the
application. Deloitte is enabling MFA for many of its applications.
Before using MFA to access Deloitte applications, a one-time enrolment is necessary. When
enrolling, you will select your MFA authentication method. Until enrolment is completed, you will be unable to access applications enabled to require a second authentication factor through MFA.
If you require any additional support when enrolling in MFA, please contact your Deloitte representative.
- If you access multiple Deloitte applications, you will only need to go through this enrolment process once. However, you may need to enrol in MFA more than once if you access any Deloitte applications that use an alternative MFA solution.
- You will be able to use your mobile device to enrol in and authenticate to MFA.
- If you are a newly-onboarded user, please allow at least an hour for your login credentials to be synchronized with the MFA server before enrolling in MFA.
This document provides information on:
- Multi-Factor Authentication (MFA)
- Enrolling in MFA – authentication methods
- Mobile app option
- Phone call option
- Text message option
- Configuring alternate methods
- Updating your MFA preferences
Multi-Factor Authentication (MFA)
When you access the URL for your Deloitte application, click the Client or business partner button.
If you are a newly-added user, a password update will be required and the Create a New Password screen will appear. After updating your password, you will be directed back to the login screen. Login with your new password to begin MFA enrolment.
If you are an existing user, MFA enrolment will begin after you successfully login.
In this example, the application being accessed is named Deloitte OnLine. The name displayed will be that of the application you are trying to access.
You can access MFA FAQs and support contact information at any time during the enrolment process by clicking the HELP link in the upper-right corner.
Enrolling in MFA – methods of authentication
Use the drop-down to select your preferred method of authentication. Available options are:
- Mobile app authentication
- Receive a phone call
- Receive a text message
- The Mobile App method is the recommended option.
- If you select the Text Message method, additional text messaging rates may apply based on your carrier.
Enrolling in MFA – Mobile app option
On your mobile device, download the Microsoft Authenticator mobile app on the (i) App Store®, Microsoft Store, or (ii) on Google Play.
If your mobile device is unable to download the Microsoft Authenticator app, select one of the alternate authentication options.
Once the app is installed, open the app and click Add account or tap the + icon to add a new account. Select Work or school account.
From the MFA enrolment page, click Generate New Activation Code to continue.
A QR code, activation code, and URL will appear on the page. You can synchronize your mobile device one of two ways:
- Scan the QR code with the Authenticator app, or
- Tap Or enter code manually and enter the Activation Code and URL in the Authenticator App
Option 1: QR code
Using the camera on your mobile device, scan the QR code to complete the enrolment and synchronization of the mobile app. If you are asked to allow the Microsoft Authenticator app to access your camera, tap Allow.
Option 2: URL and Activation Code
Enter the URL and Activation Code in the fields highlighted below, and tap Finish.
URL and Activation Code
After scanning the QR code or entering the URL and Activation Code, an account named Deloitte DPASS will be created in the Authenticator app. Click Authenticate Me on your browser and respond to the MFA request on your mobile device by tapping Approve.
If the QR code or activation code expires before you complete authentication, click Generate New Activation Code to restart the process.
Note: If you’ve only configured the mobile app method, you will be required to provide an alternate phone number as a backup method.
Enrolling in MFA – Phone call option
If you choose the Phone Call method, select your country code from the drop-down and enter your phone number. After clicking Call Me Now to Verify My Details, you will receive a phone call with instructions on how to authenticate.
IMPORTANT: If you are located outside the U.S. or Canada, you must be able to receive international phone calls to use the phone call authentication method.
Enrolling in MFA – Text message option
If you choose the Text Message method, select your country code from the drop-down and enter your phone number, then click Text Me Now to Authenticate, and you will receive a one-time passcode (OTP) via text message. Enter the OTP and click Validate OTP to authenticate.
Note: The Text Message method may not always work, depending on possible restrictions your mobile carrier may have regarding text messages.
Configuring Alternative Methods
After configuring your primary authentication method, you will be asked to configure your alternate MFA method.
You will configure your alternate method similarly as described in the Enrolling in MFA section above.
Note: When setting up an alternate phone, clicking Save alternate phone will only save the details provided. Clicking Save and verify alternate phone will save the number and then place a call to the alternate number with instructions on how to authenticate. If you are unable to configure your alternative methods during your initial enrolment, you may click Skip and continue.
Updating your MFA preferences
You may update your MFA preferences by logging in and selecting Use different verification option when prompted for your verification code. This will prompt you to authenticate using an alternate authentication method.
After you successfully authenticate using an alternate method, select Edit Preferences and navigate to the Change Method page. Here, you can select a new primary authentication method from the drop-down. If you would like to edit device information without changing your primary method, select one of the tabs in the left-hand navigation and configure it as described in the Enrolling in MFA section above. Once you are finished, click Save Changes.
Note: Updates to authentication methods may take 5-15 minutes to take effect.
© 2018. For information, contact Deloitte Touche Tohmatsu Limited.
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (“DTTL”), its network of member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as “Deloitte Global”) does not provide services to clients. In the United States, Deloitte refers to one or more of the US member firms of DTTL, their related entities that operate using the “Deloitte” name in the United States and their respective affiliates. Certain services may not be available to attest clients under the rules and regulations of public accounting. Please see www.deloitte.com/about to learn more about our global network of member firms.
Deloitte provides audit & assurance, consulting, financial advisory, risk advisory, tax and related services to public and private clients spanning multiple industries. Deloitte serves four out of five Fortune Global 500® companies through a globally connected network of member firms in more than 150 countries and territories bringing world-class capabilities, insights, and high-quality service to address clients’ most complex business challenges. To learn more about how Deloitte’s approximately 245,000 professionals make an impact that matters, please connect with us on Facebook, LinkedIn, or Twitter.
This communication contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively, the “Deloitte Network”) is, by means of this communication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No entity in the Deloitte Network shall be responsible for any loss whatsoever sustained by any person who relies on this communication.
(i) App Store is a service mark of Apple Inc., registered in the U.S. and other countries.
(ii) Google Play and the Google Play logo are trademarks of Google Inc.