- iAttend is an attendance tracking software that leverages WMed badges to track attendance.
- Please see the attached documents for proper usage of the iAttend system and hardware.
|
Human Resources (3)
|
|
|
OneSource (9)
|
Phones (4)
|
|
Remote Access (5)
|
Security (21)
|
|
Services (14)
|
Software (60)
|
The purpose of this article is to explain how to add your WMed Directory photo to your Outlook 365 (webmail) profile picture so that other WMed users are better able to distinguish who you are. If you do this in webmail then your Teams profile picture will also be updated.
First, go to https://portal.med.wmich.edu/wmed-directory/, search for yourself, right-click on your photo, select "save image as.." and save your photo to a location you can quickly navigate to (like downloads).
Sign in to Microsoft 365 with your work or school account at https://webmail.med.wmich.edu.
Select the circle in the upper right hand corner of the page that shows your initials or an icon of a person.
Lastly, in the My accounts pane, click on the circle that shows your initials or an icon of a person. Change your photo in the pop-up that appears by clicking on "Upload a new photo" and select "Apply".
Note: It may take a couple of hours for all of your Microsoft services to sync with your new profile picture and even up to 24 hours for your picture to be visible by others.
First, go to https://portal.med.wmich.edu/wmed-directory/, search for yourself, right-click on your photo, select "save image as.." and save your photo to a location you can quickly navigate to (like downloads).
Sign in to Microsoft 365 with your work or school account at https://webmail.med.wmich.edu.
Select the circle in the upper right hand corner of the page that shows your initials or an icon of a person.
Lastly, in the My accounts pane, click on the circle that shows your initials or an icon of a person. Change your photo in the pop-up that appears by clicking on "Upload a new photo" and select "Apply".
Note: It may take a couple of hours for all of your Microsoft services to sync with your new profile picture and even up to 24 hours for your picture to be visible by others.
To Enable Captioning on Video Recordings
On the Google Chrome Internet Browser:
1. Click on the 3 vertical dots in the upper right-hand corner
2. Click on “Settings”
3. Click on in the bottom left corner
4. Toggle the “Live Caption” switch to on. It will turn blue.
5.Click on “Caption Preferences” if you would like to customize the captions.
This issue presents as display issues caused when trying to open a Citrix application (such as Epic) while using a laptop docked with a monitor.
Example screenshot – Your screen may look different than below, but typically you will see some part of the Epic login screen off-center from where it should be.
To resolve this issue:
- Right click on your desktop and select “Display Settings” in the menu that opens. This should open your computer's Display Settings menu.
- Select your laptop in the Display Settings menu (Screen 1 in the example image, yours may be different). You can click the "Identify" button to assist in identifying which option is your laptop. Your screen should look like the image below, with your laptop screen highlighted in blue.
- With your laptop selected, scroll down to the "Scale and layout" section. Click on the dropdown menu with the label "Change the size of text, apps, and other items."
- Select "100%" from the menu.
- You should now be able to launch Epic with no display issues. If Epic is already open, close and re-launch it.
1) Click on the gear icon in the upper right of Outlook on the Web.
2) Click View All Outlook settings at the bottom of the menu
3) On the settings screen, select Mail --> Customize actions.
4) On the Customize Actions screen, scroll down to the Message surface settings.
5) Check the Phish Alert V2 checkbox to add the icon to the top of the Message Surface.
6) Click the Save button.
Re-Enrollment Information
If you have a new phone and automatically transferred your applications from your old phone to your new one, you will need to uninstall the NetIQ app and then reinstall it. If you do not do this, you will run in to issues when trying to re-enroll.
-----------------------------------------------------------------------------------------------
Requirements to complete
- 15 minutes of time
- Reliable internet connection
- Computer
- Smartphone
- Cellphone number must be on file with IT
Installing the NetIQ Advanced Authentication App
1. Download the NetIQ Advanced Authentication app on your smartphone in one of the following ways:
- Navigate to Google Play App store and search for the NetIQ Advanced Authentication app
2. Perform the following action to install the app in your smartphone:
- Android: Tap Install
Launching the NetIQ Advanced Authentication App
1. Tap the 
NetIQ Advanced Authentication icon.
