Overview
Multi-factor authentication (MFA) is required for University Microsoft 365 accounts. It adds an extra layer of security by requiring another form of verification when signing in, helping protect your account and University data from unauthorized access.
Microsoft Authenticator is the default authentication method. You can view your authentication settings at any time.
First-Time Setup for New Students and Employees
When signing in to your Microsoft 365 account for the first time, you'll be prompted to complete the MFA setup process using the Microsoft Authenticator app. If you need an alternative to using a mobile device, review the USB security key option below.
Notice: Text and Call Methods Ending February 2027
On February 1, 2027, Microsoft is ending support for text and phone call authentication methods on all accounts. These methods are less secure and more vulnerable to phishing attacks. The Microsoft Authenticator app will be the supported authentication method. It's more resistant to phishing, faster, and more private than using a phone number.
Text and Call Users, Action Needed
If you currently use text messages or phone calls to authenticate, take action now to avoid issues signing into your University account:
New Accounts
All new accounts will be guided to set up the Microsoft Authenticator app and unable to select text or call methods.
Using MFA Without a Mobile Device: USB Security Key
A compatible USB security key is an option for:
- Students who do not have a mobile device that can run Microsoft Authenticator.
- Faculty and staff who do not have a compatible mobile device or prefer not to use their personal mobile device for MFA.
View compatible USB security keys and purchasing information. Only the models listed in that article work with our system.
Exceptions for Multi-Factor Authentication
Exception requests may be considered when an accessibility need or another significant barrier prevents you from using either the Microsoft Authenticator app or a USB security key. Requests are reviewed on a case-by-case basis. A preference not to use the app or purchase a key does not qualify.
A dedicated exception request form is being developed. In the meantime, submit a general support request explaining the barriers you face with each option. You do not need to include medical details.
Troubleshooting
FAQ
Why are text and call authentication methods going away? What do I have to do?
On February 1, 2027, Microsoft is ending support for text and phone call authentication methods on all accounts because these methods are less secure. The Microsoft Authenticator app will be the supported authentication method. If you use text or call methods, follow the instructions to switch to the app.
I'm a new student or employee. How do I set up multi-factor authentication?
All new University accounts are automatically enrolled in multi-factor authentication. When signing in for the first time, you'll be prompted to complete the MFA setup process. Have a personal smart device and a computer handy.
I'm having issues setting up or using multi-factor authentication.
Contact the IT Solutions Center for support. Or, troubleshoot on your own:
Do I have to use a personal device?
No. Faculty and staff who prefer not to use a personal mobile device can use a compatible USB security key purchased by their department. Students who do not have a mobile device that can run Microsoft Authenticator may purchase a USB security key at their own expense.
Can I opt-out of multi-factor authentication?
Multi-factor is a critical security tool that protects your data as well as the data of our University. For special circumstances, such as an accessibility need, an exception request will be available. Requests will be reviewed on a case by case basis.
I lost my smartphone, how do I sign in?
If you lose your smartphone, contact the IT Solutions Center for help signing into your account. You should also immediately take steps to find and secure your device: Find, lock, or erase a lost Android device or Find a lost iPhone.
What happens if I get a new smartphone?
Follow the instructions to set up the Microsoft Authenticator app on your new device.
What should I do when I get a verification request I don’t recognize?
If you receive approval requests and you are not actively signing in to your University Microsoft 365 account, deny the access.
Remain vigilant and beware of phishing attempts and suspicious actors. The University, including IT Solutions, will never ask you for your StarID password, or prompt you to approve multi-factor authentication on your account.
What University apps and services use multi-factor authentication?
Any app that utilizes Microsoft 365 single sign-on, including all Microsoft 365 apps, may require authentication.
- Microsoft 365 apps
- D2L Brightspace
- Kaltura
- Workday
- Zoom
- Zoom Phone
- Wi-Fi Access
- The Fountain
- EZ Proxy
- And others
Still Need Help?
Visit the IT Solutions Center page to view current hours, locations, and contact information.