Multi-Factor Authentication - Automatic Enrollment

Question

Have I been enrolled in MFA? How can I re-enroll now that my MFA has been reset by IT?

Overview

MNSU Multi-Factor Enrollment

If you see the message below when logging into Office 365 or Microsoft Office apps, you have been enrolled in Multi-Factor Authentication for additional security protections.  Please follow the instructions below to complete the setup process for Multi-Factor Authentication.

Multi-factor enrollment requires a customer to switch back and forth between a computer and their mobile device. Sections labeled Computer need to be performed on a laptop or desktop computer (Windows or macOS).  Sections labeled Mobile Device need to be performed on the mobile device (phone or tablet).

A mobile device (iPhone/iPad or Android phone/tablet) is required for the setup procedure below. An app called Microsoft Authenticator needs to be installed as the first step.

Faculty and Staff:

• This app DOES NOT transfer any data to Microsoft, Minnesota State, or Minnesota State University, Mankato
• This app DOES NOT give control of your device or data to Microsoft, Minnesota State, or Minnesota State University, Mankato
• Installing this app DOES NOT constitute government data under Minnesota State System Procedure 5.22.2 Cellular and Other Mobile Computing Devices

Multi-factor enrollment requires a customer to switch back and forth between a computer and their mobile device. Sections labeled Computer need to be performed on a laptop or desktop computer (Windows or macOS).  Sections labeled Mobile Device need to be performed on the mobile device (phone or tablet).

For a better understanding of this type of enrollment, please view the Video Tutorial

Mobile Device

1. Open the App Store (Apple iPhone / iPad) or Play Store (Android)
2. Search for and install Microsoft Authenticator

Computer

3. Click Next
4. Under Step 1: How should we contact you?
   1. Change the dropdown from Authentication phone to Mobile app
   2. Click the radio button that says Receive notifications for verifications

5. Click Set up
   1. A QR code will be displayed

Mobile Device

6. Open the Microsoft Authenticator app
7. Tap the three dots in the upper right corner
8. Tap Add Account and choose Work or School Account

9. Tap Scan a QR code
   1. Allow the app to use the camera if asked for permission

10. Hold the phone up to the computer screen to scan the QR code displayed
11. Close the Microsoft Authenticator app

Computer

12. Click Next
13. Click Next
    1. An approve/deny message will be sent to the mobile device configured above

Mobile Device

14. Tap Approve

Computer

15. Under Step 3
    1. Select the correct country code for your phone under the Select your country or region drop down
    2. Type in or verify the phone number to receive a phone call or text message as a backup in case the authenticator app is not functioning

16. Click Done

All future logins for Office 365 will now be required to use Multi-Factor authentication.  You will need your mobile device any time you are asked to login to Office 365 services to approve the login.  

If you see the Approve / Deny message on your mobile device, but were not logging in, click DENY

If you lose your mobile device or change mobile devices, please call the IT Solutions Center at 507-389-6654 for instructions on how to regain access to your Office 365 account.