18.12.2024 - 14:10
Multifactor Authentication (MFA) will be introduced in all University of Helsinki online services during the year 2025. The use of MFA will also be expanded to all University user groups.
Multifactor Authentication was introduced for Microsoft 365 services in 2021. In early 2025, the use of MFA will also be expanded to services that use the login.helsinki.fi login. During 2025, MFA will also be introduced for remote connections that enable access to the University network and for all University user groups.
We will provide more information on the schedules and details of the MFA expansion in January 2025.
What is going to change?
- In early 2025, MFA login will be introduced in the University online services that use the login.helsinki.fi login. Such services include Flamma, Sisu and many other University online services.
- At the same time, MFA login will be introduced for all University user groups (except for limited user accounts, the access rights of which are more restricted as a rule).
- During 2025, MFA login will also be introduced for remote connections that enable access to the University network.
- The login experience of the University network services will also be improved by harmonising the login process, user interface and appearance.
- In addition, the session durations of the various University network services (how often users must identify themselves in the services) will be made more uniform.
Why are we making these changes?
- Multifactor Authentication makes it much more difficult for cybercriminals to capture data. By expanding the use of MFA to all network services, we can keep the University’s information security at a high level also in the future.
- Laws, decrees and the University’s contractual obligations set requirements for the University’s information systems and user administration. MFA or other similar measures are usually minimum requirements for the processing of confidential information, for example.
- Multifactor Authentication is the best way to prevent the misuse of hijacked passwords.