Enrolling in Microsoft Azure MFA

Description

Multi-factor authentication (MFA) protects you against hackers by sending a verification to your phone when you log into any online service requiring your OHIO email and password. With Azure MFA, you'll be notified if your password is compromised and someone is trying to log in as you. Everyone with an OHIO ID is required to enroll in Azure MFA to protect their sensitive information. The enrollment process takes approximately ten minutes and requires both a computer and a phone.

• Don’t have a smartphone? You can set up MFA with a call/text to a non-smartphone by following the instructions in Step 1, or request a physical device called a hardware token from OIT to authenticate.

Environment

PC, Mac, smartphone

Setting up Azure MFA

Step 1 (On your computer)

Note: You can configure Azure MFA to prompt you to authenticate through a notification on the Microsoft Authenticator smartphone app (preferred), a passcode sent via text message, or an automated call to your phone. You’ll select your preferred method during set-up.

• Fill out the Azure Multi-Factor Authentication Opt-In Form.

• Navigate to myaccount.microsoft.com and log in using your OHIO email address.  

• The following prompt may appear on your screen:

 

• If so, select Next and you will be redirected to the Azure MFA enrollment page.
  
• Don't see this prompt?

  • In myaccount.microsoft.com, under Security Info, select Update Info.

  • Select + Add sign-in method.

  • Select the authentication method that you would like to add.

    • The Authenticator app is the recommended default authentication method.

    • You can also add a phone number to authenticate via text message (SMS) or a phone call.

  • Select the blue Add button.

  • Select the hyperlink below corresponding to your preferred authentication method for further set-up instructions. 

    • Setting up the Microsoft Authenticator app as your authentication method

    • Setting up a phone call or text as your authentication method

 

• Important: In the options below, select the hyperlink corresponding to how you'd like to authenticate. The link will take you to instructions tailored to that authentication method. 

  • Option 1:  Microsoft Authenticator Mobile App (recommended) - Receive a notification on your smartphone's Microsoft Authenticator app to authenticate. This is the recommended and most secure way to authenticate. 

  • Option 2:  Phone call or text message: Receive a phone call (to a mobile phone or landline) or a text message to authenticate. 

Option 1: The Microsoft Authenticator App is my preferred method

Step 2 (On your phone)

§  Download the Microsoft Authenticator mobile app on your smartphone. Keep this window open.

§  Open the app store on your device (Apple or Android). 

§  Search for the Microsoft Authenticator app published by Microsoft Corporation.

§  Download and open the authenticator app.

Step 3 (On your computer)

• Select Next to continue setting up the app.

Step 4 (On your phone)

• Open the Microsoft Authenticator app and if prompted allow notifications.

• You will now add an account. Select Work or School account.

• Now select Scan a QR code.

Step 5 (On your computer)

• Select Next again, and now you should be presented with a QR code.

Step 6 (On your phone)

• Scan the QR code using your phone. Your Ohio University account will be added to the app.

Step 7 (On your computer)

• Select Next. A test notification will be sent to your phone.

Step 8 (On your phone)

• Approve the notification on your phone.

Step 9 (On your computer and using phone to answer the prompt)

• Select Next on the computer screen.

• Add a phone number to verify your account. 

• Select how you would like to verify.

  • Text: You will receive a 6-digit code in a text message that you will enter on your computer.

  • Call: You will receive a phone call. Answer, and then press the pound # key.

Step 10 (On your computer)

• You have officially completed enrollment!

• Select Done on your computer screen.  

Outcome: You should now be set up to use Azure Multi-Factor Authentication. Now, when you access any online application that requires your OHIO login, you will be prompted to authenticate through a Microsoft Authenticator app notification. You can select Remember Me for 90 days on any OHIO login screen to limit your authentication requests.

IMPORTANT: If you use the campus virtual private network (VPN), you will need to install an Azure-compatible VPN. View installment instructions corresponding to your device.

 

---

Option 2: A phone call or SMS text message is my preferred method

Step 2 (On your computer)

• On the bottom of the setup page, choose I want to setup a different method.
  

• Under Which method would you like to use, select Phone. (This is the only alternative to using the authenticator app.)
  

• Now you will select your country code on the drop down menu. Enter your phone number to the right.
  

Step 3 (On your computer and using phone to answer the prompts)

• Select your verification method.

  • Text: You will receive a 6-digit code in a text message that you will enter on your computer.

  • Call: You will receive a phone call. Answer, and then press the pound # key.

• After verifying, you will be prompted to set up the Microsoft Authenticator app as a secondary verification method.

  • If you do not wish to set up the app, select I want to set up a different method to use your email instead. 

    • Note: You can use your email for setting up Azure MFA, but you cannot use it to authenticate. 

      

• Select email from the drop-down menu. 

  • Enter a non @ohio.edu email address for this step. 

• Open your non @ohio.edu email in a new tab and find the message containing the Azure code for verification. 

• In myaccount.microsoft.com (the web browser screen you navigated away from to go to your email), enter the verification code and select Next.

Step 4 (On your Computer)

• You have officially completed enrollment!

• Select Done on your computer screen. 

Outcome: You should now be set up to use Azure Multi-Factor Authentication. Now, when you access any online application that requires your OHIO login, you will be prompted to authenticate through a phone call or text message. You can select Remember Me for 90 days on any OHIO login screen to limit your authentication requests.

IMPORTANT: If you use the campus virtual private network (VPN), you will need to install an Azure-compatible VPN. View installment instructions corresponding to your device.

 

VPN installment instructions

• If you use the Ohio University virtual private network (VPN), you will need to install and use an Azure-compatible VPN. Select the hyperlink below corresponding to your device's operating system for instructions. 

  • Note: Your default Azure MFA authentication method must be set to the Microsoft Authenticator app or phone call in order to connect to campus VPN.

    • Accessing the VPN with Azure MFA: Windows

    • Accessing the VPN with Azure MFA: Mac OS

    • Accessing the VPN with Azure MFA: Android

    • Accessing the VPN with Azure MFA: iOS devices

    • Accessing the VPN with Azure MFA: Linux

    • Accessing the VPN with Azure MFA: Chrome OS devices

Get help from OIT

• Visit the Multi-Factor Authentication: Azure page to create a ticket.

• View all Help & Resources: Multi-Factor Authentication: Azure.

Additional Resources

• After you enroll, please provide any feedback in the Azure MFA Issues and Feedback Log. 

• View solutions for common troubleshooting issues with Azure MFA. 

• Enable “Remember me for 90 days” to limit authentication requests on any OHIO sign-in page. 

• Add an additional authentication method in case you are unable to access your primary device (recommended).  

• Disable app lock so you don't have to enter your phone's passcode info to open the Microsoft Authenticator app. 

• Change your default authentication method if desired. 

• Reactivate Azure if you lose or need to reset your phone.