No; however you will be blocked from accessing your Nutrien account externally, so you may wish to enroll just in case. If you do not enroll and later require access, you will need to call the Nutrien IT Support Desk.

Yes, MFA enrollment is required for any personnel who have a Nutrien email address and access their Nutrien account from outside of the network.

Yes; for most of the company, the Outlook app is the only app that will be supported to access Nutrien mail from a mobile device. The only exception is for Nutrien Ag Solutions personnel, who may use the native iOS mail app on their phone instead of the Outlook app to ensure compatibility with third-party Retail apps such as FSR, MSR, and Dyna-Gro.

You may be prompted for an additional method of verification when you log into your Nutrien account from:

• an external network
• on a personal computer or mobile phone
• when you want to update your MFA Verification preferences
• when you change your password

If you are logging in from the office or work site on a Nutrien computer, you will not be challenged for MFA. You can choose the “Remember me for 14 days” option to be prompted less often.

Yes, when you change your password on an external network you will be prompted for MFA to confirm your log-in.

If you receive a notification request to Approve sign-in on your device that you did not solicit, in the Authenticator app you can press Deny and then Report fraud, which will immediately notify Cybersecurity.

If you are not using the Authenticator app, you can always email suspicious verification requests to Cyber.Security@Nutrien.com for investigation.

No; if you access the network using VPN, MFA will not be triggered.

Yes. Please follow the steps below.

• Step 1 – navigate to https://aka.ms/setupsecurityinfo
• Step 2 – If prompted, enter your Nutrien user name and password
• Step 3 – Approve your MFA verification method
• Step 4 – Change your MFA Verification Preferences

If you have trouble, call the IT Support Desk.

Enroll for MFA using a text message or phone call.

 If your mobile device is connected to wifi on the plane, the “notify me through app” option will work. The only method that will work without cellular or wifi connection is “use verification code from app.”

Forget to switch your preferred method from “notify me through app” to “use verification code from app” before you boarded? When prompted for MFA, select “Sign in another way” and you will be able to update to the app’s code option.

Only one device can be configured to receive MFA prompts though the Authenticator app. However, you will need to install the Authenticator app on any iOS device (iPhone or iPad) you wish to use to access company email or O365 applications. If using an Android device, you will need to install Intune Company Portal in order to be able to access company email or O365 applications.

Please follow the steps below.

• Step 1 – navigate to https://aka.ms/setupsecurityinfo
• Step 2 – If prompted, enter your Nutrien user name and password
• Step 3 – Approve your MFA method on your old phone
  1. If you have the Authenticator app (Notify me through app or Use verification code for app or token)
     • Select “Setup Authenticator App”
     • On the new device, open the Microsoft Authenticator app and Scan the QR code on screen
     • Delete the Old phone under “Authenticator app or Token”
     • Update your Authentication phone number if it was changed. Select the save and approve the change on your new device with the authenticator app
  2. If you have selected Call my authentication phone or Text code to my authentication phone.
     • Change your Authentication Phone number and save the changes.

If you have trouble, call the IT Support Desk.

You an authenticate using your alternate method. If this is not possible, call the IT Support Desk and ask them to clear your settings so you can re-enroll in MFA. Navigate to https://enroll.Nutrien.com to begin the enrollment process.

No; your account will be disabled blocking access to your Nutrien email.

If you require external access to email or other Nutrien applications after the enrollment period has ended, you will need to call the IT Support Desk.

Enrollment can take place anywhere where there is an internet connection. If you are not working, please refer to question, “What if I am currently on leave? Can I do this when I return?”

No; enrollment is only necessary once. However, any iOS device you wish to use to access company email will require the Authenticator App. Any Android device will require Intune Company Portal.

If you chose to receive codes by text message, make sure your service plan and mobile device supports text message delivery. Delivery speed and availability may vary by location and service provider. Also make sure you’ve got adequate cell signal when you’re trying to receive your codes.

If you chose to get codes by phone call, make sure that you will be able to receive phone calls from the phone number you set up in enrollment.

If you have a smartphone, we recommend you use the Microsoft Authenticator App, as it produces codes that expire every 30 seconds and works offline.

During the enrollment, an MFA prompt will be sent to your phone in the method you set up. This will let you know that the system has linked your account to your phone.

To enroll in the Self-Serve Password Reset (SSPR), you must enroll in Multi-Factor Authentication with two (2) different verification methods.

Visit the SSPR details page here.

Please follow the steps below:

Step 1 – SSPR is available online at any time by visiting https://aka.ms/sspr.

Step 2 – Enter your Nutrien email address and the characters displayed in the onscreen captcha. Click Next.

Step 3 – To begin the process, select one of your registered verification methods and follow the onscreen instructions to verify your identity.
(e.g. if you select the Text Message option, this will ask you to enter your phone number; then the system will send you a text message with a unique code to enter onscreen).

Step 4 – You will need to verify yourself a second time using a different verification method. Select another verification method and follow the onscreen instructions.
(e.g. if you select to have a notification sent to the Microsoft Authenticator App, the system will send you an approval request to the Microsoft Authenticator App on your phone. You will need to click Approve to continue).

Step 5 – You will be asked to create a new password. Click Finish to continue.
Please note: your new password will still need to follow the standard length and complexity.

Step 6 – Your password has been reset.

If you have a technical issue, please contact the Nutrien IT Service Desk.

You can access the Microsoft Self-Serve Password Reset (SSPR) tool online from anywhere at any time.

Visit https://aka.ms/sspr