​​​​​​​Setting Up Multifactor Authentication​​​​

If you do not have the SecurID or RSA Authenticate app on your smartphone, these instructions will show you how to set up Multifactor Authentication (MFA) on your phone.

Verify Your MFA Phone Number

Ensure your phone number is listed correctly in eCHRIS as the “Telework-MFA” number. This is the phone you will need to use for all the following steps. 

You can view or change this number in eCHRIS > Personal Details > Contact Details. ​

Add a New Authenticator

1.    Open a web browser on your laptop and go to https://pwreset.phoenix.gov.  Enter your employee ID and computer password.  Click Log On.

newsetup1.png

 

2.   Choose an authentication method from the options shown to receive a code.

newsetup2.png



3.   Enter the code received through the authentication method chosen in the previous step.  Click Authenticate.

newsetup3.png



4.   Click Add New Authenticator.

 newsetup4.png


5.   Select iOS or Android.  Download and install the RSA Authenticator (SecurID) app from the Apple App Store or Google Play Store.  We will refer to this app as "SecurID" from here forward. Accept the prompt to allow notifications.  You can choose to enable or disable anonymized data, including location data.  Disabling data collection does not impact the functionality of the SecurID app. 

        

newsetup5.png 



6.   When installation is complete, click I have downloaded the app.

 newsetup6.png


7.   Using the SecurID app on your smartphone, tap on Scan QR Code and scan the code.

newsetup7.png 


8.   When the checkmark on the Active Your Device screen appears, click on Set PIN.

newsetup8.png


 9.   Create a new 6-digit PIN.  Enter your PIN again in the Confirm PIN field.  Click Submit.

newsetup9.png

10.  Enter your employee ID and the PIN you just created.  Click Test Login.

 newsetup10.png


11.   Click Complete Enrollment.

newsetup11.png 


12.  After enrollment, you will be directed to the main page.  Click Test RSA SecurID Authentication.

newsetup12.png


13.   Choose an authentication method, Approve or Biometric.

newsetup13.png


14. Click Logout in the upper right of the window to finish.

newsetup14.png 

 


 

Logging into the VPN

Once you have successfully created your PIN, you will be able to log into the City's VPN using MFA.  MFA will be required starting on the date shown in the VPN MFA notification email you received. 

1.    When connecting to the VPN from your laptop, you will be prompted for your User name and Passcode.  Enter your employee ID in the User name field and your PIN in the Passcode field.  

newsetuplog1.png


2.   If you entered your PIN correctly, the SecurID app on your smartphone will prompt you to approve the login using the method selected in step 13 above.   Once you approve the login, you will be connected to the City's VPN.

FYI: A new version of SecurID is coming

There is a new version of SecurID coming out and the update will show up on your smartphone automatically. The icon will look like this but the functionality will be the same as listed above.​


Please contact the Enterprise Service Desk at 602-534-4357 if you need assistance with setting up Multifactor Authentication or are having difficulties connecting to the VPN.