Enrolling in Microsoft Azure MFA

Description

Multi-factor authentication (MFA) protects you against hackers by sending a verification to your phone when you log into any online service requiring your OHIO email and password. With Azure MFA, you'll be notified if your password is compromised and someone is trying to log in as you. Everyone with an OHIO ID is required to enroll in Azure MFA to protect their sensitive information. The enrollment process takes approximately ten minutes and requires both a computer and a phone.

Environment

PC, Mac, smartphone

Setting up Azure MFA

Note: The Microsoft Authenticator app is the recommended way to authenticate. This option is the most secure and works over Wi-Fi and mobile networks. If you don’t want to use the Microsoft Authenticator app, you can set your authentication method to a phone call or a passcode sent via text message (SMS). You’ll select your authentication method during setup.  

Step 1 (On your computer)

 An Ohio University Login Page that has the Ohio University Logo at the top. It shows that more information is required and a blue next button in the lower right.

  • If so, select Next and you will be redirected to the Azure MFA enrollment page.
    Image of the first step in the enrollment process for Azure MFA
  • Don't see this prompt?

    • On myaccount.microsoft.com, navigate to the Security Info section

    • Select Update info >

    • Select + Add sign-in method.

    • In the Choose a method drop-down menu, select your desired authentication method. 

      • Authenticator app (recommended): 

        • Receive a notification on your smartphone/tablet to authenticate. 

      • Phone number: 

        •  Authenticate by answering a phone call and pushing the pound key, or by inputting a passcode sent via text message (SMS). 

    • Select the blue Add button.

 

 

Option 1: The Microsoft Authenticator app is my preferred method

Step 2 (On your phone)

§  Download the free Microsoft Authenticator mobile app on your smartphone. Keep this window open.

§  Open the app store on your device (Apple or Android). 

§  Search for the Microsoft Authenticator app published by Microsoft Corporation.

§  Download and open the Authenticator app.

A blue padlock. The keyhole is white and looks like the head and shoulders of a person

Step 3 (On your computer)

  • Select Next in the setup prompt to continue setting up the app.

Microsoft Authenticator setup prompt

Step 4 (On your phone)

  • Open the Microsoft Authenticator app.

  • Select Accept after reviewing the privacy statement. 

Accept button to accept Authenticator terms and conditions.

  • Select Continue. 

Prompt from Authenticator app asking permissions to collect data.

  • Select Scan a QR code.

    Authenticator app showing option to scan QR code.

    • You may receive a notification prompting you to let the Authenticator app access your camera (iOS) or to allow the app to take pictures and record video (Android). Select allow. You must allow so the app can scan the QR code. 

Step 5 (On your computer)

  • Select Next again, and now you should be presented with a QR code.

Step 6 (On your phone)

  • Scan the QR code using your phone, and your Ohio University account will be added to the app.

    • You may receive a pop-up that the Authenticator app would like to send you notifications. Select Allow. 

  • Your Ohio University account will be added to the app.

Step 7 (On your computer)

  • Select Next in the setup prompt.

  • You’ll see a two-digit number on your computer screen.

Step 8 (On your phone)

  • A notification will be sent to your phone.

  • Select the notification to open the Authenticator app.

  • In the Authenticator app, enter the two-digit number shown on your computer screen.

Step 9 (On your computer and using phone to answer the prompt)

  • Select Next on the computer screen.

  • Add a phone number to verify your account. 

  • Select how you would like to verify.

    • Text: You will receive a 6-digit code in a text message that you will enter on your computer.

    • Call: You will receive a phone call. Answer, and then press the pound # key.

Step 10 (On your computer)

  • You have officially completed enrollment!

  • Select Done on your computer screen.  

Outcome: You have set up Azure MFA on your phone! Now, when you access any service that requires your OHIO email and password, you’ll be prompted to authenticate. Select Don't ask again for 90 days at any login screen to limit your authentication requests. You can also turn off app lock to authenticate quicker. 

The authentication will be a two-digit number that appears on your device screen after entering your OHIO login credentials. Enter this number into your phone’s Microsoft Authenticator app to complete your login.

Computer and phone authentication prompts for number matching.

(Device screen - left, and phone screen - right)

IMPORTANT: If you use the campus virtual private network (VPN), you will need to install an Azure-compatible VPN. View installment instructions corresponding to your device.

Option 2: A phone call or SMS text message is my preferred method

Step 2 (On your computer)

  • On the bottom of the setup page, choose I want to setup a different method.
    Image of the I want to setup a different method button

  • Under Which method would you like to use, select Phone. (This is the only alternative to using the authenticator app.)
    image of the box that appears after selecting I want to setup a differnet method

  • Now you will select your country code on the drop-down menu. Enter your phone number to the right.
    Image of the page where a phone number is requested for setup of Azure MFA

Step 3 (On your computer and using phone to answer the prompts)

  • Select your verification method.

    • Text: You will receive a 6-digit code in a text message that you will enter on your computer.

    • Call: You will receive a phone call. Answer, and then press the pound # key.

  • After verifying, you will be prompted to set up the Microsoft Authenticator app as a secondary verification method.

    • If you do not wish to set up the app, select I want to set up a different method to use your email instead. 

      • Note: You can use your email for setting up Azure MFA, but you cannot use it to authenticate. 

        Azure MFA set-up prompt with I want to set up a different method in a red rectangular box.

  • Select email from the drop-down menu. 

    • Enter a non @ohio.edu email address for this step. 

  • Open your non @ohio.edu email in a new tab and find the message containing the Azure code for verification. Example image of the email from Microsoft when setting your email as a part of Azure MFA.

  • In myaccount.microsoft.com (the web browser screen you navigated away from to go to your email), enter the verification code and select Next.

Step 4 (On your Computer)

  • You have officially completed enrollment!

  • Select Done on your computer screen. 

Outcome: You should now be set up to use Azure Multi-Factor Authentication! Now, when you access any online application that requires your OHIO login, you will be prompted to authenticate through a phone call or text message. You can select Don't ask again for 90 days at any single sign-on screen to limit your authentication requests.

IMPORTANT: If you use the campus virtual private network (VPN), you will need to install an Azure-compatible VPN. View installment instructions corresponding to your device.

 

VPN installment instructions

If you would like to use the Ohio University virtual private network (VPN), you will need to install and use an Azure-compatible VPN. VPN is currently available to faculty and staff. Select the hyperlink below corresponding to your device's operating system for instructions. 

Get help from OIT

Additional Resources

66% helpful - 183 reviews
Print Article