Setup for Multi-Factor Authentication (MFA)

Relevant to: SUNY Empire Faculty, Staff, Students

Introduction

Multi-factor authentication is an additional step in which a user is prompted during the sign-in process for a second form of identification.  It only takes a few minutes to setup and greatly increases the security of your account, while reducing the chances of having your account compromised.  Your password alone is not always secure and can easily be compromised.  When a second form of authentication is required, your security is greatly increased as this additional factor is not something a cyber attacker can obtain or duplicate. 

Table of Contents


Microsoft Authenticator Number Matching Security Feature

The number matching security feature will be included as a default when using the Microsoft Authenticator App or going through a self-service password reset.  This feature requires users to type a number displayed on the screen to complete the authentication process. Doing so helps prevent accidental approvals and provides additional protection. 

When you respond to an MFA push notification using the Authenticator app, you will be presented with a number. 

Uploaded Image (Thumbnail)

On your Authenicator App you will see a place to enter the two numbers and a map showing your sign-in location. If the location displayed does not match your actual geographic location, please select “No, it's not me” and refrain from proceeding with the sign-in.

Uploaded Image (Thumbnail)

This feature is designed to help you quickly identify and prevent unauthorized access to your account by malicious actors. The map reflects the location of your internet service provider. For instance, if you are connecting from Saratoga, the map might show Schenectady, but if the location displayed is California, it indicates a potential threat. 


Setting up Multi-factor Authentication Using:

Microsoft Authenticator App (by scanning a QR Code on your computer)

Video Tutorial:  MFA QR Code

1. Install the Microsoft Authenticator App on your mobile phone.

· Download and install the Microsoft Authenticator app for AndroidiOS or Windows Phone.

*Please note: The Microsoft Authenticator app is a free app. If you are prompted for payment, please do not move forward with installation. Instead, go back to your app list to verify  that you are choosing the correct Microsoft Authenticator app and contact the SUNY Empire IT Service Desk if assistance is needed. 

 

2. Open a web browser on your computer and navigate to the Azure MFA setup page: https://aka.ms/mfasetup

· When prompted with the login window on your computer as shown below, you will enter your Empire State University username (full email address), then select Next to continue.

 

Microsoft Sign in prompt

 

· When brought to the page prompting you to Sign in with your organizational account, you will enter your SUNY Empire username (full email address), along with your current password, then select Sign In.  

 

                       Empire State University organizational account login prompt

 

            more info required message

3. Setting Up your Microsoft Authenticator App

                

· Since you have already installed the MFA app on your cell phone in step 1, you will select Next when prompted with the message below that will show on your computer screen.

                  Microsoft Authenticator App

 

· On your cell phone, select the option to Add Account.

· Then, Select the option for Work or School Account.

· Choose the option to scan QR Code. 

· You will then be presented with the following image on your computer screen that you will scan with your phone when prompted. (Similar to looking at an image with your phone camera.)

 

                           Microsoft Authenticator App QR Code  

 

 Note: iPhone users may have to enable the camera in Settings to scan.

*If you are unable to scan the QR code with your camera, there is an option to use a URL and a code. To use the URL and code method, click the "can't scan image" link on your computer, and it will display the URL and code you can enter in your Authenticator App on your mobile device. (Choose 'Enter Code manually' from the Authenticator app on your mobile device, then enter the URL and code that show on your computer screen in the fields provided.)

 

· After the QR Code is successfully scanned, you should receive a prompt on your phone.  After you select Approve, you will receive the following confirmation.

                  MFA Authenticator approval

 

 

 

Return to Top


Microsoft Authenticator App (with a pairing link in the mobile app)

 

Video Tutorial:  MFA Pairing Link

1. Install the Microsoft Authenticator App on your cell phone.

· Download and install the Microsoft Authenticator app for AndroidiOS or Windows Phone.

*Please note: The Microsoft Authenticator app is a free app. If you are prompted for payment, please do not move forward with installation. Instead, go back to your app list to verify  that you are choosing the correct Microsoft Authenticator app and contact the SUNY Empire IT Service Desk if assistance is needed. 

