Skip to main content

About multi-factor authentication at the OMA

Why is the OMA adding multi-factor authentication?

The OMA has taken additional steps to safeguard and protect your data with increased cyberattacks and threats to personal information on the rise. An additional layer of security, known as multi-factor authentication, has been introduced to the member login process. The goal of using multi-factor authentication is to make the organization more secure and to better safeguard members’ personal information.

What is multi-factor authentication?

Multi-factor authentication involves validating your login attempt with two or more forms of identification before granting you access to the system or application you are trying to enter. This can include information only you would know (such as your password) or something only you would have (such as a security token). By requiring multiple factors of validation, multi-factor authentication significantly reduces the risk of data breaches and cyberattacks. Multi-factor authentication is becoming increasingly important to ensure the security of critical systems and data.

What tool is used by the OMA to implement multi-factor authentication?

The OMA uses OneLogin – a tool that securely manages and simplifies access to your multiple online accounts to implement multi-factor authentication on a secondary device. OneLogin adds an extra layer of security through multi-factor authentication and helps protect user accounts from unauthorized access.

Which security factors does the OMA offer?

The OMA has adopted the following security factors:

OneLogin Protect authenticator app

The OneLogin authentication app is a tool that helps you securely access different websites and applications. Instead of relying solely on a username and password, it also generates unique codes that you enter along with your regular login credentials to prove that it’s really you trying to access your account.

Google/Microsoft authenticator app

Both Google and Microsoft offer users a multi-factor authentication app. These apps help protect your accounts by providing a second way to confirm your identity when logging in to your accounts. Like OneLogin, these apps generate unique codes to use along with your username and password to confirm your identity.

Text Message (SMS)

Multi-factor authentication over SMS is a security measure that helps protect your online accounts. When you enable this feature, in addition to your username and password, you will receive a special code via text message to your mobile phone. To log in to your account, you will need to enter this code along with your regular login information.

Email (available for password reset only)

This is a process that helps you regain access to your online account when you forget your password. When you initiate a password reset, the service will then send an email to the email address associated with your account. This email will contain a link or instructions on how to create a new password. By clicking the link or following the instructions, you will be directed to a page where you can enter a new password for your account. This ensures that only you, the account owner, can reset the password since the email is sent to the email address the OMA has on file.

Get in touch

If you require further assistance with adding multi-factor authentication to your account, or you have a question about the process, please email or call us toll-free at 1-800-268-7215..

info@oma.org

Access the OMA multi-factor authentication user guide

Download the guide

Enrol in multi-factor authentication

Quick access to your OneLogin profile to easily add multi-factor authentication to your account.

Enrol now

Frequently asked questions

OneLogin is a convenient and secure tool that helps you manage and access your online services. This tool is used to add multi-factor authentication to an account, which adds an extra layer of security, protecting your personal information from unauthorized access.

Multi-factor authentication is required in order to access your OMA account. You have the option to choose one of the following security factors:

  1. OneLogin Protect app
  2. Google or Microsoft authentication app
  3. Text message (SMS)
  4. Email (for password reset only)

All members need to add multi-factor authentication to their OMA account.

The first phase, giving members the option to add two-factor authentication to their accounts, began in 2023. The second phase started on June 10, 2024, and requires all members add this security to their account for the protection of the entire organization.

The addition of multi-factor authentication will affect access to members MyAccount profile.

Multi-factor authentication may be necessary depending on several factors, such as using a new unknown device or accessing your account from an unsecure network. In most cases, once you have authenticated your account on your everyday devices, you won’t need to do so again for 90 days.

Refer to the user guide for a step-by-step guide to updating your personal information such as phone number, and adding, removing, and modifying your multi-factor authentication settings.

Download the OMA multi-factor authentication user guide.

For security reasons, your personal device will be used to ensure it is in your possession and is unique to you. This helps to ensure your account can only be accessed by the person with physical access to your device and no one else.

Our recommendation is for members to use either the OneLogin Protect app or Google/Microsoft authenticator apps.

If for any reason your device is lost or stolen, we encourage you to log into your account through oma.org and access profile as soon as possible to change your password and remove the specific device from security factor list. You can also contact the service desk for help reporting a lost or stolen work device.

Password reset

Members who need to reset their passwords will now have to use two-factor authentication to do so. (This only applies to those who have enabled two-factor authentication during the option adoption phase).

Please refer to the user guide for steps to resetting your password with multi-factor authentication.

Access the OMA multi-factor authentication user guide.

Yes, once you have completed the required steps, the new password will be effective immediately.

Yes, this functionality will still be available to members.  

Yes, upon receipt of the containing the secure link, you will have five minutes to complete the password reset process. After that time, the link will expire and you will be required to initiate the reset process again.

The more complex a password, the harder it is for anyone but you to access your personal account. The OMA has implemented certain password requirements to ensure your account is secure.

The OMA password requirements are: 

  • Minimum eight characters 
  • Must contain a mix of uppercase and lowercase letters 
  • Must include at least one number OR special character (such as ! @ # $ % *) 
  • Cannot repeat any of your last five passwords 
  • Cannot contain three or more consecutive characters from your name, OMA number or email address on file
  • You can only reset your password once every 24 hours
Back to Top