How to use MFA for CSS/PSS and Military ESO

MFA adds an extra layer of security to your login by requiring a unique verification code from an authentication app on your mobile device. This enhancement supports industry best practice and strengthens the protection of employer and member information.

Before you begin

To use MFA, you'll need:

• access to a mobile phone
• the Microsoft Authenticator or Google Authenticator app
• an active ESO account

Opting in to MFA

New ESO users

When completing your ESO access form, select the MFA option.

Existing ESO users

Email [email protected] and include:

• your name
• user ID
• employer ID(s)
• confirmation that you would like MFA enabled on your account

CSC will send a confirmation email once your profile has been updated, generally by the next business day.

Setting up MFA

Once you've received your confirmation email:

1. Step 1: Download an authenticator app

   Choose one of the following free apps:

   • Microsoft Authenticator
   • Google Authenticator

   Android

   Open the Google Play Store, search for either app and select Install.

   iPhone

   Open the App Store, search for either app and select Get.

   Tip: Make sure you download the official Microsoft Authenticator or Google Authenticator app. If you're prompted to start a free trial, you've likely selected the wrong app.

2. Step 2: Log in to ESO

   Go to the ESO login page and enter your username and password.

   If you're a new user, refer to your ESO welcome email for additional setup instructions.

3. Step 3: Scan the QR code

   The first time you sign in with MFA enabled, you'll be prompted to scan a QR code.

   Using your mobile device:

   1. Open your authenticator app.
   2. Select the option to add a new account.
   3. Scan the QR code displayed on screen.

   Once completed, your authenticator app will generate a unique verification code.

4. Step 4: Enter your verification code

   Enter the code from your authenticator app into the MFA screen to complete setup.

   If you have access to multiple employer IDs, separate codes will be displayed for each ESO account. Make sure you use the code that matches the ESO account you're accessing.

Logging in after setup

After your initial setup:

1. Enter your ESO username and password.
2. Open your authenticator app.
3. Enter the current verification code.

A new code is generated automatically every minute.

Troubleshooting

I've changed phones or lost access to my authenticator app

If you've replaced your phone, deleted the authenticator app or can no longer access your codes, contact CSC for assistance.

CSC will need to update your profile so a new QR code can be generated and MFA can be set up again.

Need help?

Contact [email protected] for assistance with MFA setup or access issues.