[UCRDBR] UCPath Notice: Enhanced MFA Requirements to Access UCPath Portal

[Departmental Benefits Representatives]

[A blue text on a black background  Description automatically generated]

January 3, 2025
To:
Department Benefits Representatives (DBRs)
From:
Central HR Benefits Office on behalf of the UCPath Center
Re:
UCPath Notice: Enhanced MFA Requirements to Access UCPath Portal

DBRs, please share this very important information via your internal listserv.  Do not reply to this email.  Please send a separate email with questions to benefits at ucr.edu<mailto:benefits at ucr.edu>.

[UCPath_Vertical response 650x126 Email Header 2]
Over the past year, attackers successfully used phishing emails to compromise UC employee credentials, defeat location multi-factor authentication (MFA), access UCPath accounts and ultimately alter direct deposit information to redirect paychecks.  To address this risk, a systemwide working group developed a standard to enhance MFA techniques used by locations for granting employees access to UCPath.
Employees will now be required to use verified Duo push<https://duo.com/blog/verified-duo-push-makes-mfa-more-secure>.  The Less secure verification methods, including call back and text message, will be disabled.  Location timelines will vary for adopting more secure MFA options.
While the change will be transparent to most, up to 20% of staff may be impacted, particularly those who have older devices or rely upon discontinued verification factors.
To support users through this change, effective Jan. 2 at 5 pm, a new text message appears on the UCPath single sign-on page advising employees that their MFA options may soon change.  A link will direct the employees to a page with high-level guidance<https://ucpath-notifications.universityofcalifornia.edu/ucpath-access-AUTH-0510.html> on the changes.
Since neither UCOP nor UCPath manages the location change process, the guidance directs questions to location help desks.  Please be aware that employees may reach out to those resources for guidance, and UCPath will redirect them there as well.
We appreciate your assistance in improving security and in sharing this information to minimize employee confusion.
Thank you,
UCPath
(855) 982-7284
Monday - Friday from 8:00 am - 5:00 pm
ucpath.universityofcalifornia.edu<https://ucpath.universityofcalifornia.edu/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ucr.edu/pipermail/ucrdbr/attachments/20250103/74e36f0a/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 16028 bytes
Desc: image001.png
URL: <https://lists.ucr.edu/pipermail/ucrdbr/attachments/20250103/74e36f0a/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 144643 bytes
Desc: image002.png
URL: <https://lists.ucr.edu/pipermail/ucrdbr/attachments/20250103/74e36f0a/attachment-0001.png>