Let's set up your phone

Multi-Factor Authentication

As part of our Enterprise Infrastructure Security (EIS) Program, introduced by Luis Canepari in March, IT is taking steps to apply consistent cyber security standards across Nutrien.

Multi-Factor Authentication adds an extra layer of security to protect Nutrien usernames and passwords.

By enabling Multi-Factor Authentication, we can protect Nutrien credentials with an additional layer of security. With Multi-Factor Authentication, if a bad guy hacks through your password layer, he'll still need your phone to get into your account.

Self-Service Password Recovery

Everyone with a Nutrien email address needs to set up self-serve password recovery to:

• Make it easier for users to reset their passwords
• Lower help desk costs

Microsoft Intune

With Intune, Nutrien IT will be able to:

• Manage the mobile devices your workforce uses to access company data
• Manage the mobile apps your workforce uses
• Protect your company information by helping to control the way your workforce accesses and shares it
• Ensure devices and apps are compliant with company security requirements

Protecting Nutrien accounts with Multi-Factor Authentication

With Multi-Factor Authentication, you'll protect your Nutrien account with something you know (your username and password) and something you have (your phone).

Signing in to your account will work a little differently on a personal device or external network:

• Step 1 - You’ll enter your password
  Whenever you sign into your Nutrien account, you’ll enter your username and password as usual.
• Step 2 - You will be prompted for a second verification
  Either approve the notification sent to the Microsoft Authenticator app, or enter the verification code sent to you via text message, or phone call. Entering this code into the prompt will complete the sign in process.

You will only be prompted for Multi-Factor Authentication if the security situation requires it, usually if you are:

• logging in on an external network
• using a personal computer or mobile device
• or using https://mail.Nutrien.com on an external network

If you receive a suspicious verification request, do not approve it and report it to IT for investigation.

Where can I get support?

Visit the Multi-Factor Authentication cyber security page on conveyor for more information.

If you have questions or concerns, please contact This email address is being protected from spambots. You need JavaScript enabled to view it..

Microsoft Intune

Microsoft Intune is a mobile device management tool. Nutrien is implementing Intune to improve cyber security. Intune will replace Afaria.

All personnel accessing Nutrien information on a cell phone must enroll in Microsoft Intune to be supported by Nutrien IT.

Once enrolled, you will get access to the Company Portal and be able to continue using your Nutrien issued mobile phone or tablet to get your work done, and Nutrien IT will be able to manage limited aspects of the mobile device to keep us protected.

The Company Portal allows you to download Company managed apps.

After enrolling you will be able to:

• Continue using your mobile phone or tablet to get your work done
• Continue to access to personal apps and data and maintain your privacy
• Continue to use the native email app
• Get Nutrien apps from the Company Portal
• Reset your phone to factory settings if it is lost or stolen
• Access Nutrien’s network

Privacy and security steps IT can take after you enroll:

• Reset your phone to factory settings if it is lost or stolen
• Remove company-related files and apps (without removing your personal files or apps)
• Require you to use a password or PIN
• Remotely reset the PIN or lock your phone or tablet if it is lost or stolen
• Make your phone or tablet compatible with Nutrien security standards

Giving you the ability to reset your password from anywhere, at any time.

What is SSPR?
Self-Serve Password Reset (SSPR) allows Nutrien personnel to be able to reset their network AD account password, through the online Microsoft website.
( https://aka.ms/sspr )

How does it work?
All Nutrien personnel who have enrolled for multi-factor authentication and confirmed at least two (2) different methods of verification, will automatically be able to use the online Self-Serve Password Reset service.

Things to remember
As Nutrien offers several options to enroll in multi-factor authentication, some methods are explicitly required to verify your identity for application access; however, you may use any verification method for Self-Serve Password Reset.