Enrolling in Azure Multi-Factor Authentication

Description

Multi-factor Authentication (MFA) protects you against lost or stolen passwords by adding a verification step to your OHIO login with the Microsoft Authentication App (Azure). In order to utilize Azure MFA, you must first enroll. The enrollment process takes approximately ten minutes and requires both a computer and a smartphone.

NOTE:

  • If you use the VPN, learn how to install the new Azure-compatible VPN on your machine. 
  • Do you currently receive an electronic W-2, or would you like to?
    • The change from Duo to Azure MFA introduces changes to the authentication method that is used to access your W-2 form electronically through My Personal Information. As a result of this change, the IRS requires renewed consent be obtained from employees who wish to continue receiving electronic W-2 forms. Please take a moment and re-enroll now if you would like to continue receiving your W-2 form online.

Environment

PC, Mac, smartphone

Setting up Azure MFA

Step 1 (On your computer)

 An Ohio University Login Page that has the Ohio University Logo at the top. It shows that more information is required and a blue next button in the lower right.

  • Select Next and you will be redirected to the Azure MFA enrollment page.
    Image of the first step in the enrollment process for Azure MFA
     
  • Use the links below to choose your preferred method for multi-factor authentication. 

The Microsoft Authenticator App is my preferred method

Step 2 (On your phone)

§  Download the Microsoft Authenticator Mobile App on your smartphone. Keep this window open.

§  Open the app store on your device (Apple or Android). 

§  Search for the Microsoft Authenticator app. Published by Microsoft Corporation.

§  Download and open the authenticator app.

A blue padlock. The keyhole is white and looks like the head and shoulders of a person

Step 3 (On your computer)

  • Select Next to continue setting up the app.

Step 4 (On your phone)

  • Open the Microsoft Authenticator app and if prompted allow notifications.

  • You will now add an account. Make sure to select Work or School account.

  • Now select Scan a QR code.

Step 5 (On your computer)

  • Select Next again, and now you should be presented with a QR code.

Step 6 (On your phone)

  • Scan the QR code using your phone. Your Ohio University account will be added to the app.

Step 7 (On your computer)

  • Select Next. A test notification will be sent to your phone.

Step 8 (On your phone)

  • Approve the notification on your phone.

Step 9 (On your computer and using phone to answer the prompt)

  • Select Next on the computer screen.

  • Add a phone number to verify your account. 

  • Select how you would like to verify.

    • Text me a code: you will receive a 6-digit code in a text message that you will enter on your computer.

    • Call me: you will receive a phone call. Answer, and then press the pound # key.

Step 10 (On your computer)

  • You have officially completed enrollment!

  • Select Done on your computer screen.  

  • You can choose to limit verification requests by selecting Don’t ask again for 90 days during your next MFA prompt.

  • Note: Microsoft lets you add multiple methods for MFA. If you want to add additional methods, please see Additional Information.

  • Note: If you use the Ohio University VPN please follow the links provided in the VPN Information section.

 

A phone call or SMS text message is my preferred method

Step 2 (On your computer)

  • On the bottom of the setup page, choose I want to setup a different method.
    Image of the I want to setup a different method button

  • Under Which method would you like to use, select Phone. (This is the only alternative to using the authenticator app.) 
    image of the box that appears after selecting I want to setup a differnet method

  • Now you will select your country code on the drop down menu. Enter your phone number to the right.
    Image of the page where a phone number is requested for setup of Azure MFA

Step 3 (On your computer and using phone to answer the prompts)

  • Select your verification method.

    • Option 1: Text me a code

    • Option 2: Call me

  • After verification, you will return to the original setup page on your computer. 

  • If you would like to add email as an additional verification method, select I want to set up a different method. 

    • Enter a non @ohio.edu email address for this step. 

  • Open your non @ohio.edu email in a new tab and find the message containing the Azure code for verification. Example image of the email from Microsoft when setting your email as a part of Azure MFA.

Step 4 (On your Computer)

  • You have officially completed enrollment!

  • Select Done on your computer screen. 

  • You can choose to limit verification requests by selecting Don’t ask again for 90 days during your next MFA prompt.

  • Note: If you use the Ohio University VPN please follow the links provided in the VPN Information section.

  • Note: Microsoft lets you add multiple methods for MFA. If you want to add additional methods, please see Additional Information.

Outcome: You should now be set up to use Azure Multi-Factor Authentication. 

Additional Information

  • You will now be required to verify your log-in using the Authenticator app or your phone number.   

  • You can choose to limit verification requests by selecting Don’t ask again for 90 days at any OHIO sign-in page.

 

Add an additional authentication method:

  • We recommend adding an additional authentication method in the event you are unable to authenticate using your preferred method:

    • Log in to myaccount.microsoft.com with your full @ohio.edu email address and OHIO password. 

    • Under Security info, select Update Info >.

    • Select Add method.

    • Select the authentication method you wish to add. The Authenticator app is the preferred method. The app will send push notifications to your smartphone, which is the fastest and most secure form of authentication. 

A dropdown menu with the following options: Authenticator app, Phone, Alternate phone, Email, Office phone

  • Follow the prompts to complete the enrollment process for your new method.

    • Note: If using a smart watch, turn off App Lock on the Authenticator app.

      • Select the three dots in the upper right corner

      • Select Settings.

      • Under Security, navigate to App Lock.

      •  Select the toggle to turn off. 

App lock is shown disabled, with a red circle around the menu option

VPN information

 

Receiving an electronic W-2 form

  1. Log into My Personal Information at myhr.ohio.edu.

  2. After logging in, choose Other Misc. Information in the left navigation menu.

  3. Navigate to the OU Electronic Consent section.

    1. Select Add to re-enroll in electronic W-2 Forms or to choose your delivery preference for the first time.

    2. Select Update if you previously opted out of electronic W-2 forms and would like to change your selection to electronic delivery. 

  4. In the field next to I consent to receive my W-2 on-line: Select Y or N, enter a Y and select Apply in the upper right corner. 

    1. Note: Do not stop here. To confirm your selection, you must complete steps 5 and 6 below.

  5. Select Next and review your choice.

  6. Select Submit to finish. The payroll office will notify you via email in January when your W-2 is available online.

Additional instructions are available online at ohio.edu/hr/resources/hr-system-training

Get help from OIT

Additional resources

Was this helpful?
56% helpful - 75 reviews

Details

Article ID: 265
Created
Wed 4/6/22 2:30 PM
Modified
Mon 11/28/22 3:18 PM