Multifactor authentication (MFA) required for all services when logging in from outside Aalto, starting 28 April 2026

What is changing? 

When logging in on campus or via a remote connection (VPN), everything will work as before, and MFA will generally not be requested. 

This practice will align with most widely used services, such as MyCourses, Sisu, and the Aalto Service Platform (Salesforce). Many older services have previously remained outside the current MFA policy. 

Aalto Login is a single sign-on system, and you need to complete MFA with it only once per day. Most users already access at least one service that requires MFA during the day, so their experience will not change. 

Which services and users will be affected? 

Logging in to email, Microsoft 365, Aalto VPN (virtual private network) and Virtual Desktop Infrastructure (VDI) will not change. 

The change will not affect passkey users either. Read more about passkeys in Aalto Login.

Questions?  

If you have any questions, please contact IT Service Desk (servicedesk@aalto.fi).