MFA Enrollment Guide

Multi-factor Authentication (MFA) is Here!

Please read this guide in its entirety prior to enrolling.

How does MFA work?

Two pieces of information will be needed when logging in using your Hilcorp account

password from outside of a Hilcorp location:

Something You Know

(Your Password)

Something You Have

(Your Phone)

Access Granted

To learn more and to enroll:

mfa.hilcorp.com

What is Multi-factor

Authentication (MFA)?

MFA adds an additional layer of

security to help prevent anyone

other than you from accessing your

account in the event your Hilcorp

account password is compromised.

Why is Hilcorp

implementing MFA?

Phishing attacks to steal passwords

and personal information are

becoming more common. MFA

protects your account and Hilcorp’s

assets from unauthorized access.

What should I expect after enrollment?

You will need access to your smartphone, tablet, flip phone, or home phone each time

when logging in to Remote Desktop (RD) or Workday from outside of a Hilcorp

location.

How do I log in to Remote Desktop (RD) or Workday

once I’m enrolled?

 Houston Remote Desktop (RD) – Please connect to RD using the “Houston RD

MFA” shortcut on your computer or attached in your enrollment email. If you do

not have this shortcut, please contact the IT Helpdesk. Each time you log in from

outside of a Hilcorp location, you will receive either a prompt on your

smartphone/tablet or a phone call, asking for your approval.

 Workday – Log in to Workday as usual. Each time you log in from outside of a

Hilcorp location, you will receive either a prompt on your smartphone/tablet or a

phone call, asking for your approval.

Before starting the enrollment process in MFA

1. You will need a smartphone or tablet, such as an iPhone, iPad, or Android

phone/tablet. A flip phone or home phone can also be used.

2. On your smartphone or tablet, please download the Microsoft Authenticator

app from the Apple App Store or Google Play Store. You will need the app

starting in Step 6. (Not applicable if you have a flip phone or using a home

phone.)

3. For the best experience in the enrollment process, it is recommended you

complete the enrollment process from a computer.

How do I enroll in MFA?

There is a one-time enrollment process to register your smartphone or tablet in MFA.

If you do not have a smartphone or tablet, you can use a flip phone or home phone.

This process will take a few minutes and the IT Helpdesk is available should you need

help.

Go to mfa.hilcorp.com for enrollment instructions

1. Please log in using your Hilcorp email address and password. (Log in the same

way as you do to Workday.)

2. Once logged in, you will be prompted that “more information is required”. Click

“Next” to continue.

3. You will be presented with a screen to select how you would like to be contacted.

Click the dropdown menu to use either the mobile app or authentication phone.

(Recommended: Select the Mobile App option)

Option

Description

Mobile app

(Recommended)

If you have a smartphone, select this option. Each time you log in from outside of a

Hilcorp location, you will receive a prompt from the Microsoft Authenticator app on

your smartphone or tablet, asking for your approval.

Authentication

phone

If you have a flip phone or home phone, select this option. Each time you log in from

outside of a Hilcorp location, you will receive a phone call with instructions to approve the

If you selected the “Mobile app” option, continue to Step 4.

If you selected the “Authentication phone” option, skip to Step 12.

4. Once you have selected the “Mobile app” option in the dropdown menu, click the

option “Receive notifications for verification”.

5. If you have not already done so, you will need to download the “Microsoft

Authenticator” app from the Apple App Store or Google Play Store on your

smartphone or tablet before continuing.

6. Click “Set up” to begin configuring your Microsoft Authenticator app.

– Open the Microsoft Authenticator app on your smartphone or tablet. You may

see some introductory screens. Go through the wizard to add a new account

(tap +).

– If prompted to receive push notifications, tap “Allow”.

– When adding a new account, you will be prompted on what kind of account

you are adding. Choose the “Work or school account” option.

7. The app will activate your phone’s camera. Tap “Allow” if you are prompted for

permission to use your camera. Point your phone’s camera at the QR code on

your computer screen. Once the code has been scanned on your phone, click

“Next” on your computer.

8. You will see a series of messages on your computer while it is verifying your app

settings. Click “Next” on your computer to continue.