2. Accept the license agreement.
- A message "New PIN" is displayed.
3. Specify a PIN to access the app and tap OK. (The PIN code can only be numbers)
The App is now installed. Proceed with enabling fingerprint if desired, or with 'Enrolling your smartphone as a second factor'
Enrolling your smartphone as a second factor
First time enrollment requires the ability to receive one-time password (OTP) code via text message from WMed. If you do not have a cell phone number on file at WMed, a ticket must be submitted to IT Support.
On your computer's web browser
1. Navigate to the WMed Multifactor Self-Service portal by clicking here.
2. Enter your WMed username and click the Next button:
3. Enter your WMed password and click the Next button.
On your smartphone in your text messaging app
4. A text message will be sent to your cell phone number with an one-time password (OTP) code.
On your computer's web browser
5. Enter the OTP code received via text and click the Next button.
- If you did not receive a text message with the OTP, click the “Resend” button to receive another OTP text.
6. On the Authentication Methods page, click the Add button.
7. Select Smartphone from the available second factor methods.
Warning - the QR Code must be scanned within 2 minutes of clicking the "Get QR Code" button. It is recommended to have the NetIQ Advanced Authentication app open on your smartphone in advance.
8.Click the Get QR Code button, a QR code will be displayed.
- If the enrollment times out, click the cancel button and restart the process.
On your smartphone in the NetIQ Advanced Authentication App
9. Tap the + icon on the lower-right of the Enrolled Authenticators screen.
10. Aim your phone at the screen to capture the QR code.
- The screen closes automatically when a green square appears over the QR code indicating that a compliant QR code is captured.
On your computer's web browser
12. Return to the MFA Self-Service Portal on your computer, a message should state Enrollment is complete. Click the Save button.
12. The smartphone authentication method should appear in the list of available authentication methods for multi-factor authentication.
Enrollment is now complete!
Enabling Fingerprint for NetIQ Advanced Authentication App access
The Fingerprint option is only available if your smartphone device supports this functionality.
1. In the NetIQ Advanced Authentication App, tap the 
menu icon.
2. Tap Settings.
3. Set PIN to ON to enable PIN protection for your app.
3. Set Fingerprint to ON to enable fingerprint authentication.
- The fingerprint you set for the phone is used as a touch sensor for your app.
Re-Enrollment Information
If you have a new phone and automatically transferred your applications from your old phone to your new one, you will need to uninstall the NetIQ app and then reinstall it. If you do not do this, you will run in to issues when trying to re-enroll.
-----------------------------------------------------------------------------------------------
Requirements to complete
- 15 minutes of time
- Reliable internet connection
- Computer
- Smartphone
- Cellphone number must be on file with IT
Installing the NetIQ Authenticator App
1. Download the NetIQ Advanced Authentication app on your smartphone in one of the following ways:
- Navigate to App store and search for the NetIQ Advanced Authentication app.
2. Perform the following action to install the app in your smartphone:
- iOS: Tap Get
Launching the NetIQ Authenticator App
1. Tap the 
NetIQ Auth app icon to run the NetIQ Advanced Authentication app.
2. Accept the license agreement.
- A message "New PIN" is displayed.
3. Specify a PIN to access the app and tap OK. (The PIN code can only be numbers)
- A message "NetIQ Auth" Would Like to Send You Notifications is displayed.
4. Tap Allow to enable the push notification.
- This will allow the “Push to Accept” functionality, otherwise the one-time code must be entered each time.
Enrolling your smartphone as a second factor
First time enrollment requires the ability to receive one-time password (OTP) code via text message from WMed. If you do not have a cell phone number on file at WMed, a ticket must be submitted to IT Support.
On your computer's web browser
1. Navigate to the WMed Multifactor Self-Service portal by clicking here.
2. Enter your WMed username and click the Next button:
3. Enter your WMed password and click the Next button.
On your smartphone in the text messaging app
4. A text message will be sent to your cell phone number with an one-time password (OTP) code.
On your computer's web browser
5. Enter the OTP code received via text and click the Next button.
- If you did not receive a text message with the OTP, click the “Resend” button to receive another OTP text.
