About Two-Factor Authentication and the MToken

Two-Factor Authentication requires users to provide two proofs of their identity, which increases security for Web-based U-M electronic resources. It reduces the risk that business or personal information -- yours and others' -- stored in administrative systems will be compromised.

U-M Administrative Systems That Require Two-Factor Authentication

Two-Factor Authentication is required for these administrative systems on Wolverine Access:

• M-Pathways Student Administration & Human Resource Management System.
• M-Pathways Financials & Physical Resources System.
• Faculty Business (only when accessed by staff).
  Note: Unless faculty use Two-Factor Authentication for another purpose, they are not required to use it to access Faculty Business. Faculty need to click the I don't have an MToken box on the Weblogin page.
• U-M Data Warehouse (only when accessed with BusinessObjects).

The Two Types of Authentication Required at U-M

At U-M, the following two methods of proving identity comprise Two-Factor Authentication, and both proofs are required to access systems that are protected by Two-Factor Authentication:

• Something You Know, which is your UMICH (Kerberos/Level 1) password.
• Something You Have, which is your MToken, a physical device that generates a new six-digit numeric tokencode every minute.
   
      The MToken

Using Your MToken

After obtaining and activating your MToken, enter the following information on the Weblogin page to access systems that are protected by Two-Factor Authentication:

• Your uniqname.
• Your UMICH (Kerberos) password.
• The tokencode that displays on your MToken.

Important: The MToken is not a flash drive file storage device. Do not plug it into the USB port on your computer.