Nelnet Multi-Factor Authentication

Students are not required to use Multi-Factor Authentication (MFA) to login to MyViking, but MFA is required to make a payment online through Nelnet (MyViking > Student Planner > My Ledger)

Please reach out to the Nelnet Support phone number for further assistance - (800) 609-8056

 

Multifactor Authentication

This articles describes how to set up and use Multifactor Authentication (MFA) for users to access their Nelnet account.

What is Multifactor Authentication?

Multifactor authentication (MFA) adds a layer of protection to the sign-in process. When accessing their account for the
first time, users are presented with a prompt to add another layer of identify verification. Once that has been setup, then
each time a user logs in, they will be required to submit that added step during the login process. Nelnet Campus
Commerce currently requires use of an email address or an authenticator app as a method for multi-factor
authentication.

Who Must Use MFA?

MFA is only required for user who are directly authenticating into a Nelnet Campus Commerce system with a username
and password or who may be accessing via SSO from an external system that does not require MFA.

Authenticator Apps

Authenticator apps can be downloaded on your smart phone and/or your desktop computer. Apps such as Authy have
both a phone and desktop version. if you have an existing authenticator app, it should be relatively simple to add your
Nelnet Campus Commerce account. If you do not already have an authenticator app, some of the most common ones
are:


• Google Authenticator
• Microsoft Authenticator
• Authy by Twilio (includes desktop version)
• Lastpass
• 2FA Authenticator
• Duo Mobile
• Aegis authenticator

 

What Does The Login Process Look Like?

 

Initial Set Up - Email

1. With their initial login a user will be prompted to sign up for multi-factor authentication. Click the Begin button to
proceed.

Uploaded Image (Thumbnail)

2. Click the Sign-Up Using Email button to proceed.

Uploaded Image (Thumbnail)

3. If you have multiple email addresses saved in your profile you will be asked to select the one to which you'd like
the authentication code to be sent. Make your selection and click the Send Code to Email Button. If you have
only one email stored with your profile the authentication code will automatically be sent to that email address.

Uploaded Image (Thumbnail)

4. Check your email. You'll find an email such as this one containing your one-time use code.

Uploaded Image (Thumbnail)

5. Enter the provided code and click the Submit button.

  • TIP: If you cannot find your emailed authentication code, check your junk mail folder or use the Resend Code To Email button to generate a new email.

Uploaded Image (Thumbnail)

6. Authentication questions will be used to verify your identity should you need assistance with resetting your MFA in
the future. Choose two questions and provide an answer. When finished click Save to be logged into your
account.

Uploaded Image (Thumbnail)

 

 

Initial Set Up - Authenticator App

1. With their initial login a user will be prompted to sign up for multi-factor authentication. Click the Begin button to
proceed.

Uploaded Image (Thumbnail)

2. Click the Sign-Up Using App button to proceed.

  • TIP:  If you choose to enroll using an authenticator app don't yet have an established app, you should
    download one before proceeding.

Uploaded Image (Thumbnail)

3. To register your app, scan the QR code and follow any prompts that you may receive in your app. Once
completed, click Next.

Uploaded Image (Thumbnail)

4. Enter a Verification Code from your app to ensure that the app is appropriately linked to your Nelnet account.
Click the Next button to proceed.

Uploaded Image (Thumbnail)

5. A list of backup recovery codes will be presented. In the event that you lose your device these back up codes can
be used to access your Nelnet account. Print or download them and store them in a safe place. Click the Next
button to proceed.

Uploaded Image (Thumbnail)

6. Your multi-factor authentication will be set up. Click the Next button to choose authentication questions and
answers.

Uploaded Image (Thumbnail)

7. Authentication questions will be used to verify your identity should you need assistance with resetting your MFA in
the future. Choose two questions and provide an answer. When finished click Save to be logged into your
account.

Uploaded Image (Thumbnail)

 

Logging in with MFA - Email

After entering your username and password you will be asked to select the email to which you'd like the authentication
code to be sent (if you have multiple email address saved in your profile). Make your selection and click the Send Code
to Email Button
. If you have only one email stored with your profile the authentication code will automatically be sent to
that email address.

Uploaded Image (Thumbnail)

Check your email to find your one-time use code. Enter the provided code and click the Submit button.

Uploaded Image (Thumbnail)

 

Logging in with MFA - Authenticator App

After entering your username and password you will be asked to enter a Verification Code from your authenticator
app. Enter the code and then click Verify to be logged into your account.

Uploaded Image (Thumbnail)

Using A Recovery Code

If you do not have access to your device rather than entering a verification code, click the Don't have access to app
link.
You will be prompted to provide a Recovery Code. Enter a code and click Submit to be logged into your account.

Uploaded Image (Thumbnail)

After the use of a recovery code you will receive an email notification.

 

Frequently Asked Questions:

What Is An Authenticator App?

  • An authenticator app is an app that adds MFA to accounts that you want to protect. When you set up your account
    for MFA, you will receive a secret key to enter into the authenticator app. This establishes a secure connection
    between the authenticator app and your account.

Why Is Nelnet Campus Commerce Recommending The Use Of An Authenticator App?

  • An authenticator app is more secure than ordinary MFA using SMS or email codes because it doesn't use a
    message that someone could intercept.

Why Doesn't Nelnet Campus Commerce Allow SMS?

  • SMS isn't likely to get more secure. Attackers usually target the weakest link in security, and with MFA, SMS is the weakest link.