College Community;
As many of you may recall, in early July 2025, the University’s Central Office (CIS) issued a cybersecurity directive requiring the implementation of Multi-Factor Authentication (MFA) and Single Sign-On (SSO) for key platforms including CUNYfirst, Brightspace, EAB Navigate, Zoom, DegreeWorks, and CourseDog. Enforcement of this directive began mid-July and is part of a broader effort to enhance security across all CUNY campuses.
In response to the rapid rollout, York IT recommended the use of the Microsoft Authenticator app on mobile devices to facilitate continued access during the summer period. While this was an immediate solution to a fast-moving security mandate, we recognize that it did not fully account for community members who may not own smartphones or prefer not to use personal devices for work-related authentication.
These concerns are valid and were promptly shared with the Central Office. Since then, York IT, in collaboration with our CUNY peers, has been actively seeking alternative authentication options that do not require a mobile device. One such option under review is a hardware-based device, such as the Feitian OTP C200, which generates secure codes independently. These types of devices could provide a viable alternative for users who are unable or prefer not to use mobile-based authentication.
We are currently evaluating these options for compatibility with our systems, ease of support, and cost-effectiveness. Our goal is to recommend a sustainable solution that ensures secure access while addressing the diverse needs of our students, faculty and staff. Once evaluation and testing are complete and a preferred option is identified, we will share guidance on how those in need of a non-mobile authentication option can acquire and use them.
We appreciate your patience and understanding as we work through this important transition and remain committed to supporting everyone throughout the process.
More details will be shared as soon as they become available.
In the meantime for those of you who need immediate access and would like to add Microsoft Authenticator to your mobile device we created an easy-to-follow video and have a PDF with instructions at the following link: MFA-Quick-Guild The video explains exactly what steps are required to install Authenticator to your device.
For more details on the actual campus wide plan go to
MFA-CUNYID
Note: for those of you who already have this on a phone but need to set it up on another phone, you must have both phones present as the pin for setup will be sent to the other phone.
Greg Vega
Interim AVP/CIO
York College Information Technology
gvega@PROTECTED