Skip to agency navigation
Skip to main content

Official Website

of the Commonwealth of Pennsylvania

    The .gov means its official.

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

     

    If your questions is not answered below, submit a question by emailing ra-ob-bcpo@pa.gov.

    Last updated 10/4/2023.

    Concur Multi-Factor Authentication (MFA)

    A:  Multi-Factor Authentication is an authentication process that requires two different authentication factors to establish identity.  This means the user will have to prove their identity in two different ways to establish access.  To increase security, more software websites are requiring their users to use MFA to sign in.  MFA gives your organization the ability to help safeguard your information.

    A:  MFA is a layered approach to securing your users' accounts and the data they contain.  When MFA is enabled and after entering the correct password, the user is prompted to provide the second factor of authentication, which could be a one-time code generated by a mobile authenticator app.  This second step verifies the user’s identity before the service grants the user access.  MFA greatly enhances the security of online accounts and is a core component of a strong identity and access management policy.  While important, usernames and passwords are vulnerable to credential stuffing, password breaches, and can be stolen by third parties.  Enforcing the use of an MFA significantly reduces the risk of unauthorized access and increases confidence that your accounts will stay safe from cyber criminals.

    A:  No.

    A:  Wednesday, October 18, 2023.

    A:  No.  The link in ESS automatically authenticates your login credentials.

    A:  Yes.  If you have CWOPA credentials, select the AZURE link to log into SAP Concur.  This will use the Commonwealth of PA’s MFA process.  If you do not have CWOPA credentials, you will use the Password link to log into SAP Concur and will be required to set up and use SAP Concur’s MFA.

    A:  Yes.  If you have CWOPA credentials, select the AZURE link to log into SAP Concur.  This will use the Commonwealth of PA's MFA process.  If you do not have CWOPA credentials, you will use the Password link to log into Concur and will be required to set up and use Concur’s MFA.

    A:  SAP Concur supports multiple authenticator apps, but it is recommended to use Microsoft’s authenticator app.

    A:  Follow the on-screen instructions from SAP Concur to link the existing app to Concur.

    A:  No.  If you are using the SAP Concur MFA process, you must use an authentication app to receive the verification code.

    A:  You will be required to use the browser extension version of the selected authentication app.

    A:  You will need to authenticate every time you sign in.  In the event your session is timed out, you would need to input your username and password again and will need to provide your authentication code.

    A:  No.

     

     

    For Right to Know Law requests for the Office of the Budget, please go to our Right-to-Know Request page.