Enrolling in Microsoft Azure MFA

Description

Multi-factor authentication (MFA) protects you against hackers by sending a verification to your phone when you log into any online service requiring your OHIO email and password. With Azure MFA, you'll be notified if your password is compromised and someone is trying to log in as you. Everyone with an OHIO ID is required to enroll in Azure MFA to protect their sensitive information. The enrollment process takes approximately ten minutes and requires both a  computer and a phone.

• Don’t have a smartphone?

  • You can set up MFA with a call/text to a non-smartphone or request a physical device called a hardware token from OIT to authenticate.

Environment

PC, Mac, smartphone

Setting up Azure MFA

Note: The Microsoft Authenticator app is the recommended way to authenticate. This option is the most secure and works over Wi-Fi and mobile networks. If you don’t want to use the Microsoft Authenticator app, you can set your authentication method to a phone call or a passcode sent via text message (SMS). You’ll select your authentication method during setup.  

Step 1 (On your computer)

• Fill out the Azure Multi-Factor Authentication Enrollment Form .

• Then navigate to  myaccount.microsoft.com  and log in using your OHIO email address and password.  

• The following prompt may appear on your screen:

• If so, select Nextand you will be redirected to the Azure MFA enrollment page.
  

---

• Don't see this prompt?

  • On myaccount.microsoft.com, navigate to the  Security Info section

  • Select Update info >

  • Select + Add sign-in method.

  • In the  Choose a method  drop-down menu, select your desired authentication method. 

    • Authenticator app(recommended): 

      • Receive a notification on your smartphone/tablet to authenticate. 

    • Phone number: 

      •  Authenticate by answering a phone call and pushing the pound key, or by inputting a passcode sent via text message (SMS). 

  • Select the blue Addbutton.

---

• Important:  Select the jump link below corresponding to your preferred authentication method to continue setup instructions.  

  • Option 1: The Microsoft Authenticator smartphone appis my preferred method (recommended).  

  • Option 2: A phone call or a textis my preferred method. 

Option 1: The Microsoft Authenticator app is my preferred method

Step 2 (On your phone)

§ Download the free  Microsoft Authenticator mobile app on your smartphone. Keep this window open.

§ Open the app store on your device ( Apple  or  Android ). 

§ Search for the Microsoft Authenticator app published by Microsoft Corporation.

§ Download and open the Authenticator app.

Step 3 (On your computer)

• Select Nextin the setup prompt to continue setting up the app.

Step 4 (On your phone)

• Open the Microsoft Authenticator app.

• Select Acceptafter reviewing the privacy statement. 

• Select Continue. 

• Select Scan a QR code.

  

  • You may receive a notification prompting you to let the Authenticator app access your camera (iOS) or to allow the app to take pictures and record video (Android). Select  allow. You must allow so the app can scan the QR code. 

Step 5 (On your computer)

• Select Nextagain, and now you should be presented with a QR code.

Step 6 (On your phone)

• Scan the QR code using your phone, and your Ohio University account will be added to the app.

  • You may receive a pop-up that the Authenticator app would like to send you notifications. Select  Allow. 

• Your Ohio University account will be added to the app.

Step 7 (On your computer)

• Select Nextin the setup prompt.

• You’ll see a two-digit number on your computer screen.

Step 8 (On your phone)

• A notification will be sent to your phone.

• Select the notification to open the Authenticator app.

• In the Authenticator app, enter the two-digit number shown on your computer screen.

Step 9 (On your computer and using phone to answer the prompt)

• Select Nexton the computer screen.

• Add a phone number to verify your account. 

• Select how you would like to verify.

  • Text: You will receive a 6-digit code in a text message that you will enter on your computer.

  • Call: You will receive a phone call. Answer, and then press the pound # key.

Step 10 (On your computer)

• You have officially completed enrollment!

• Select Doneon your computer screen.  

Outcome: You have set up Azure MFA on your phone! Now, when you access any service that requires your OHIO email and password, you’ll be prompted to authenticate. Select Don't ask again for 90 days at any login screen to limit your authentication requests. You can also  turn off app lock to authenticate quicker. 

The authentication will be a two-digit number that appears on your device screen after entering your OHIO login credentials. Enter this number into your phone’s Microsoft Authenticator app to complete your login.

(Device screen - left, and phone screen - right)

IMPORTANT:If you use the campus virtual private network (VPN), you will need to install an Azure-compatible VPN. View installment instructions corresponding to your device.

---

Option 2: A phone call or SMS text message is my preferred method

Step 2 (On your computer)

• On the bottom of the setup page, choose I want to setup a different method.
  

• Under  Which method would you like to use , select Phone. (This is the only alternative to using the authenticator app.)
  

• Now you will select your country code on the drop-down menu. Enter your phone number to the right.

Step 3 (On your computer and using phone to answer the prompts)

• Select your verification method.

  • Text: You will receive a 6-digit code in a text message that you will enter on your computer.

  • Call: You will receive a phone call. Answer, and then press the pound # key.

• After verifying, you will be prompted to set up the Microsoft Authenticator app as a secondary verification method.

  • If you do not wish to set up the app, select  I want to set up a different method to use your email instead. 

    • Note: You can use your email for setting up Azure MFA, but you cannot use it to authenticate. 

      

• Select  email from the drop-down menu. 

  • Enter a non @ohio.edu email address for this step. 

• Open your non @ohio.edu email in a new tab and find the message containing the Azure code for verification. 

• In myaccount.microsoft.com (the web browser screen you navigated away from to go to your email), enter the verification code and select  Next.

Step 4 (On your Computer)

• You have officially completed enrollment!

• Select Doneon your computer screen. 

Outcome:You should now be set up to use Azure Multi-Factor Authentication! Now, when you access any online application that requires your OHIO login, you will be prompted to authenticate through a phone call or text message. You can select Don't ask again for 90 days at any single sign-on screen to limit your authentication requests.

IMPORTANT:If you use the campus virtual private network (VPN), you will need to install an Azure-compatible VPN.  View installment instructions corresponding to your device.

VPN installment instructions

If you would like to use the Ohio University virtual private network (VPN), you will need to install and use an Azure-compatible VPN. VPN is currently available to faculty and staff. Select the hyperlink below corresponding to your device's operating system for instructions. 

• Note: You cannot connect to campus VPN through a text message (SMS) or a hardware token. View instructions for changing your default authentication method to the Microsoft Authenticator appor a phone callto connect.

  • Accessing the VPN with Azure MFA: Windows

  • Accessing the VPN with Azure MFA: Mac OS

  • Accessing the VPN with Azure MFA: iOS devices

  • Accesing the VPN with Azure MFA: Android & ChromeOS

Get help from OIT

• Visit the Multi-Factor Authentication: Azure page to create a ticket.

• View all  Help & Resources: Multi-Factor Authentication: Azure .

Additional Resources

• After you enroll, please provide any feedback in the  Azure MFA Issues and Feedback Log . 

• View solutions for common troubleshooting issues with Azure MFA. 

• Enable “Remember me for 90 days” to limit authentication requests on any OHIO sign-in page. 

• Add an additional authentication method in case you are unable to access your primary device (recommended).  

• Disable app lock so you don't have to enter your phone's passcode info to open the Microsoft Authenticator app. 

• Learn how to use a one-time password code so you can authenticate even when your phone can’t connect to Wi-Fi or cellular data.

• Change your default authentication method  if desired. 

• Reactivate Azure  if you lose or need to reset your phone.