As of Wednesday, May 28, 2025, Multi Factor Authentication (MFA) will be required when users access Microsoft 365 (M365) applications - i.e., the web versions of Microsoft Office software, including Outlook, SharePoint, and OneDrive - from personal workstations such as laptops. This change may prompt MFA when accessing CMIO and other AHS resource links, as most of our materials are hosted on SharePoint; however, links clicked from within Connect Care will not prompt MFA.
What is changing and why?
AHS IT is restoring Multi Factor Authentication (MFA) for Microsoft 365 (M365) applications accessed from personal workstations such as laptops. MFA was previously required for M365 apps, but was temporarily removed in December 2024 while AHS' SharePoint was migrated to the cloud. The migration process is now largely complete, and so M365 MFA is being reactivated to align with AHS' security policies.
This change does not impact shared workstations, or any other applications including Connect Care.
What action do you need to take?
The M365 MFA will be triggered only on personal workstations when accessing the web versions of Microsoft software; this includes opening a Microsoft web app (e.g., Outlook) as well as opening a document created by/saved on Microsoft software (e.g., a Word file, or a document saved on SharePoint) on your browser. Users will be prompted for personal login as usual, and then prompted for MFA confirmation (such as a code texted to a mobile phone). Once the MFA step is complete, the user will not need to re-authenticate for at least 6 hours.
- Tip: When accessing SharePoint, please select "Keep me signed in" when prompted, to allow for even longer timeout.