Enrolling in Microsoft MFA

Description

Multi-factor authentication (MFA) protects you against account compromises by sending a verification to your phone when you log into any online service requiring your OHIO email and password. Everyone with an OHIO ID is required to enroll in MFA to protect their sensitive information. The enrollment process takes approximately ten minutes and requires both a computer and a phone.

• Don’t have a smartphone?

  • You can set up MFA with an OTP token or FIDO2 token. You can purchase your own or request an OTP hardware token from OIT.

Environment

PC, Mac, smartphone

Setting Up MFA

Note: The Microsoft Authenticator app is the recommended way to authenticate. This option is the most secure and works over Wi-Fi and mobile networks. If you don’t want to use the Microsoft Authenticator app, you can configure your account to use a hardware token or another method. You’ll select your authentication method during setup.  

Step 1 (On Your Computer)

• Fill out the Multi-Factor Authentication Enrollment Form.

• Then navigate to myaccount.microsoft.com and log in using your OHIO email address and password.  

• The following prompt may appear on your screen:

 

• If so, select Next and you will be redirected to the MFA enrollment page.
  

---

• Don't see this prompt?

  • On myaccount.microsoft.com, navigate to the Security Info section

  • Select Update info >

  • Select + Add sign-in method.

  • In the Choose a method drop-down menu, select your desired authentication method. 

    • Authenticator app (recommended): 

      • Receive a notification on your smartphone/tablet to authenticate. 

    • Phone number: 

      •  Authenticate by answering a phone call and pushing the pound key, or by inputting a passcode sent via text message (SMS). 

  • Select the blue Add button.

---

 

• Important:  Select the jump link below corresponding to your preferred authentication method to continue setup instructions.  

  • Option 1: The Microsoft Authenticator smartphone app is my preferred method (recommended).  

  • Option 2: A phone call or a text is my preferred method. 

 

Set Up The Microsoft Authenticator App is My Preferred Method

Step 2 (On Your Phone)

§  Download the free Microsoft Authenticator mobile app on your smartphone. Keep this window open.

§  Open the app store on your device (Apple or Android). 

§  Search for the Microsoft Authenticator app published by Microsoft Corporation.

§  Download and open the Authenticator app.

Step 3 (On Your Computer)

• Select Next in the setup prompt to continue setting up the app.

Step 4 (On Your Phone)

• Open the Microsoft Authenticator app.

• Select Accept after reviewing the privacy statement. 

• Select Continue. 

• Select Scan a QR code.

  

  • You may receive a notification prompting you to let the Authenticator app access your camera (iOS) or to allow the app to take pictures and record video (Android). Select allow. You must allow so the app can scan the QR code. 

Step 5 (On Your Computer)

• Select Next again, and now you should be presented with a QR code.

Step 6 (On Your Phone)

• Scan the QR code using your phone, and your Ohio University account will be added to the app.

  • You may receive a pop-up that the Authenticator app would like to send you notifications. Select Allow. 

• Your Ohio University account will be added to the app.

Step 7 (On Your Computer)

• Select Next in the setup prompt.

• You’ll see a two-digit number on your computer screen.

Step 8 (On Your Phone)

• A notification will be sent to your phone.

• Select the notification to open the Authenticator app.

• In the Authenticator app, enter the two-digit number shown on your computer screen.

Step 9 (On Your Computer and Using Phone to Answer the Prompt)

• Select Next on the computer screen.

• Add a phone number to verify your account. 

• Select how you would like to verify.

  • Text: You will receive a 6-digit code in a text message that you will enter on your computer.

  • Call: You will receive a phone call. Answer, and then press the pound # key.

Step 10 (On Your Computer)

• You have officially completed enrollment!

• Select Done on your computer screen.  

Outcome: You have set up MFA on your phone! Now, when you access any service that requires your OHIO email and password, you’ll be prompted to authenticate. Select Don't ask again for 90 days at any login screen to limit your authentication requests. You can also turn off app lock to authenticate quicker. 

The authentication will be a two-digit number that appears on your device screen after entering your OHIO login credentials. Enter this number into your phone’s Microsoft Authenticator app to complete your login.

(Device screen - left, and phone screen - right)

IMPORTANT: If you use the campus virtual private network (VPN), you will need to install an Azure-compatible VPN. View installment instructions corresponding to your device.

---

Other Options

Other options are available and include:

• Passkeys
• FIDO2 Keys

 

VPN Installment Instructions

If you would like to use the Ohio University virtual private network (VPN), you will need to install and use an Azure-compatible VPN. VPN is currently available to faculty and staff. Select the hyperlink below corresponding to your device's operating system for instructions. 

• Note: You cannot connect to campus VPN through a text message (SMS) or a hardware token. View instructions for changing your default authentication method to the Microsoft Authenticator app or a phone call to connect.

  • Accessing the VPN with Azure MFA: Windows

  • Accessing the VPN with Azure MFA: Mac OS

  • Accessing the VPN with Azure MFA: iOS devices

  • Accesing the VPN with Azure MFA: Android & ChromeOS

Get Help From OIT

• Visit the Multi-Factor Authentication: Azure page to create a ticket.

• View all Help & Resources: Multi-Factor Authentication: Azure.

Additional Resources

• After you enroll, please provide any feedback in the Azure MFA Issues and Feedback Log. 

• View solutions for common troubleshooting issues with Azure MFA. 

• Enable “Remember me for 90 days” to limit authentication requests on any OHIO sign-in page. 

• Add an additional authentication method in case you are unable to access your primary device (recommended).  

• Disable app lock so you don't have to enter your phone's passcode info to open the Microsoft Authenticator app. 

• Learn how to use a one-time password code so you can authenticate even when your phone can’t connect to Wi-Fi or cellular data.

• Change your default authentication method if desired. 

• Reactivate Azure if you lose or need to reset your phone.