MFA is a key component of a strong identity and access management (IAM) policy. Instead of just asking for a username and password, MFA requires one or more additional authentication factors, significantly reducing your organisation's risk of falling victim to cybercrime.
What is MFA?
Multi-Factor Authentication is an electronic authentication method where a user is only granted access to an application or website after successfully providing two or more authentication factors.
How does MFA work?
MFA works by requiring additional verification information (factors). MFA uses both something the user knows (such as an answer to a secret question), and something only the user has (e.g. a smartphone) or something only the user is (such as a fingerprint, facial recognition). One of the most commonly used MFA factors are Time-Based One-Time Passwords (TOTPs). TOTPs are randomly generated 6-to-8-digit temporary codes created by mobile authentication apps like Google Authenticator and Microsoft Authenticator. The code is available for a short period of time after requesting it, after which it can no longer be used and a new code will be generated. The short timeframe that a TOTP is available causes the password to lose its value quickly.
Why is MFA important?
The main benefit of MFA is that it improves the security of your organisation by requiring your users to identify themselves with more than just a username and password. Although important, usernames and passwords are vulnerable and can be stolen by third parties. By enforcing the use of an MFA factor such as a TOTP that your users have received on their smartphones, you can ensure better protection of user information and sensitive company data.
MFA and Belnet
Belnet will shortly be offering you the possibility to get started with MFA for the services that use the Belnet Personal Login, with no obligation: the Belnet Portal, Domain Name Registration, but also for the management of Belnet Storage, eduroam, govroam, guestroam and edugain. By July 5, we expect to have MFA implemented for all of the above services, so you will have the choice to log in to these services with or without MFA. You will soon receive more information from us on how to set up MFA.