6. On the Authentication Methods page, click the Add button.
7. Select Smartphone from the available second factor methods.
Warning - the QR Code must be scanned within 2 minutes of clicking the "Get QR Code" button. It is recommended to have the NetIQ Advanced Authentication app open on your smartphone in advance.
8. Click the Get QR Code button, a QR code will be displayed.
- If the enrollment times out, click the cancel button and restart the process.
On your smartphone in the NetIQ Advanced Authentication App
9. Tap the + icon on the upper-right of the Enrolled Authenticators screen.
- A message Advanced Authentication Would like to Access the Camera is displayed.
10. Tap OK.
11. Use the camera of your smartphone to capture the QR code using the NetIQ Advanced Authentication app.
- The screen closes automatically when a green square appears over the QR code indicating that a compliant QR code is captured.
12. Specify WMed for the Account text box.
13. Tap Save on your smartphone app
- The authenticator that you enrolled is displayed in the Enrolled Authenticators screen of your smartphone app.
On your computer's web browser
14. Return to the MFA Self-Service Portal on your computer, a message should state Enrollment is complete. Click the Save button.
15. The smartphone authentication method should appear in the list of available authentication methods for multifactor authentication.
Enrollment is now complete!
Enabling Touch ID or FaceID for NetIQ Authenticator App access
TouchID or FaceID options are only available if your smartphone device supports this functionality.
1. In the NetIQ Authenticator App, tap the menu icon.
2. Tap Settings.
3. Set Touch ID to ON to enable fingerprint authentication.
4. Set FaceID to ON to enable face authentication.
- The fingerprint you set for the phone is used as a touch sensor for your app.
When do I use it?
Click the (Phish Alert Button) PAB anytime you believe you have received a phishing email or any potentially dangerous email. Any emails you report using the PAB will be automatically deleted from your inbox. The emails you report will also be forwarded WMed and Microsoft for analysis.
The PAB should only be used to report emails you believe to have malicious intent. If you are receiving obvious spam or marketing emails, you should not use the PAB. You can delete these types of emails or add the sender or sender's email domain to a block list.
How do I use it?
Depending on your device and email client, the steps for reporting an email using the PAB may vary.
However, across all devices, the reported email will be handled the same. The email you report will be forwarded to WMed and Microsoft and then deleted from your inbox. If you report an email in error, you can retrieve the email from your Trash/Deleted Items.
Outlook on the Web
The PAB icon will appear in the drop-down menu of an open email.
To report an email as a phishing email:
1) Click the PAB icon.
2) A sidebar prompt will ask you if you are sure you want to report the email as a phishing email. Click the Phish Alert button to report the email.
Outlook mobile app (Android)
To report an email as a phishing email:
1) On any open email, tap the three dots at the top-right of the screen.
2) The Phish Alert add-in will appear. Tap the Phish Alert add-in.
3) A prompt will ask you if you are sure you want to report the email as a phishing email. Tap the Mobile Phish Alert button to report the email.
4) If you have successfully reported a simulated phishing email sent on behalf of your organization, a congratulatory message will display. Click OK to close it.
Outlook mobile app (iOS)
To report an email as a phishing email:
1) On any open email, tap the three dots at the top-right of the screen.
2) The Phish Alert add-in will appear. Tap the Phish Alert add-in.
3) A prompt will ask you if you are sure you want to report the email as a phishing email. Tap the Phish Alert button to report the email.
4) If you have successfully reported a simulated phishing email sent on behalf of WMed, a congratulatory message will display. Click OK to close it.
Why should I use it?
Reporting emails will help WMed stay safer. Because the potential phishing emails you report are sent for analysis to WMed and Microsoft, WMed will now be aware of which phishing attacks are able to reach employee inboxes. Once we're aware of possible vulnerabilities, we can better defend against them. You are an important part of the process of keeping WMed safe from cybercriminals.
