Multi Factor Authentication

Why am I receiving this email?
Our Agency has been selected to participate in the Multifactor Authentication Pilot. The purpose of this communication is to provide you with information about the MFA process and what the Home Office is requesting you to do.

What is Multifactor Authentication (MFA)?
Today, GOL only requires single authentication - i.e., your User ID and Password to gain access. With MFA, in addition to your User ID and Password, all users will be required to select a personal security image, create a personal description of the image, and answer several personal challenge questions to create a second level of authentication and security. In addition, you will have the ability to register your PC. Once your PC is registered, each time you log in thereafter, the image will appear to you indicating you are on the official GOL website before entering your password.

When does the pilot begin?
Thursday, June 7th

How easy is it to register and use this new security feature?
It is extremely simple for anyone to do. You just need to follow the prompts on your computer screen.

What should I expect / what will be different when I login to GOL after MFA is implemented?

Step: 1     You will be presented with the same login screen you see today.
 

Step:  2     If you do not have a password that meets current Guardian standards (outlined in the screen shot below), the next screen presented will require you to change your password. This screen will only be presented if your current password does not meet Guardian standards. If your password currently meets Guardian standards, you will go directly to step 3.

Step: 3    If your current password meets Guardian standards, or once you have changed your password as required in step 2 above, you will be presented with the following screen asking if you to choose to register for MFA now or later. If you select "Register Later", you will be taken directly to the GOL Home Page. You should note that if you decide not to register, next time you login and any time thereafter on a PC that is not registered you will prompted to register your image and challenge questions. Therefore, rather than be prompted with messages to register every time you login, it may be easier for you to take the few minutes to register your image and challenge questions. In any case, if you do not register by October 1, 2012 you will not be able to proceed accessing GOL without registering your image and challenge questions.


Step: 4      If you decide to "Register Now", you will be presented with the following screen requesting you to register your personal security image and description.






Step: 5     When you have finished selecting your security image and description, you will be presented with the first screen below only if you have not previously registered challenge questions and answers. In addition to registering your challenge questions and answers, this screen will allow you to register your device. If you have already registered challenge questions and answers (which 80% of individuals have already done), you will see the second screen shown below, where you will answer one of your registered challenge questions and have the ability to register your device.  






Step: 6     After you have fully registered your machine for MFA (i.e., selected image with description, registered device, etc.) and entered your User ID you will be presented with the below screen showing your security image and description.  After you enter your Password, you will be taken to the GOL Home Page.






.
Pilot Participant Expectations

Try the new process and provide us with your feedback as your feedback will be used to improve the process going forward.  
If you have trouble registering , have questions, or wish to provide feedback, you have a several options:
  • Contact your Agency Office Manager or Tech Rep
  • Email: technology@glic.com with an explanation of the issue, screen shot, if possible, time of incident and your telephone contact information. . In the subject line, please put “MFA Pilot”.
  • Call the Agency Help Desk at 800-499-8820 and  identify yourself as a "MFA Pilot Participant"

Frequently Asked Questions and Answers (FAQs)

What happens if I delay or do not register my PC?
If you delay registration or do not register a PC, you will be able to access GOL. However, the next time you login and any time thereafter on a PC that is not registered, you will prompted to register your image and challenge questions. Therefore, rather than be prompted with messages to register every time you login, it may be easier for you to take the few minutes to register your image and challenge questions. In any case, if you do not register by October 1, 2012 you will not be able to proceed accessing GOL without registering your image and challenge questions.

What happens if I only register my Security Image and Challenge Questions, but I do not complete the full process by registering my PC?
MFA registration is a 3-step process: 1) register image & create security image phrase, 2) select and answer challenge questions, and 3) register your PC. If you only perform steps 1 & 2 but do not complete step 3, each time you login you will be required to answer a Challenge Question. At that time, you will have the option to register your PC. Please note you will not see your Security Image on the login screen after entering your ID if your PC is not registered.  
How many PCs can I register?
You can register up to two PCs. If you have registered two PCs (the current maximum) and login from a different PC, you will be required to answer a Challenge Question. Within the same window, you will be given the option to “unregister” an existing PC and register the current PC you are using.

I share my PC with someone else in the agency. Can multiple individuals register the same machine?
Yes, you both can register on the same PC. There is no limit on how many people can register on the same machine, as long as you each use a distinct login to the PC.

What happens if I clear my cookies on the registered machine?
If you delete your cookies on your computer, you will not see the image or description and will be required to answer a challenge question before getting access into GOL. You will need to re-register your machine to avoid receiving the challenge question on future logins.

What is my security image?
Your security image is the image you select from our library during registration which will be displayed along with your security description during subsequent logins on the machines (up to two) you have registered.

How does the security image and description help enhance security?
One of the most common tricks fraudsters use is making users think they are logging into a valid website when they are indeed logging into a fraudulent site. Seeing your personal security image and description will give you the confidence you are on the real GOL site, and not a fake. Remember: Never enter your password without seeing your personal security image and description on a registered device.

What is my security description?
Your security phrase is a description you provide during registration which should help you remember the image you selected. It will be displayed along with your security image during subsequent logins.

What are my security questions?
Your security questions are the questions you chose when you first registered for GOL.

Can I change my security image?
Yes, you can change your security image / description at any time after you register your machine by selecting "Change Your Security Image" under "Options".

Can I change my Password?
Yes, you can change your password at any time after you register your machine by selecting "Change Your Password" under "Options".

Can I change my "Challenge Questions and Answers"?
Yes, you can change your Challenge questions and Answers at any time after you register your machine by selecting "Change Your Questions and Answers" under "Options".






First Time MFA Login Experience Cheat Sheet


Step: 1     Login to GOL using your User ID and Password
Step: 2     If your current GOL password does not meet Guardian’s current standard, you will be requested to reset your password
Step: 3     Select whether to register your device now
Step: 4     Select your image and create a personal description of the image
Step: 5     If you have not previously registered your challenge security questions, you will be asked to do so at this time.  You can also register your PC

Note: Only register the PCs you frequently use and are not available for public use.

Step: 6     On future logins on the registered PCs, you will receive the GOL login page: enter your user id and you will see the image you selected, enter your password and you will be taken to the GOL Home Page