Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

titleIntended Audience

The purpose of this document is to help you set up multi-factor authentication to use Cisco AnyConnect

...

in order to VPN.  These two applications (MFA and AnyConnect) work together to allow you to connect to the CWF computer network through a Virtual Private Network (VPN) while at home or traveling.

MFA is a

...

multi-factor authentication application. It will be used to verify your credentials while you connect to the CWF_VPN network.  MFA will consist of "something you know" (password) and "something you have" (your phone app).

AnyConnect is the application used to connect to the VPN. It will require MFA before it will connect you

...

. Cisco AnyConnect is installed on CWF laptops before they are issued.

...

Installing the Microsoft Authenticator on your phone

  1. You will find the Microsoft Authenticator in your App Store or Google Play Store. 

...

2.  Install the app on your phone and click Open.  If you receive a request for the Authenticator to send you notifications, please click Allow


     Skip any intro requests When you reach the screen that allows you to add an account,     click click the ADD ACCOUNT button.      


Image Added

                         NOTE: If you are using an iPhone, you might receive a window informing you

                                     of the usage data and/or a backup.  Please click OK/Continue.


                       Image Added




                       

...

                             

                                                                                       

3. You will be asked to pick between three options (Personal account, Work or school account or Other). Choose Work or school account.

                                    


4. Allow the Authenticator to take pictures and send notifications.

           iPhone example:                                                                       Android example:

   Image Added                                  



5. The QR Code reader will come up. At this time, you can put your phone down until Step 10 of Initial install Configuration of Microsoft Multi-Factor Authentication.

Initial Setup of Microsoft Multi-Factor Authentication

  1. Launch Cisco AnyConnect Secure Mobility Client on your desktop/laptop/tablet. You can perform a couple of different ways.

NOTE:  Some mobile phones might receive the below message after taking the picture.  If you do not receive

            Click the Cisco icon from your Taskbar, or search for Cisco or AnyConnect in the Start Menu.

...

 the message at this time,  you will more than likely receive it further along in the setup.

                       

...

2. In the Connection field, type secure.cwf.org and click Connect.   You should only have to enter this once to fill it in.   Any other connections from the same system will have this listed.

  Image Removed

3. At the login prompt, you will see a drop-down menu. Select the CWF_VPN (with the underscore) from the drop-down.      This will change the way you usually see the VPN login.  This is ONLY for those using Microsoft MFA. 

   NOTE: DUO will still be used the same until it is removed from the network.

Image Removed

4.  The Cisco AnyConnect window below will pop up. If you find you mistakenly chose the wrong VPN Group, you can use the drop down here to change back to using VPN with DUO.

    Image Removed

...

    Image Added



Initial Configuration of Microsoft Multi-Factor Authentication

  1.  Open a web browser on your computer and log into Office.com.
  2. This screen will popup asking for your email address.  Type

...

  1. your CWF email

...

  1. and click Next.

            

...

Image Added


63. The Colonial Williamsburg Federated SignSing-On screen will look like this. Enter   Ensure your username and password. Click is correct, type your CWF password and click Sign in. 

            

...

Image Added

7. After logging in, this window will appear requesting more information. At the More information required screen, please click Next.

Image Removed

8. Now you will need to provide additional information. This screen will come up with the Authentication phone.  Choose the drop-down menu for the Mobile appDO NOT CLICK

Image Removed

9. After you have chosen the Mobile app in Step 1, click the button next to Receive notifications for verification. After this, click the Set Up

Image Removed 

10. This is where you will need your mobile device. The phone should open to where you left the QR Code option.  Line up the phone with the QR code shown on your screen.  This will transition to Step 2.  Keep your phone unlocked.

Image Removed

11. Step 2 of the process will begin. Have your phone unlocked.  At this time, you will receive a push notification from the MS Authenticator on your mobile device.  Click Approve.

This is what will appear on your mobile device.  It will time out after one minute.                                                                                 

Image Removed                                                                                                                                         

This is what will appear on your computer screen.  It will stay like this until you acknowledge the request on your mobile device.

Image Removed

12. Step 3 will allow you to add your mobile number in case you run into any issues in the future or need to set up the Authenticator again.

...



4.  When your account comes up, look for the picture (or your initials) on the top right-hand side of the screen. 

     Click the picture/initials and you will see the My account.  Click My account to open your account overview.  


                          Image Added



5. Click the Security Info option on the far left menu.

Image Added


6. Next, you will want to click + Add method.

Image Added




7. The Add a method window pops up.  Arrow down to Authenticator app as show below.

Image Added


8.  The Start by getting the app window will pop up.  Since you already installed the application on your phone at the beginning of these instructions, you will click Next and grab your phone.

Image Added


9.  The following window will ask you to perform the action on your phone, which you have already completed.  Click Next.


10.   You will be shown a window with a QR code.  Pick up your phone and unlock it.  You should be at the point that it want this QR code. 

Hold the phone so that you can see the code through the camera lens.  The phone will automatically take the picture.  You will not have to press anything.


Once your phone successfully take the picture, click NEXT.

Image Added


11.  At this time it will be looking for your phone and setting up the authentication.  There are a few ways this might happen.  Below are a few windows that might appear.

Please follow the screen instructions.

You might see this window on your screen. It will change from “Checking activation status” to “Please respond to the notification on your device.”

Image Added


12. At this time, please look at your phone and you will receive a pop up to Deny or Approve.

NOTE: The “Please respond to the notification on your device” window on the computer

           will not change until you confirm the app on your phone.  Click Approve.

Image Added


13. Once you have approved the app on the phone, click Save on the Additional Security verification window. 

Your computer will come up with the below window asking to verify your preferred option. Click Verify preferred option

and look at your phone for the push notification to Approve.

Image Added


14. Once that is complete, this Updates successful window will appear. You can close this. 


Image Added






Info

Content by Label
showLabelsfalse
max5
spacesBandW
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ("vpn","duo") and type = "page" and space = "BandW"
labelsvpn duo

...