When do I use it?
Click the Phish Alert Button (PAB) if you believe you have received a phishing email or any potentially dangerous email. Any emails you report using the PAB will be automatically deleted from your inbox. The emails you report will also be forwarded to WMed and Microsoft for analysis.
The PAB should only be used to report emails you believe to have malicious intent. If you are receiving spam or marketing emails, you should not use the PAB to report these. You can delete these types of emails or add the sender or sender's email domain to a block list.
How do I use it?
1) The PAB add-in will appear at the top of your Outlook client.
2) A prompt will ask you if you are sure you want to report the email as a phishing email. Tap the Phish Alert button to report the email.
3) If you have successfully reported a simulated phishing email sent on behalf of your organization, a congratulatory message will display. Click OK to close it.
Why should I use it?
Reporting emails will help WMed stay safer. Because the potential phishing emails you report are sent for analysis to WMed and Microsoft, WMed will now be aware of which phishing attacks are able to reach employee inboxes. Once we're aware of possible vulnerabilities, we can better defend against them. You are an important part of the process of keeping WMed safe from cybercriminals.
When do I use it?
Click the Phish Alert Button (PAB) if you believe you have received a phishing email or any potentially dangerous email. Any emails you report using the PAB will be automatically deleted from your inbox. The emails you report will also be forwarded to WMed and Microsoft for analysis.
The PAB should only be used to report emails you believe to have malicious intent. If you are receiving spam or marketing emails, you should not use the PAB to report these. You can delete these types of emails or add the sender or sender's email domain to a block list.
How do I use it?
You will see the PAB in one of two ways:
1) The PAB add-in will appear at the top of your Outlook client.
In this view, to report an email as a phishing email:
- Click the Phish Alert button while the email is open.
- A prompt will ask you if you want to report the email as a phishing email. Click Yes to report the email, or click No to not report the email.
2) WARNING: THIS OPTION NO LONGER WORKS WITH THE OLDER OUTLOOK 2016 CLIENT. USE THE BUTTON AT THE TOP OF THE OUTLOOK CLIENT.
The PAB add-in will appear as a clickable Phish Alert tab in any opened email.
In this view, to report an email as a phishing email:
- Click the Phish Alert tab to open a drop-down screen.
- A prompt will ask you if you want to report the email as a phishing email. Click the Phish Alert button to report the email.
If you have successfully reported a simulated phishing email sent on behalf of WMed, a congratulatory message will display. Click OK to close it.
Why should I use it?
Reporting emails will help WMed stay safer. Because the potential phishing emails you report are sent for analysis to WMed and Microsoft, WMed will now be aware of which phishing attacks are able to reach employee inboxes. Once we're aware of possible vulnerabilities, we can better defend against them. You are an important part of the process of keeping WMed safe from cybercriminals.
- Unusual, non-descriptive subject that does not fit email message
- Unusual, non-printing character
- Unusual, low contrast color scheme that is hard to read
- Link goes to suspicious foreign country URL
Developing the security mindset
Each time we receive an email, we should attempt to establish a level of trustworthiness by looking at the major elements of the email using a top-down approach. Each of these element's should be reviewed for "Red Flags".
We must approach each email from a security mindset first and then once the email has passed our mental trustworthiness check we can proceed to conducting normal business communications.
Each time we receive an email, we should attempt to establish a level of trustworthiness by looking at the major elements of the email using a top-down approach. Each of these element's should be reviewed for "Red Flags".
We must approach each email from a security mindset first and then once the email has passed our mental trustworthiness check we can proceed to conducting normal business communications.
What were the red flags of the Security Checkup simulated phishing email?
Red Flag Examination:
- Warning Banner: (Red Flag # 1)
- The email is coming from outside of WMed, but is using an internal organizational email address.
- From field: (Red Flag # 2)
- This one is difficult to discern because it says that it is coming from "security@med.wmich.edu". Unfortunately, the "From" field can be easily spoofed, so it's not always straight forward.
