Is the “Set up Multi-Factor Authentication” email legitimate? (Entra MFA)

The MFA enrollment emails sent from help@maine.edu are real messages from UMS Information Technology (IT). You were right to check anyway — here is how to confirm it yourself, every time.

Detailed Information

Emails sent so far

Date Subject line Summary
August 12, 2026 Action Required: Set up Multi-Factor Authentication for your UMS account Announces that Entra MFA is being added for students not yet enrolled in MFA. Some University of Maine (UM) students received one extra sentence noting they had not enrolled in Duo MFA, the System's previous MFA method, and should set up MFA using Entra instead. This variation is expected and is not a sign of tampering.
August 26, 2026 Reminder: Set up Multi-Factor Authentication for your UMS account A reminder that MFA is required and setup has not yet been completed. Same content for all students.

How to verify it is genuine

  • Sender: both emails come from help@maine.edu, sent through UMS IT's email platform, Constant Contact.
  • Links: because these emails go through Constant Contact, links in them first point to a constantcontact.com or cc.rs6.net address before redirecting to a final maine.edu page. Hover over a link before clicking to see where it leads. If you are still uncomfortable clicking the links in the email, these are the links included in the body of the message:
  • What UMS IT will never ask: UMS IT will never ask for your password or an MFA approval by email, phone or text. Never approve a sign-in prompt you did not start yourself.

 

If you think an MFA email is fake

If an email you received does not match what is described above — it comes from a different sender than help@maine.edu, does not use the Constant Contact email platform, has a different subject line, does not match the summaries here, its links do not lead to a maine.edu site, or something about it just feels off — treat it as suspicious and follow the steps below.

  1. Do not click any links in it.
  2. Forward it to phish@maine.edu.
  3. If you already clicked a link and entered your password, change your password immediately and contact the IT Service Desk at (800) 696-4357.

Additional resources

Environment

  • Microsoft Entra MFA
  • Student email (UMS-issued accounts)
Print Article