In October, Virgin Pulse will send emails and push notifications asking participants to provide a mobile phone number. This is not a phishing attempt. It is part of a new sign-in process using multi-factor authentication (MFA) that will help protect your data. This improvement has been approved by Argonne Cyber Security.
Q, Who will this change affect?
A. All users of Virgin Pulse.
Q. What is multi-factor authentication (MFA)?
A. With MFA, users must present two or more pieces of evidence to authenticate their identity and be granted access to a service. You are probably familiar with MFA if you bank online.
Q. What are the pieces of evidence that Virgin Pulse will require for authentication?
A. As you have in the past, you will enter your username and password. Then you will enter a security code that is automatically generated and sent to you via the communication channel you select.
Q. How will I receive the security code?
A. It can be sent to your phone using SMS (text) or via email (which you can access on a computer, phone, or anywhere else you get email). The system will offer you these choices when you log in.
Q. How much time will this take?
A. When MFA is requested, it will add only a fraction of a minute to your login.
Q. When will Virgin Pulse start requiring MFA?
A. We do not know when any individual will receive this new feature, though everyone will have it by November 19.
Q. How will Virgin Pulse know my cell phone number?
A. Adding your number is voluntary. Virgin Pulse will send push notifications and emails starting in mid-September asking you to enter and verify a mobile phone number. If you do not add a phone number, you will only be able to receive your security code at the email listed in your profile.
Q. What if I miss the push notification and email from Virgin Pulse?
A. You can enter your mobile phone number on the Virgin Pulse member profile and enrollment page under account settings.
Q. What if my phone number is from another country?
A. Texts will only be sent to U.S. phone numbers. If your phone number is from another country, you can request the security code be sent to your email.
Q. Will I need to use MFA every time I sign into Virgin Pulse?
A. No. You will have to use MFA the first time you log in from a device that hasn’t been authenticated and any time you haven’t logged in within 30 days.
Q. Why is Virgin Pulse making this change?
A. It strengthens security and protects your data. It’s part of a healthy approach to your privacy.
Q. Who can I contact if I have questions about Virgin Pulse or MFA?
A. If you have questions about Virgin Pulse, contact Health and Employee Wellness at wellness@anl.gov. If you have questions about the multi-factor authentication requirement, contact the Service Desk at ext. 2-9999, option 2.