Multi-Factor Authentication & the Outlook App

Safety is our number one priority at Nutrien – and that includes cyber safety. It’s not just the company’s data and assets at stake; it’s your own digital security and personal information as well. To help protect us, Nutrien has introduced stronger cyber security protection in the way we connect to our systems from outside of the network..

Multi-Factor Authentication (MFA) protects you by requesting an additional verification of your identity when you attempt to access Nutrien’s tools or systems from outside of the office.

Unfortunately, not all mobile mail apps support MFA protection, so we are restricting mobile email access to the Outlook app. This app, combined with the Authenticator app for iPhone and Intune for Android, allow Nutrien to ensure our security policies are enforced. There is currently one exception: If you are part of Nutrien Ag Solutions and use apps such as MSR, FSR, or Dyna-Gro, you are currently able to use the native iOS mail app for company mail on your mobile device. This exception may be subject to change in the future.

Is Enrollment Mandatory?

If you access Nutrien tools or applications (including email) from outside of the office/worksite (working from home or on the road, or through a mobile device), you must enroll in MFA or you will not be able to access your account externally.

If you do not access and Nutrien tools or applications (including email) outside of the office/worksite, you do not require MFA. However, you will be locked from external access without it.

If you did not enroll in MFA and need to access your Nutrien account from an external network, please call the IT Support Desk.

Protecting Nutrien accounts through Multi-Factor Authentication

With MFA, you'll protect your Nutrien account with something you know (your username and password) and something you have (your phone).

Signing in to your account will work a little differently when you are outside of the Nutrien network (such as at home, in a coffee shop, or working from a hotel or airplane):

• Step 1 - You’ll enter your password
      Whenever you sign into your Nutrien account, you’ll enter your username and password as usual.
• Step 2 - You will be prompted for a second verification
      Either approve the notification sent to the Microsoft Authenticator app, or enter the verification code sent to you via text message, or phone call. This will complete the sign-in process.

You will not be prompted for MFA if you are using VPN to connect to the company network, or if you are working from a Nutrien work site or office.

If you receive a notification request to Approve sign-in on your device that you did not solicit, can press Deny and then Report fraud, which will immediately notify Cybersecurity.

Please note: you can always email any suspicious activity or verification requests to This email address is being protected from spambots. You need JavaScript enabled to view it. for investigation

Giving you the ability to reset your password from anywhere, at any time.

What is SSPR?
Self-Serve Password Reset (SSPR) allows Nutrien personnel to be able to reset their network AD account password, through the online Microsoft website.
( https://aka.ms/sspr )

How does it work?
All Nutrien personnel who have enrolled for multi-factor authentication and confirmed at least two (2) different methods of verification, will automatically be able to use the online Self-Serve Password Reset service.

Things to remember
As Nutrien offers several options to enroll in multi-factor authentication, some methods are explicitly required to verify your identity for application access; however, you may use any verification method for Self-Serve Password Reset.