About Multi-Factor Authentication

Overview

Multi-factor authentication (MFA) helps protect your University account by verifying that it’s really you signing in. MFA is required for all University Microsoft 365 accounts and protects access to MavMAIL, D2L Brightspace, Workday, Zoom, and other connected University services.

Microsoft Authenticator is our recommended method. Other options are available, including methods that do not require a personal phone. 

Always set up more than one MFA method so you have another way to sign in if your usual method is unavailable.

Text and Phone Call MFA Is Going Away

Microsoft is ending support for text message and phone call MFA methods for University accounts. If you rely on text messages or phone calls, set up another method now to avoid sign-in delays or additional setup when you need access.

• First-time setup and MFA resets: Text messages and phone calls are no longer offered. Choose another method below.
• Existing users: Text message and phone call MFA will end on February 1, 2027.

Choose an MFA Method

Always set up more than one MFA method. Choose methods that cover everywhere you access University services, including your work or school computer, Outlook on your phone, and lab or classroom computers.

A method set up on one device may not cover sign-ins on another. Having another method also helps you access your account if your usual device is lost, replaced, or unavailable.

Recommended Method: Microsoft Authenticator

Use the Microsoft Authenticator app on a compatible phone or tablet to verify sign-ins to your University account across your devices. Keep your phone or tablet with you when you need to sign in. Follow Setting Up Microsoft Authenticator for Your University Account to get started.

Other Available Methods

You can use these methods instead of Microsoft Authenticator or as an additional way to sign in. Some work only on a specific device, so choose methods that cover where you access University services.

• Windows Hello - convenient sign-ins on a Windows computer
  • Use a fingerprint, facial recognition, or PIN directly on a compatible University-issued or personally owned computer.
  • Works only on the computer where you set it up. Set it up separately on each personal or assigned computer where you want to use it. Use another method for sign-ins on your phone or shared computers.
    1. If needed, set up Windows Hello on your computer.
    2. Add a Windows Hello passkey to your University account.
• Apple Passwords - convenient sign-ins on compatible Apple devices
  • Use a passkey saved in Apple Passwords on a compatible Apple device. Verify with Touch ID, Face ID, or your device’s passcode or password, as available.
  • For University accounts, Apple Passwords can verify sign-ins only on the device you are using. You cannot use your iPhone to approve a sign-in on another computer. Add another method, such as Microsoft Authenticator or a compatible USB security key, for lab, classroom, and other shared computers.
    1. Follow Microsoft’s passkey instructions. Choose the Work/school account section and save the passkey in Apple Passwords or iCloud Keychain when prompted.
    2. If needed, turn on iCloud Passwords & Keychain.
• Google Password Manager - student accounts only
  Use a saved passkey on a compatible computer, phone, or tablet. See Google’s device requirements and passkey guidance and Microsoft’s work or school passkey instructions.
• USB security key - connects to your computer
  Use a compatible physical key. Departments purchase approved biometric keys for employees; students purchase compatible FIDO2 keys at their own expense. USB Security Keys for MFA: Models, Purchasing, and Setup

Student accounts may allow additional authenticator apps and password managers beyond those listed. Contact the IT Solutions Center if you need help with another method.

Getting Started and Managing MFA

• First-time setup or MFA reset: Follow the prompts during sign-in. See Setting Up MFA for the First Time.
• Adding or updating a method: View or change your account security info.
• Replacing a phone or computer: Make sure you have another working way to verify sign-ins before replacing or resetting your old device.

Help with MFA Problems

• Lost or unavailable device: Try another method you previously added. If you cannot sign in, contact the IT Solutions Center directly.
• Notifications or verification codes not working: See MFA troubleshooting guidance.
• Traveling or without cell service: See using Microsoft Authenticator without cell service.
• Unexpected verification request: Deny it. Never approve a sign-in you did not initiate or share your password or verification codes.

Accessibility and Exceptions

If an accessibility need or another significant barrier prevents you from using the available methods, submit an MFA exception request. Requests are reviewed individually. Do not include medical details. If you cannot sign in to submit the form, contact the IT Solutions Center directly.

Get Help

Request MFA assistance for help choosing, setting up, or using an MFA method. Unable to sign in? Visit the IT Solutions Center page for contact information, support locations, and current hours.