Multi-Factor Authentication

What is Multi-Factor Authentication?

Multi-Factor Authentication (MFA) is an additional step in the Office 365 login process that verifies your identity using a mobile device you own.

Multi-Factor Authentication or sometimes called two-step verification is a security feature that makes it more difficult for hackers to get access and gain control of your account. Threats from phishing scams, malicious software, and compromised passwords are increasing and pose an immediate risk to your privacy and the security of university data. MFA will help mitigate these threats.

Using MFA is like using your debit card at an ATM to get cash. To get cash, you must have your debit card and know your PIN number. MFA combines something you know (your password) with something you have (your phone, a key fob, etc.). You may already be using MFA to protect online services such as Gmail or Facebook.

Prerequisites

To register for MFA you need one of the following:

Android or iOS device
Any other mobile phone

Setting up Authenticator App

There are TWO options for using Microsoft's Authenticator App:

Option A – Receive a notification through the app that a login is being attempted; the user must confirm or deny the attempt
Option B – Open the authenticator app and enter a rotating, self-expiring code into the web page from the app

Open a web browser and navigate to https://portal.office.com
Click "Sign In"
Use your full UWS email address as your username
Enter your UWS account password
You will see a screen asking for more information. If you do not, your account is not enrolled in MFA at this time. Please contact the UWS Service Desk to request MFA enrollment

Click "Next"
On the next screen, follow the instructions to download the authenticator app

Select the option you would like to configure
1. Option A: Click "Next"
2. Option B: Select "I want to use a different authenticator app"
Click "Next"
Open the app and add a new account
Scan the QR code on the website

Click "Next"
1. If you chose Option A, your phone should display a message asking you to approve the sign in
2. If you chose Option B, your computer will prompt you to enter a code from the app. Launch the authenticator app, and select your uws.edu account. You will see a six–digit code that you will enter into your computer before the countdown expires (generating a new code).
Validate your setup by approving the app notification or entering the six-digit code found in the app.

Select "Done" or continue to configure email for self-service password reset.

Note: If you experience issues following these instructions, please reinstall the Authenticator app. Make sure to acknowledge any prompts to turn on notifications.

Updating MFA

Got to office.com and log in as normal.
Once on the office homepage you will click you initials in the top right and select View Account

3. You will then click the Security info tab on the far left.

4. On the Security info page you will see all of your MFA methods for your account. You will then click Add sign-in method.

5. A menu should appear that asks you to Choose a method, you will select Authenticator App and click Add.

6. Another menu will open asking you to install Microsoft authenticator for Android you can go to the play store and for IOS you can go to the Apple store and search up Microsoft Authenticator. The app image should look the same as the one pictured on the menu option on your computer screen.

7. After you have the app downloaded go back to the computer screen and press next, and follow the prompts given. They will tell you how to set up the authenticator app. General steps provided below

1. You will need to get to the menu that says Scan the QR code on your PC

2. In the authenticator app from authenticator tab, tap the +, tap work or school account, and then tab scan QR code.

3. the camera should pop up, hold the phone camera up to the computer screen so that it can scan the QR code.

4. It will then prompt you to test the authentication. Do as it says on the screen. If you have notifications enabled you will see a pop up you can click that will let you type in the numbers.

Resources

Check out the below resources for additional assistance:

Microsoft - How to register for Azure Multi-Factor Authentication
NIST - Back to basics: Multi-Factor Authentication (MFA)