Multifactor Authentication changes

BTC uses Multifactor authentication (MFA) to protect your ctcLink and Canvas account.  This means that you enter your ctcLink ID and ctcLink password, PLUS an additional verification in order to sign in.

Do you received an email with a security code when logging into ctcLink and Canvas?  If you do, you will need to select an MFA option other than email. On October 26 ctcLink is removing the ability to use email as an MFA. You will be able to change your MFA option before October 26 using the information below or you will be prompted to select another available MFA option the first time you log in after the change.

This change protects your data and uses stronger authentication methods, such as biometrics, Okta Verify, Google Authenticator, or security keys. Text message MFA will also continue to be an available option.

What can I do to prepare for this change?

If you have already selected an MFA option other than email, no additional action is required. Otherwise, the available options are listed below.

• Okta Verify (Recommended)
  • Okta Verify App that you install on your phone (iPhone/iPad or Android).
  • You can use it in the fast, convenient “Push” mode that uses the app that asks you if you just tried to sign in whenever you log in to ctcLink or Canvas. Tap the “Yes, it is me” button to log in.
  • Or you can use it in the “Code” view where it prompts you to enter in a 6 digit code

• Google Authenticator
  • Google Authenticator is an app that you install on your phone
  • You can download a new version or if you already use Google Authenticator for personal use you can also add ctcLink/Canvas
    
    
• Biometric Authenticator and Security Key
  • Note that these currently only work with ctcLink and NOT with Canvas.
  • Biometric Authenticator uses your phone’s existing biometrics
    (Windows Hello, Apple/Android Face ID, Thumb print) or phone passcode  

How to I select a different MFA option other than email?

1. Log into ctcLink settings

2. Click the "Password Settings" tile

3. Once your profile is displayed, click the "Edit Profile" button

4. Edit your Security Methods and follow the prompts to configure and save

5. We recommend setting up at least two MFA options

1. Log into ctcLink settings
   

2. Click the "Password Settings" tile

3. Once your profile is displayed, click the "Edit Profile" button

4. Edit your Security Methods and follow the prompts to configure and save

5. We recommend setting up at least two MFA options

6. The next time you log into ctcLink or Canvas you will be able to enter your password and then click on the "Verify with something else" to select one of the MFA options that you have configured

If you need additional assistance with options on managing your MFA, read and follow the steps in this knowledge base article: Setting Up Your Multi-Factor Recovery Options

Will my personal device be subject to Public Records Requests if I use it for authentication?

No, these messages are transitory and serve no useful purpose after the one-time code expires. You are encouraged to delete these messages as soon as possible.

I am frequently signed out of ctcLink. How often will I have to enter MFA in order to sign in?

If you check the “keep me signed in” box (located in 1st screenshot above) when you sign in, your MFA code will be remembered for 16 hours. This setting needs to be checked for each device that you use. Once this is done, you should only have to enter MFA once each day (per device that you use throughout the day)