Find out how to set up and use multifactor authentication (MFA) for logging into Mediaflux

...

You will need to go through a one-time set up process to enrol your account for MFA.

...

You will need two devices to complete this process:

1. YOUR PHONE (for the Mediaflux Pocket app parts)

2. YOUR PC (for the Mediaflux Pocket Registration Portal parts)

STEP 1: Install the Mediaflux Pocket app on your smartphone

...

STEP 2: Enrol your account for MFA

...

1. Go to the Mediaflux Pocket Registration Portalon your PC (not the Mediaflux Pocket app on your smartphone).

2. Go to the Mediaflux Pocket Registration Portal.

3. Log in with the same domain and credentials that you usually use to log into Mediaflux.

   • If you are a University of Melbourne academic researcher (staff), you likely log into Mediaflux with the domain unimelb and your central UoM username and password.

   • If you are University of Melbourne graduate researcher (student), you likely log into Mediaflux with the domain student and your central UoM username and password.

   • If you are a researcher external to the University of Melbourne, you likely log into Mediaflux in one of two ways:

     • with the domain local and the username and password that you were sent when creating the account.

     • with the domain unimelb and the username and password for the Active Directory system account that you registered for.

...

5. Point your phone’s camera at the Mediaflux Pocket Registration Portal’s QR code to scan it.

Text highlighterinfo
Some smartphones may require you to actively allow Mediaflux Pocket access to your phone camera before you can scan.

...

6. Give your account and device a name, then click Enrol.

...

• as a piloting tester in the pre-mandatory phase, you’ve finished your testing and want to disable the MFA until it actually becomes mandatory for all users

• changing/updating your mobile device (because swapping your MFA from one smartphone to another involves first unenrolling, then re-enrolling in MFA)

Important: Unenrolling from Mediaflux Pocket does NOT enable access to Mediaflux without MFA. Once MFA is mandatory, Mediaflux will be inaccessible without it, regardless of whether you’re enrolled in Mediaflux Pocket or not. Unenrolling merely dissociates your Mediaflux account from the Mediaflux Pocket app on a particular smartphone (usually so that you can reestablish it on a different smartphone).

...

1. Go to the Mediaflux Pocket Registration Portal on your PC (not the Mediaflux Pocket app on your smartphone)

...

1. To unenrol, go to the Mediaflux Pocket Registration Portaland log in.

2. Click the Disable MFA button.

...

Expand
title What if I don’t want to download the Mediaflux Pocket app on my smartphone?
I am concerned about my privacy: The Mediaflux Pocket app has passed through the App Store and University vetting processes The University has no access to the app on your phone and cannot view any of the data on your phone, other apps installed, monitor calls or track your location The app does not require you to link it to a particular phone number I am concerned about using my personal smartphone: The University encourages all staff and students to use their personal device to verify their identity Providing a University-issued device to each user is not possible due to the high cost The security provided by MFA greatly enhances the protection of not just University information but also your personal information The use of MFA is a requirement for ongoing access to University services I am concerned about the performance impact on my smartphone: The app uses minimal resources on your smartphone and prompts you only when Mediaflux Pocket needs you to verify your current log in

Can’t

Expandtext-highlighter
title Why do I have to install yet another MFA app on my phone?	Can't I just use Okta to log in to Mediaflux?
Mediaflux is an external product used, but not owned, by the University. The product provider has helped make our Mediaflux use here at UoM much safer by incorporating multifactor authentication into the product for us. But in selecting an optimal tool to facilitate this, the provider has chosen their own new Mediaflux app (Mediaflux Pocket) over any existing MFA tool that the University already uses (such as Okta). While this decision means installing ‘yet another MFA app’ app on our phones to safely use Mediaflux, the good news is that the developers are provider is further developing their app to include all sorts of useful features for frequent Mediaflux users, so stay tuned for updates!

Expand
title Do I need to keep the Mediaflux Pocket app on my smartphone, once I have enrolled for MFA?​
Yes, you will need the Mediaflux Pocket app to accept MFA authentication push notifications when you log in to Mediaflux. If you have accidentally deleted the app, please contact Research Computing Services for assistance.

...