(On your smartphone or tablet)

9. The enrollment wizard will now attempt to send you a push notification on your

smartphone or tablet. In the Microsoft Authenticator app, you will receive a

prompt to approve the sign-in. Tap “Approve”.

10. Once you have confirmed notifications, you will be prompted to enter a phone

number to be used as a backup method in case you lose access to the Microsoft

Authenticator app. Enter your phone number, then click “Done”. Do not use

your office phone number.

11. Enrollment is now complete. Please take a moment to verify that all settings are

correct.

– Recommended, but not required: Under the “Alternate authentication phone”

option, add an additional phone number as a backup, such as a home phone.

– Recommended, but not required: If you have additional smartphones or tablets

that you would like to enroll, click on the “Set up Authenticator app” option. By

adding an additional smartphone or tablet, this will allow you to complete the

MFA verification should your primary smartphone or tablet is not available.

– (Note: You will not be able to set an office phone number.)

If everything looks correct, you may close your browser session.

You only need to proceed with Steps 12 and 13 if you selected to use the

“Authentication phone” option in Step 3.

12. When prompted to enter your phone number, please enter your cell or home

phone, then click “Next”.

13. You will receive a phone call to verify your phone number. Please answer the call

and follow the voice prompts.

Frequently Asked Questions (FAQs)

 What are the benefits of using MFA?

Phishing attacks to steal passwords and personal information are becoming more

common. MFA protects your account and Hilcorp’s assets from unauthorized

access since you are notified and required to verify every login to your account

from outside of a Hilcorp location.

 What IT services will use MFA?

Remote Desktop (RD) and Workday will require MFA when logging in from

outside of a Hilcorp location.

 How often do I need to use MFA?

If you are logging in to Remote Desktop (RD) or Workday from a Hilcorp location,

you will not need to use MFA. If you are logging in from outside of Hilcorp

locations, you will need to use MFA.

 What methods can I use to authenticate with MFA?

– Push notifications via the Microsoft Authenticator app (recommended)

– Phone Call

 Do I need a smartphone or tablet to use MFA?

No, if you do not have a smartphone or tablet, you can use a flip phone or home

phone to receive a phone call.

 Is the Microsoft Authenticator app required?

No, you can elect to receive a phone call instead. The Microsoft Authenticator

app is free from both the Apple App Store and Google Play Store, and also

speeds up the MFA verification process by allowing you to receive a push

notification to “Approve” or “Deny” a logon event.

 I lost or replace my smartphone, tablet, or flip phone. How do I re-enroll in

MFA?

Call or email the IT Helpdesk to have your MFA registration reset. Once reset,

follow the same steps in the Enrollment Guide to re-enroll in MFA.

 Can I enroll multiple smartphones or tablets in MFA?

Yes, if you have additional smartphones or tablets available, you can enroll

additional smartphones or tablets as a backup, should your primary smartphone

or tablet not be available.

 Why am I not receiving push notifications on my Microsoft Authenticator

app?

If you downloaded the Microsoft Authentication app and have enrolled in MFA,

but are not receiving push/pop-up notifications for MFA verification when

logging in to Remote Desktop (RD) or Workday, it is likely due to a configuration

on your smartphone or table. Ensure that push notifications are enabled on your

smartphone or tablet for the Microsoft Authentication app.

 What should I do if I receive a push notification in the Microsoft

Authenticator app that I didn’t initiate?

If you did not attempt to log in to Remote Desktop (RD) or Workday, please

choose the “Deny” option in the Microsoft Authenticator app to block the

request. Please contact the IT Helpdesk to report the attempt.

 What if I don’t have Wi-Fi or cellular data on my smartphone or tablet while

signing in?

– Workday – Sign in to Workday as usual. When prompted to approve the sign-

in request, click on “Sign in another way”. Select the option to call your phone

to complete the MFA verification.

– Remote Desktop (RD) – Please contact the IT Helpdesk for assistance with

gaining access.

 What if I do not have my smartphone, tablet, flip phone, or home phone

available and need access?

It is recommended, but not required, to enroll additional smartphones or tablets

(if available) to use a backup in case your primary smartphone or tablet is not

available. You can also register alternative phone numbers as well. If none of

these options are available, please contact the IT Helpdesk for assistance with

gaining access.

Who do I contact if I need help?

Please contact the IT Helpdesk or your local support contact.