Before submitting an application for a Gael Key please review the information below.
Overview
Multi-Factor Authentication (MFA) is a critical security measure that adds an additional layer of protection to prevent unauthorized access to sensitive information, even if credentials are compromised.
Multi-Factor Authentication (MFA)
The recommended method for MFA at SMC is the Microsoft Authenticator mobile app, which should be installed on a smartphone. This app provides a "push" notification, making it the most convenient and fastest way to authenticate. The SMC community is strongly encouraged to use their smartphones as the primary device for MFA. However, there may be circumstances where this is not feasible. In such cases, a hardware token is required.
Hardware Tokens (Gael Key)
Hardware tokens are small “key fob”-size devices that have a LCD screen and display a rotating number when a button is pressed called a PIN. When authenticating using a hardware token, the user will be prompted to enter the PIN displayed on the token’s screen.
Security Token Assignment
In exceptional cases, a hardware token may be provided by the College. Requests for digital tokens must be made to IT Services by contacting the Service Desk at 925-631-4266, itshelp@stmarys-ca.edu or by submitting a ticket through the IT Services portal. Each request will be reviewed by the Information Security team. Approval is contingent upon a risk-benefit analysis.
Lost or Stolen Security Token
If a hardware token is lost or stolen, it must be reported immediately to IT Services at 925-631-4266, itshelp@stmarys-ca.edu or by submitting a ticket through the IT Services portal. The device will be deactivated to prevent unauthorized access to SMC’s authentication services. Individuals who are issued a hardware token are responsible for securing the token to prevent loss or theft. A replacement fee of $15.00 will be charged for any lost or stolen hardware token, payable by the individual, individual’s department or business unit.
Returning Hardware Token
Hardware tokens are the property of Saint Mary’s College of California and must be returned under the following conditions:
- Upon separation from employment at SMC
- When a student leaves SMC
- Upon request by the CIO or Information Security team
It is important to note that personal hardware tokens not provided by SMC cannot be integrated into the SMC system and are not usable for MFA purposes.