Relevant to: SUNY Empire Faculty, Staff, Students
Introduction
Multi-factor authentication is an additional step in which a user is prompted during the sign-in process for a second form of identification. It only takes a few minutes to setup and greatly increases the security of your account, while reducing the chances of having your account compromised. Your password alone is not always secure and can easily be compromised. When a second form of authentication is required, your security is greatly increased as this additional factor is not something a cyber attacker can obtain or duplicate.
Table of Contents
Microsoft Authenticator Number Matching Security Feature
The number matching security feature will be included as a default when using the Microsoft Authenticator App or going through a self-service password reset. This feature requires users to type a number displayed on the screen to complete the authentication process. Doing so helps prevent accidental approvals and provides additional protection.
When you respond to an MFA push notification using the Authenticator app, you will be presented with a number.
On your Authenicator App you will see a place to enter the two numbers and a map showing your sign-in location. If the location displayed does not match your actual geographic location, please select “No, it's not me” and refrain from proceeding with the sign-in.
This feature is designed to help you quickly identify and prevent unauthorized access to your account by malicious actors. The map reflects the location of your internet service provider. For instance, if you are connecting from Saratoga, the map might show Schenectady, but if the location displayed is California, it indicates a potential threat.
Setting up Multi-factor Authentication Using:
Microsoft Authenticator App (by scanning a QR Code on your computer)
Video Tutorial: MFA QR Code
1. Install the Microsoft Authenticator App on your mobile phone.
· Download and install the Microsoft Authenticator app for Android, iOS or Windows Phone.
*Please note: The Microsoft Authenticator app is a free app. If you are prompted for payment, please do not move forward with installation. Instead, go back to your app list to verify that you are choosing the correct Microsoft Authenticator app and contact the SUNY Empire IT Service Desk if assistance is needed.
2. Open a web browser on your computer and navigate to the Azure MFA setup page: https://aka.ms/mfasetup
· When prompted with the login window on your computer as shown below, you will enter your Empire State University username (full email address), then select Next to continue.
· When brought to the page prompting you to Sign in with your organizational account, you will enter your SUNY Empire username (full email address), along with your current password, then select Sign In.
3. Setting Up your Microsoft Authenticator App
· Since you have already installed the MFA app on your cell phone in step 1, you will select Next when prompted with the message below that will show on your computer screen.
· On your cell phone, select the option to Add Account.
· Then, Select the option for Work or School Account.
· Choose the option to scan QR Code.
· You will then be presented with the following image on your computer screen that you will scan with your phone when prompted. (Similar to looking at an image with your phone camera.)
Note: iPhone users may have to enable the camera in Settings to scan.
*If you are unable to scan the QR code with your camera, there is an option to use a URL and a code. To use the URL and code method, click the "can't scan image" link on your computer, and it will display the URL and code you can enter in your Authenticator App on your mobile device. (Choose 'Enter Code manually' from the Authenticator app on your mobile device, then enter the URL and code that show on your computer screen in the fields provided.)
· After the QR Code is successfully scanned, you should receive a prompt on your phone. After you select Approve, you will receive the following confirmation.
Return to Top
Microsoft Authenticator App (with a pairing link in the mobile app)
Video Tutorial: MFA Pairing Link
1. Install the Microsoft Authenticator App on your cell phone.
· Download and install the Microsoft Authenticator app for Android, iOS or Windows Phone.
*Please note: The Microsoft Authenticator app is a free app. If you are prompted for payment, please do not move forward with installation. Instead, go back to your app list to verify that you are choosing the correct Microsoft Authenticator app and contact the SUNY Empire IT Service Desk if assistance is needed.
2. Open a web browser and navigate to the Azure MFA setup page: https://aka.ms/mfasetup
· When prompted with the login window on your mobile device as shown below, you will enter your Empire State University username (full email address), then select Next to continue.
When brought to the page prompting you to Sign in with your organizational account, you will enter your SUNY Empire username (full email address), along with your current password, then select Sign In.
3. Setting Up your MFA App
· Since you have already installed the MFA app on your cell phone in step 1, you will select Next when prompted with the message below that will show on your computer screen.
· On your cell phone, select the option to Add Account.
· Then, Click the link to 'Pair your account to the app ...'
4. You will see an activation screen for a few short moments, then receive an approval prompt letting you know that your account has been successfully paired.
Return to Top
Phone Number (Text)
Video Tutorial: MFA Text
1. Open a web browser and navigate to the MFA setup page: https://aka.ms/mfasetup
· When prompted with the login window on your computer as shown below, you will enter your Empire State University username (full email address) along with your current password and select Sign In.
- If you are prompted with a screen that says More information required, select Next, then select I want to set up a different method as shown in the image below.
2. Select Phone from the dropdown menu and select Confirm.
3. Enter a 10-digit phone number, click the option next to Text me a code, then select Next.
4. You will receive a 6-digit verification code from Microsoft via text as shown below.
5. Enter the verification code in the field provided and select Next. (If an invalid message displays, it may mean that it timed out. If so, you will want to choose the resend code option and try entering the new code once it has been received.)
6. Once you have successfully entered and confirmed the verification code, you will receive a confirmation message as shown below.
Return to Top
Phone Number (Phone Call)
Video Tutorial: MFA Phone Call
1. Open a web browser and navigate to the MFA setup page: https://aka.ms/mfasetup
· When prompted with the login window on your computer as shown below, you will enter your Empire State University username (full email address) along with your current password and select Sign In.
- If you are prompted with a screen that says More information required, select Next, then select I want to set up a different method as shown in the image below.
2. Select Phone from the dropdown menu and select Confirm.
3. Enter a 10-digit phone number, click the option next to Call me, then select Next.
4. You should now receive a call to the phone number that you have chosen to use for your Multi-Factor Authentication and prompted to press a designated key to confirm your account.
5. Once confirmed, you will see the following message displayed.
Return to Top
Authenticator Web Browser Extension
Please Note: The link below will open to a separate Knowledge Article.
Authenticator Web Browser Extension
Return to Top
Setting, Adding, or Updating Your Authentication Default Method
Video Tutorial: MFA Change or Add Method
1. Navigate to https://aka.ms/mfasetup and log in using your university credentials
2. Select the Change option located next to Default sign-in method and choose from the list of options.
3. If you would like to add an additional method, which is strongly suggested, select the Add method option and choose the method that you would like to add.
*From this same page, you can also add an external email address which will add another option to allow you to use Self Service Password Reset if needed.
4. You will receive a call, text, or approval message from the app to confirm that the method has been updated and working properly.
Return to Top
MFA authentication method Video Series
Please Note: The link below will open to Learnscape in a new window.
Learnscape Video Channel
Return to Top
Frequently Asked Questions
Please Note: The link below will open a webpage in a new window.
Multi-Factor Authentication FAQ
Return to Top