MFA: How to Choose a MFA Method

Overview

This article is intended for NEOMED faculty, staff, students, and affiliates who need help selecting a multifactor authentication (MFA) method for their NEOMED account.

Before You Choose

NEOMED supports several secure sign-in methods for your NEOMED account. The best choice depends on the devices you use, whether you want the passkey to synchronize across devices, and whether you need phishing-resistant authentication.

When available, a synced passkey is recommended because it is phishing-resistant and can remain available when you replace or upgrade a compatible device.

It is highly recommended that you enroll a second approved method whenever possible so you have a backup if your primary device or security key is unavailable.

Which Option Should I Choose?

Your Need or Device

Option

What to Know

Setup Guidance

iPhone or iPad

Apple Passwords

The passkey synchronizes through your Apple Account and can remain available on other compatible Apple devices. If you lose, replace, or upgrade your device, your passkey remains available through your Apple Account.

Enroll a passkey with an iPhone or iPad

Android phone or tablet

Google Password Manager

The passkey synchronizes through your Google Account and can remain available on other compatible Android devices. If you lose, replace, or upgrade your device, your passkey remains available through your Google Account.

Enroll a passkey with an Android device

Passkey stored only on a smartphone

Microsoft Authenticator Passkey

Microsoft Authenticator stores a device-bound passkey on your smartphone. Unlike a synced passkey, it remains on the device where it was created and does not sync to other devices. If your phone is lost, replaced, or reset, the passkey will not automatically be available on your replacement device.

Enroll a passkey with Microsoft Authenticator

Continue using a password

Microsoft Authenticator Number Matching

If you are not required to use phishing-resistant MFA, you can continue signing in with your NEOMED password and approving the sign-in using Microsoft Authenticator. Number matching provides strong MFA but is not phishing-resistant because your password is still used during sign-in.

NOTE: Certain NEOMED employees (i.e. IT) are required to use phishing-resistant MFA and cannot use number matching to satisfy this requirement.

Enroll in Microsoft Authenticator push notifications

Personal Windows computer

Windows Hello

A device-bound passkey is stored on the computer and used with a PIN, fingerprint, or facial recognition. Because the passkey is device-bound, it remains on that computer and does not sync to other devices (such as a lab computer or a podium).

Enroll a passkey in Windows Hello

Personal Mac

Apple Passwords

On supported Macs, Touch ID can verify a passkey synchronized through Apple Passwords.

Enroll a passkey on macOS and use Touch ID

NEOMED-managed Windows computer

Windows Hello for Business

Use a PIN, fingerprint, or facial recognition on a supported NEOMED-managed device. Biometric options depend on the computer's hardware.

Enroll in Windows Hello for Business

NEOMED-managed Mac

Platform SSO

Use built-in Mac authentication, such as Touch ID, to sign in securely. Availability depends on device management configuration so you will need to contact the Help Desk first and request that they enable Platform SSO for your macOS computer.

Enroll in Platform SSO on a managed Mac

Separate physical device or backup method

FIDO2 Security Key

A passkey is stored on a physical key. This is also a great option for a secondary or backup authentication method. If you normally use a passkey stored on your smartphone, a registered security key provides another way to access your NEOMED account if your primary device is lost, damaged, or otherwise unavailable.

Enroll a passkey with a FIDO2 security key

Phone call or text message Any of the alternate methods listed above As of February 1, 2027, Microsoft (NEOMED's sign-in provider) will no longer offer telephony methods for authentication. Phone calls and SMS/text messages will no longer be available. See above

Additional Resources

You can learn more about passkeys and phishing-resistant MFA in the following KB articles:

Print Article

Related Articles (1)

Learn what passkeys are, how they improve account security, and which options NEOMED supports.