Multifactor Authentication Registration

Multifactor Authentication Registration

Multifactor Authentication Registration

When you log in to your computer using your username and password that is considered a single form of authentication.  Multifactor authentication requires you to provide at least a second form of authentication to verify your identity.

Requirements

In order to register for multifactor authentication, you will need to set up a second form of authentication.  The options available are:
​

  • The Microsoft Authenticator app
  • Phone (call or text)
Be prepared to provide any relevant information when registering.

Prompted Registration

Unless you have already registered your information in the My Profile portal, after your account is enabled for multifactor authentication, you will be prompted to register the next time you login.  It will look like this:



Click Next to proceed.

Microsoft Authenticator App

By default, when prompted to register for multifactor authentication, the system will try to get you to register the Microsoft Authenticator app.  This option is only available if you have a mobile phone.

To set up a different method, skip to the section Method Selection

To use this method, follow the instructions on the screen.  If you have a company-owned cell phone, that app is already installed on your phone, otherwise you will need to install it.  Click Next when ready.  


Remain on the Set up your account page while you set up the Microsoft Authenticator app on your mobile device.

Open the Microsoft Authenticator app on your phone, select to allow notifications (if prompted), select Add account from the Customize and control icon on the upper-right, and then select Work or school account.

Note: The first time you set up the Microsoft Authenticator app, you might receive a prompt asking whether to allow the app to access your camera (iOS) or to allow the app to take pictures and record video (Android). You must select Allow so the authenticator app can access your camera to take a picture of the QR code in the next step. If you don't allow the camera, you can still set up the authenticator app, but you'll need to add the code information manually.

Return to the Set up your account page on your computer, and then select Next. The Scan the QR code page appears.

Scan the provided code with the Microsoft Authenticator app QR code reader, which appeared on your mobile device after you created your work or school account in the previous step.

The authenticator app should successfully add your work or school account without requiring any additional information from you. However, if the QR code reader can't read the code, you can select Can't scan the QR code and manually enter the code and URL into the Microsoft Authenticator app.

Select Next on the Scan the QR code page on your computer. A notification is sent to the Microsoft Authenticator app on your mobile device, to test your account.



Approve the notification in the Microsoft Authenticator app, and then select Next. Your security info is updated to use the Microsoft Authenticator app by default to verify your identity when using two-step verification or password reset.




Method Selection

However, if you prefer, you can select I want to set up a different method, circled in the image below.




When you click that link you will have the option of choosing Phone, Email, or Security questions.  Phone is the only other option for multifactor authentication.  The other two methods can only be used for self-service password reset.

Phone

If you choose the phone option, enter the full 10-digit phone without any spaces.  You can then choose to have a text message sent (mobile phones only) or to call you (desktop or mobile phone).


Once you have successfully set up your authentication methods, you will see a summary page like the one shown below.


My Profile

If you want to change any of these settings or add additional authentication methods in case the one you set up might not be available, then you can go to this site to do that:

https://myprofile.microsoft.com





Adding Methods

On your 'my profile' portal (https://myprofile.microsoft.com), you can click on the “Security Info” link to see your list of authentication methods.





If you click “Add Method” you will get a list of options based on what you haven’t set up yet.  I recommend setting up at least 2 so you have some flexibility when the time comes to use these.




Now that you’ve registered, you will be able to login when prompted for a second form of authentication.  

Considerations When Getting a New Cell Phone

If you are planning on getting a new cell phone, regardless of whether it is a company owned one or personal, there are a couple things you'll want to verify and/or update first.


  • If you registered the Microsoft Authenticator app on your phone then you will want to remove it from the list of authentication methods before you get a new one.  This is especially important if it is set as your default authentication method.  After you get your new phone you can register the Authenticator app on that one and set it as the default if you like.
  • If your cell phone number is going to change and you have your current cell phone number registered, you should remove it from your list before you get a new one.  This is especially important if that is set as your default authentication method.  After you get your new phone you can register its number as an authentication method and set it as the default method if you like.



    • Related Articles

    • Self-Service Password Reset Registration

      Self-Service Password Reset Registration Requirements In order to register for the ability to reset a forgotten password you will need to set up at least two authentication methods. The options available are: The Microsoft Authenticator app Phone ...

    • New Hire Orientation

      The purpose of this document is to pick up from the point after initially logging into your system. In it we will discuss some of the basics of the systems that we use at CEI. You've just logged onto your system, we set a strong password, enabled ...

    • Windows Dynamic Lock

      What is it? With the advent of Multifactor Authentication(MFA) we now have the ability to use our cell phones to provide additional security for our PCs. Windows recently came out with a feature called Dynamic Lock which uses your phone both as a ...

    • Windows Hello for Business

      Quick Links Dynamic Lock Introduction In Windows 10, Windows Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device ...

    • How To Reset Your Password Using Self-Service Password Reset

      How To Reset Your Password On the login screen of your computer there is a new link that says “reset password”. When you click it, you’ll get prompted with this now-familiar screen you normally see when logging in: After you click ok, the password ...