- Despite it being easily spoofed, it is a good field to compare against other email elements such as the warning banner or hyperlinks.
- We must ask ourselves the following questions:
- Have I ever received an email from this account before or am I expecting an email from this account? No.
- Should this have a warning banner on it? No.
- Is this something that WMed IT typically uses for communication? No, WMed IT uses support@med.wmich.edu to communicate to the organization.
- This one is difficult to discern because it says that it is coming from "security@med.wmich.edu". Unfortunately, the "From" field can be easily spoofed, so it's not always straight forward.
- Date/Sent field:
- Nothing unusual here.
- To field:
- Nothing unusual here.
- Nothing unusual here.
- Subject field:
- Neutral or difficult to tell, but it is raising the level of importance of the email, so we need to be a little more on guard and review all the elements of the email. Attackers try to elevate importance, increase urgency, or cause fear.
- Content:
- Neutral or difficult to tell, IT could be asking for a security checkup review, but this is specifically focusing on everything surrounding a person's credentials.
- Hyperlinks: (Red Flag # 3)
- This is the most significant Red Flag.
- The hyperlink URL is very strange (https://34.75.2o2.lol).
- It does not match the From/Sender email address.
- WMed services typically utilizes the med.wmich.edu domain for it's information services.
- This is the most significant Red Flag.
- Attachments: None
Description
This is a guide for logging in to WMed services and applications using a smartphone for Multi-Factor Authentication (MFA).Requirements
Ensure the App is installed on your smartphone and you are enrolled with 'smartphone' as your second factor.Instructions for iOS
Instructions for Android
Procedure
1. Log in to a WMed service or application in the normal way. The following prompt will be displayed if a second factor is required.
2. Unlock your smartphone and tap the 'Authentication required!' notification.
If no notification appears, manually start the NetIQ Advanced Authentication app
(Android) or 
(iOS).3. Unlock the app with a fingerprint or your PIN that was selected during setup.
4. An 'Authentication request' similar to the one below will be displayed in the app. Press 'ACCEPT' if the details are appropriate and the login should proceed and allow access to the service. If no authentication request appears proceed to step 5.
5. If no Authentication request appears after opening the app, press the hamburger button
in the upper left then select 'Authentication requests'. Any pending requests will be listed here provided that your smartphone is reachable by WMed over the Internet. 6. For occasions where WMed MFA cannot reach your smartphone the One-Time Password (OTP) second factor is available. During Step 1 when the prompt for a second factor appears, select the link 'Offline OTP Option' toward the bottom. A text box will appear under the link labeled 'One-Time Password'.
7. Open the NetIQ Advanced Authentication app on
(Android) or (iOS) and unlock using your fingerprint or PIN selected during enrollment. The One-Time Password is the 6-digit code under 'WMED\username' and next to the green dot. The code changes every 30 seconds.
If you see no code, press the hamburger
button then 'Enrolled Authenticators'. If nothing is listed here, enrollment must be completed using the links in 'Requirements' section at the top.If you are needing help logging in to Epic, you must reach out to Bronson IT as they handle all Citrix/Epic user accounts. Their number is 269-341-6330.
If you need help just finding the Epic app, see the image and steps below.
1. Open the Available Applications app on your desktop.
2. Click on Citrix Workspace to install/load it.
- If Citrix is missing from this menu, click on the refresh icon on the bottom-left corner of the Available Apps window.
- If it is still missing after refreshing, contact WMed IT.
Once it's loaded, Citrix will prompt you to sign in. Your Citrix credentials should be the same as your Epic credentials. 
If you Citrix is installed but not login is coming up and you do not have any Epic icons on your desktop, you will need to either sign-in a different way or reset Citrix altogether.
1. To sign-in a different way, right-click the Citrix icon on your taskbar next to your clock.
- You may have to click the ^ in order for the Citrix icon to show.
2. Click Sign-In
To reset Citrix if it seems broken, repeat step 1 from the previous set of instructions but then click on Advanced Preferences instead. From there, you will select Reset Citrix Workspace and then hit 'Yes' on the window that comes up after. 
|
|