Multi-Factor Authentication (MFA) is coming to AnyConnect VPN

King County is enabling MFA (Multi-Factor Authentication) technology as an additional layer of cyber security to the VPN (King County is enabling MFA (Multi-Factor Authentication) technology as an additional layer of cyber security to the VPN (Virtual Private Network) solution, AnyConnect. At this time, employees are only required to input their username and password to login to AnyConnect. Soon, employees will also experience an MFA challenge on the same device or phone number they use for Microsoft Office 365. If you do not currently utilize MFA for enhanced cyber security, do not worry. KCIT is working with senior leadership to get every employee scheduled soon.

Below is a series of screenshots to show you what the AnyConnect login process will look like moving forward.

1. Select your department and click Connect to start VPN connection. The “KingCountyVPN” option will remain available to facilitate the migration to MFA. It will function as it does today, until it is removed upon completion of the AnyConnect MFA implementation project.

2. Enter your King County username

3. Enter your King County password

4. You will see a notification, like below, notifying you that your second factor is being challenged. So check your Microsoft Authenticator App, phone number, or hard token fob you enrolled with.

5. Approve the MFA request, assuming you initiated the connection. Please note, your experience may look different depending what second factor you enrolled in. Remember, never approve an unexpected MFA challenge, it could be someone attempting to access your account.

For questions or assistance contact KCIT at https://helpdesk.kingcounty.gov or call 206-263-HELP (3-4357).