MSU Denver to expand multifactor authentication for on-campus logins 

UPDATE 5/21/2025: Multifactor authentication has been successfully enabled on campus for staff members, and Information Technology Services will begin enabling MFA for on-campus logins for faculty members beginning May 28.

To further strengthen digital security, Metropolitan State University of Denver will expand its use of multifactor authentication, or MFA, to include logins made from on-campus networks. The change, which begins rolling out this month, builds on the University’s existing MFA framework first introduced in 2019. 

Initially, to ease the transition, users logging in from the Auraria Campus were exempt from receiving MFA prompts. However, with MFA now firmly integrated into MSU Denver’s digital ecosystem — and widely adopted across higher education and other industries — the University’s Information Technology Services Department will now include campus networks in its authentication requirements. 

What’s changing? 

Beginning April 30, all MSU Denver staff members, including student employees, will start receiving MFA prompts even when accessing services such as Office 365, Canvas or Workday on Auraria Campus networks, including wired and wireless connections. 

Faculty will be added to the rollout this summer, with ITS evaluating the possibility of extending the change to students. 

Despite the expansion, users should not expect more-frequent MFA prompts. As long as a user remains within a single session on a trusted device, no additional approvals will be needed. 

Preparing for a seamless transition 

ITS has conducted extensive testing across various campus locations to minimize disruptions during the rollout. While the University’s Network Modernization Initiative has significantly enhanced wireless coverage in MSU Denver buildings, some areas may still pose challenges for receiving real-time MFA push notifications. 

To mitigate this, ITS strongly recommends the use of the Microsoft Authenticator App, which offers a code-based login method that works even without internet access. Setup instructions for making Microsoft Authenticator your default method can be found on the ITS Knowledge Base. 

Support and alternatives 

Some users may need alternative MFA methods due to device limitations or other concerns. In such cases, users should contact the ITS Service Desk to explore available options.