What is: Multi-Factor Authentication (MFA)

Why use Multi-Factor Authentication (MFA)

If someone gets hold of your password, they could easily use your username and password to impersonate you. If the system asks for a second or third unique factor, it becomes much harder to take over your account. There are 3 factors of authentication:

  1. Something you know: your password
  2. Something you have: your (smart)phone
  3. Something you are: your fingerprint

As you can see, with MFA just stealing your password will not be enough to take control of your account. 

Multi-Factor Authentication (MFA) is required for all Santa Fe accounts to use Single Sign On (using your SF account across multiple services) or SSO-connected apps and services. Once enabled, employees will need to provide a second form of authentication to access SSO-connected apps and services. 

What are passkeys?

 

How to set up MFA

ITS recommends setting up at least two methods, one to use as a backup in case the primary method becomes unavailable. The most popular methods are using the Microsoft Authenticator Mobile App, and Passkeys. Verification through text or phone calls, while currently supported, are being retired February 1st, 2027.

To begin, please visit mysignins.microsoft.com/security-info.

Select "Add sign-in method" & choose from the following options

  • Uploaded imagePasskey in Microsoft Authenticator
    • Instructions Coming Soon
  • Passkey
    • Select Next & Follow the instructions
    • By default, your passkey wants to be saved to your browser. If you wish to use another method, select "save elsewhere" to save on a Security Key or Phone. 
    • Select Phone or Tablet
    • Open your camera app and scan the QR code
    • On iOS, a yellow banner will say "Save Passkey", and may prompt you where to save on your phone. 
    • Select "Add Passkey" to add it to your device
    • Once successful, you will be prompted to name this passkey. 
  • Microsoft Authenticator
    • Download the Microsoft Authenticator app on your device 
    • Select Next Twice, to generate a QR code. 
    • Open the Authenticator app and hit the plus sign to add a work or school account
      • Scan QR code 
        • Note: You will need to give the application permission to your camera, and allow notifications for this to work. 
        • Scan the QR code on screen, and then once successful, hit next. 
      • A two digit code will be generated. Please type this in and select "Yes, or Yes it's me" to confirm. 
      • If all is good, you'll get a green check-mark
How do I reset my MFA?

As of August 2026, every student's cell phone number and alternate email on file in eSantaFe will automatically sync to Microsoft Entra as a call/text MFA method and password recovery method. Students are encouraged to keep their contact information in eSantaFe up to date to ensure continued access to their student account.

How to verify your information is accurate:

  1. Login to eSantaFe
  2. Click on Records -> My Information -> Personal Contact Information
  3. Confirm that the cell phone and alt email fields are correct. 

Uploaded Image (Thumbnail)

Uploaded Image (Thumbnail)