 

2. Open a web browser and navigate to the Azure MFA setup page: https://aka.ms/mfasetup

· When prompted with the login window on your mobile device as shown below, you will enter your Empire State University username (full email address), then select Next to continue.

 

Microsoft Sign in prompt

 

When brought to the page prompting you to Sign in with your organizational account, you will enter your SUNY Empire username (full email address), along with your current password, then select Sign In.  

 

                      Empire State University organizational account login prompt

 

              more info required message

3. Setting Up your MFA App

                

· Since you have already installed the MFA app on your cell phone in step 1, you will select Next when prompted with the message below that will show on your computer screen.

                    Microsoft Authenticator App

 

· On your cell phone, select the option to Add Account.

· Then, Click the link to 'Pair your account to the app ...'

MFA app setup on mobile

 

4. You will see an activation screen for a few short moments, then receive an approval prompt letting you know that your account has been successfully paired. 

 

                  mfa approve sign in on mobile

Return to Top


Phone Number (Text)

Video Tutorial:  MFA Text

1. Open a web browser and navigate to the MFA setup page: https://aka.ms/mfasetup

· When prompted with the login window on your computer as shown below, you will enter your Empire State University username (full email address) along with your current password and select Sign In.  

Microsoft Sign in prompt

  • If you are prompted with a screen that says More information required, select Next, then select I want to set up a different method as shown in the image below.

 

I want to set up a different MFA method

 

2. Select Phone from the dropdown menu and select Confirm.

                     choose phone as MFA option from dropdown

3. Enter a 10-digit phone numberclick the option next to Text me a code, then select Next.

           MFA text code option

4. You will receive a 6-digit verification code from Microsoft via text as shown below.

          MS verification text

5. Enter the verification code in the field provided and select Next. (If an invalid message displays, it may mean that it timed out. If so, you will want to choose the resend code option and try entering the new code once it has been received.)

         MFA verification code entry

6. Once you have successfully entered and confirmed the verification code, you will receive a confirmation message as shown below.

       SMS verification notice

 

Return to Top


Phone Number (Phone Call)

Video Tutorial:  MFA Phone Call

1. Open a web browser and navigate to the MFA setup page: https://aka.ms/mfasetup

· When prompted with the login window on your computer as shown below, you will enter your Empire State University username (full email address) along with your current password and select Sign In.  

Microsoft Sign in prompt

  • If you are prompted with a screen that says More information required, select Next, then select I want to set up a different method as shown in the image below.

 

I want to set up a different MFA method

 

2. Select Phone from the dropdown menu and select Confirm.

            choose phone as MFA option from dropdown

 

3. Enter a 10-digit phone numberclick the option next to Call me, then select Next.

            entering 10 digit phone number for MFA setup

4. You should now receive a call to the phone number that you have chosen to use for your Multi-Factor Authentication and prompted to press a designated key to confirm your account.

            MFA call in progress

5. Once confirmed, you will see the following message displayed.

     MFA phone call confirmation

 

Return to Top


Authenticator Web Browser Extension

Please Note: The link below will open to a separate Knowledge Article.

Authenticator Web Browser Extension

Return to Top


Setting, Adding, or Updating Your Authentication Default Method

Video Tutorial:  MFA Change or Add Method

1. Navigate to https://aka.ms/mfasetup and log in using your university credentials

2. Select the Change option located next to Default sign-in method and choose from the list of options.

        Change MFA default method

3. If you would like to add an additional method, which is strongly suggested, select the Add method option and choose the method that you would like to add.

*From this same page, you can also add an external email address which will add another option to allow you to use Self Service Password Reset if needed.

      

4. You will receive a call, text, or approval message from the app to confirm that the method has been updated and working properly.

Return to Top


MFA authentication method Video Series

Please Note: The link below will open to Learnscape in a new window. 

Learnscape Video Channel

Return to Top


Frequently Asked Questions

Please Note: The link below will open a webpage in a new window.

Multi-Factor Authentication FAQ

Return to Top