Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

titleIntended Audience

The purpose of this document is to help you set up multi-factor authentication to use Cisco AnyConnect

...

in order to VPN.  These two applications (MFA and AnyConnect) work together to allow you to connect to the CWF computer network through a Virtual Private Network (VPN) while at home or traveling.

MFA is a multi-factor authentication application. It will be used to verify your credentials while you connect to the CWF_VPN network.  MFA will consist of "something you know" (password) and "something you have" (your phone app).

AnyConnect is the application used to connect to the VPN. It will require MFA before it will connect you

...

. Cisco AnyConnect is installed on CWF laptops before they are issued

...

.

...

Installing the Microsoft Authenticator on your phone

...

5. The QR Code reader will come up. At this time, you can put your phone down until Step 10 of Initial install Configuration of Microsoft Multi-Factor Authentication.

...

                                    



Initial

...

Configuration of Microsoft Multi-Factor Authentication

  1. Open  Open a web browser on your computer and log into Office.com.
  2. This screen will popup asking for your email address.  Type your CWF email and click Next.

            


3. The Colonial Williamsburg Federated Sing-On screen will look like this.  Ensure your username is correct, type your CWF password and click Sign in

            



4.  When your account comes up, look for the picture (or your initials) on the top right-hand side of the screen. 

...

                          Image RemovedImage Added



5. The Click the Security Info box in the middle of the screen. Click on Additional Security Verification.

Image Removed

6. The Additional security verification window will open and look like this.

Step A – Make sure that you change the default verification option to Notify me through app.

Step B – Check the box next to the Authentication Phone and add your country then your mobile phone with the area code, if it is not already there.

Step C –Check the box next to Authenticator app or Token. Then click the Setup Authenticator app button.

Image Removed

7. After clicking the Setup Authenticator app button, the below screen will appear on your computer.  This is where you will need your mobile device. 

The phone should open to where you left the QR Code option.  Line up the phone with the QR code shown on your screen.

Once the picture is taken, click Next on your computer.  Keep your phone unlocked.

Image Removed

option on the far left menu.

Image Added


6. Next, you will want to click + Add method.

Image Added




7. The Add a method window pops up.  Arrow down to Authenticator app as show below.

Image Added


8.  The Start by getting the app window will pop up.  Since you already installed the application on your phone at the beginning of these instructions, you will click Next and grab your phone.

Image Added


9.  The following window will ask you to perform the action on your phone, which you have already completed.  Click Next.


10.   You will be shown a window with a QR code.  Pick up your phone and unlock it.  You should be at the point that it want this QR code. 

Hold the phone so that you can see the code through the camera lens.  The phone will automatically take the picture.  You will not have to press anything.


Once your phone successfully take the picture, click NEXT.

Image Added


11.  At this time it will be looking for your phone and setting up the authentication.  There are a few ways this might happen.  Below are a few windows that might appear.

Please follow the screen instructions.

You might 8. You will see this window on your screen. It will change from “Checking activation status” to “Please respond to the notification on your device.”


912. At this time, please look at your phone and you will receive a pop up to Deny or Approve.

...

           will not change until you confirm the app on your phone.  Click Approve.

Image RemovedImage Added


1013. Once you have approved the app on the phone, click Save on the Additional Security verification window. 

...

and look at your phone for the push notification to Approve.


1114. Once that is complete, this Updates successful window will appear. You can close this.  If you still see the Additional security verification window,

you can close that.  You now have multi-factor authentication set up.


12. The last window you will see the Additional security verification window again. There is nothing you need to do here except double check that

your default verification is set to Notify me through the app & your cell phone is correct. You will also see what phone your authenticator app is

linked to.  DO NOT DELETE this unless you are getting a new phone.  You can Cancel or close if there is no change needed.

Image Removed

Image Removed                       Image Removed

2. In the Connection field, type secure.cwf.org and click Connect. You should only have to enter this once to fill it in.  Any other connections from the same system will have this listed.

  Image Removed

3. At the login prompt, you will see a drop-down menu. Select the CWF_VPN (with the underscore) from the drop-down. 

   This will change the way you usually see the VPN login.  This is ONLY for those using Microsoft MFA. 

   NOTE: DUO will still be used the same until it is removed from the network.

Image Removed

4.  The Cisco AnyConnect window below will pop up. If you find you mistakenly chose the wrong VPN Group, you can use the drop down here to change back to using VPN with DUO.

    Image Removed

5. This screen will popup asking for your email address. Type in your CWF email here and click Next.

  Image Removed

6. The Colonial Williamsburg Federated Sign-On screen will look like this. Enter your username and password. Click Sign in.

  Image Removed

7. After logging in, this window will appear requesting more information. At the More information required screen, please click Next.

  Image Removed

8. Now you will need to provide additional information. This screen will come up with the Authentication phone.  Choose the drop-down menu for the Mobile appDO NOT CLICK NEXT.

  Image Removed

9. After you have chosen the Mobile app in Step 1, click the button next to Receive notifications for verification (Do not use verification code).  After this, click the Set Up.

 Image Removed

10. This is where you will need your mobile device. The phone should open to where you left the QR Code option.  Line up the phone with the QR code shown on your screen.  This will transition to Step 2.  Keep your phone unlocked.

Image Removed

11. Step 2 of the process will begin. Have your phone unlocked.  At this time, you will receive a push notification from the MS Authenticator on your mobile device.  Click Approve.

This is what will appear on your mobile device.  It will time out after one minute.                                                                                 

Image Removed                                                                                  

This is what will appear on your computer screen.  It will stay like this until you acknowledge the request on your mobile device.

Image Removed

12. Step 3 will allow you to add your mobile number in case you run into any issues in the future or need to set up the Authenticator again.

...






Info

Content by Label
showLabelsfalse
max5
spacesBandW
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ("vpn","duo") and type = "page" and space = "BandW"
labelsvpn duo

...