MFA - Multi-Factor Authentication


The University is currently implementing Multi-factor Authentication (MFA) on our Single Sign-On (SSO) accounts across the University. Our SSO accounts are used to access a number of key University systems including Nexus Email and Microsoft Teams. As login is via a Username and Password only, this can leave them vulnerable to compromise via Phishing Attacks hence the reason to implement MFA.

Please see: for a full overview of the project.

The MFA login page will require you to sign in with the following format with your SSO Password:

SSOUsername@OX.AC.UK e.g. abcd1234@OX.AC.UK


Stage 1 was completed on the 11th of November 2020, with the Webauth page adjusted to a University of Oxford branded Microsoft page. Your username will now need to be entered in full to obtain access with @OX.AC.UK (e.g. oxfd1234@OX.AC.UK), but your password will remain the same.


A second step will be added for logging in with your SSO, which will consist of entering a code or authorising access to the account. This additional step will be implemented from the 7th of January on an A-Z basis (a timeline can be seen on the Project pages). This can be achieved in a number of ways, and we would strongly encourage everyone to think about which method of authentication they would prefer to use in advance of implementation.


  • Authentication App: A Microsoft Authentication app is available for iOS and Android devices. This will prompt when authentication is requested from a SSO service, at which point you simply tap on the prompt to permit access.
  • SMS or Phone Call: Receiving an SMS on your mobile phone, or a voice call on landline or mobile with a code that you enter on the device you are logging into.
  • Hardware Token: Using a small USB key, which you press a button to accept access (Hardware Tokens need to be purchased - if this is your preference please email for guidance).

Downloadable guides and videos for setting up and managing multi-factor authentication (MFA) on your Single Sign-On (SSO) account can be found at the following link: