Set up MFA Guide
Multi-Factor Authentication (MFA) is an advanced security layer included with Azure/Office 365 that makes it more difficult for hackers to get access and gain control of your account. It's sometimes known as two-factor authentication.
Why MFA?
❗Read here for more information about how the University is using MFA to protect your digital privacy here:
💻https://servicedesk.roehampton.ac.uk/support/solutions/articles/50000163855
How Does It Work?
With MFA, you will need to provide an additional verification method to prove you have access to a trusted device. When logging into company online resources, you will still have to enter your username and password as normal. Then, you may also need to prove that you have access to a trusted device/phone that you previously registered. Only after completing the additional verification step using your trusted device will you be granted access.
Enabling MFA
-
❗ We strongly recommend that you provide as many verification options as you can. For example, your mobile phone number, your personal email address, and additional security questions. If you have multiple verification options set up, you will have additional options to get back into your account if you are unable to use the authenticator app.
You will need to choose the Microsoft Authenticator app as the default method you will use to verify your account. We recommend using the app as it will allow you to simply tap “Approve” once you receive a mobile notification. In addition to being the most secure method, the Microsoft Authenticator app can also allow you to get a verification code even if the device is not connected to a mobile network.
You will need to download and install the Microsoft Authenticator app (available for Android and iOS) on your mobile device.
The following procedure explains how to set up MFA using the authenticator app.
On your PC / Laptop
On your Mobile Device
Step 1: Open your Web Browser and visit this URL:
Step 2: Enter or select your account information and click the Next button.
When prompted for “More information required” click the Next button:
Step 3: Click the Next button to use this default method.
Step 3: Install the Microsoft Authenticator app on your Mobile Device.
For Android, scan the QR code or 💻click here
For Apple, scan the QR code or 💻 click here.
❗Further information can be found here:
💻 https://support.microsoft.com/en-gb/account-billing/download-and-install-the-microsoft-authenticator-app-351498fc-850a-45da-b7b6-27e523b8702a
Step 4: Click the Next button.
Step 5: Once you have reached this page leave it open on your screen and pick up your mobile device.
Step 5: Open the Microsoft Authenticator on your mobile device:
If this is the first time you've used the authenticator app, select I agree button.
If you've used or opened the application before, select Add Account OR press the + button.
If this is the first time you've used the Authenticator app...
1. Select the "I agree" button
2. Select Scan a QR code
If you see the message “Authenticator" Would Like to access your Camera press the OK button.
If you've used or opened the Authenticator app before...
1. Select "Add Account" or press the + button.
2. Select Work or school account
3. Select Scan a QR code
If you see the message “Authenticator" Would Like to access your Camera press the OK button.
Setup continues...
On your PC / Laptop
On your Mobile Device
The "Scan QR Code" function in the Authenticator App will now open.
Point your camera at your desktop or laptop computer
to scan the code that appears there.
❗ Please do not scan the code shown in this document! ❗
You must scan the code that is shown on your own computer screen.
Once you have scanned the code, click Next.
When you see the message “Authenticator” Would Like you to send Notifications select the ALLOW button.
After a moment, your web page should continue to complete the login process.
A notification screen will open asking you to Approve sign in.
Select Approve.
Once you have approved the notification, click Next
You have now successfully registered for MFA via the Microsoft Authenticator app 😊
Adding Additional Sign-in Methods
If you want to add another device which has the authenticator app installed, you can do this
...and in either scenario select Authenticator App and follow the steps above.
Working with MFA
Log in with your username and password as normal.
The next screen will notify you that a notification has been sent to your mobile device to approve your sign-in by entering the number shown provided on screen.
❗Be careful not to press "No, it's not me" as that can lock your account. Only press that option if you see it when you are not trying to sign in to anything.
On your mobile device, a notification will appear in the notification panel from the Microsoft Authenticator app asking you to approve the sign-in. open the approval and enter number and click Yes
You have now successfully signed into your account.
On your PC / Laptop
On your Mobile Device
Further advice and information can be found here:
💻 MFA Troubleshooting Guide
💻 Registering for MFA while abroad