The Microsoft Authenticator app in the app store is the preferred app for MFA authentication. It will use your phone’s security to verify you – which adds another layer of security. The Authenticator app can be set to unlock with my Face ID, and you must also authenticate to unlock your phone and activate the app.

 

Adding your cell phone number will set up both text messaging and calling to your mobile device. Cell phone is the preferred phone setup since you will have that phone with you and can get text/phone calls from the device.

 

Cell phone setup (text message and voice call)

  1. Sign into the MFA link https://mysignins.microsoft.com/security-info.
  2. Choose the link to + Add method
  3. Graphical user interface, text, application, email

Description automatically generated
  4. Choose Phone.
  5. Graphical user interface, text, application, email

Description automatically generated
  6. Graphical user interface, application

Description automatically generated
  7. If this phone is a mobile phone (recommended) enter your phone number and choose Text me a code. Click Next.
  8. Graphical user interface, text, application, email

Description automatically generated
  9. Enter the code in the box and click Next.
  10. Graphical user interface, text, application, email

Description automatically generated
  11. Click Done at the success screen.
  12. Graphical user interface, text, application, email

Description automatically generated

 

Microsoft Authenticator App

  1. Sign into the MFA link https://mysignins.microsoft.com/security-info.
  2. Choose the link to + Add method
  3. Graphical user interface, text, application, email

Description automatically generated
  4. Choose + Add method
  5. Select Authenticator app and then click Add.
  6. Graphical user interface, text, application

Description automatically generated
  7. You will see the wizard start. Click Next.
  8. Graphical user interface, text, application, email

Description automatically generated
  9. Your screen will display a QR Code. Stop here and perform the next steps on your cell phone.
  10. Graphical user interface, text, application

Description automatically generated
  11. On your mobile phone, download the Microsoft Authenticator app from your device’s app store.
  12. You can search for “Microsoft Authenticator” but be careful as advertised apps might show up before the right app in search results.
  13. A screenshot of a cell phone

Description automatically generated with medium confidence
  14. Agree to the license terms
  15. Allow notifications from this app if prompted.
  16. Add an account with the + button.
  17. Timeline

Description automatically generated
  18. Sign in with Microsoft Account. Choose Work or School account. If you are prompted for Work or Personal, choose Work.
  19. Graphical user interface, text, application

Description automatically generated
  20. Choose to Scan QR code
  21. Graphical user interface, text, application

Description automatically generated
  22. Choose Allow to permit the app to access your camera.
  23. Scan the code on your screen using your device camera.
  24. On your computer, click Next once the app has scanned the code.
  25. The app will try out the setup. You should see a notification on your phone from Microsoft Authenticator.
  26. Graphical user interface, text, application, email

Description automatically generated
  27. Click to approve the sign-in.
  28. Graphical user interface, website

Description automatically generated
  29. When everything works properly you will see the success message.

Text

Description automatically generated with medium confidence

 

Email setup

**We hear reports that email backup isn't working yet. This section will be revisited.


As a failsafe you can also set up a personal email address as a backup authentication method. You may need to authenticate to login to work email so don’t add your work email here.

  1. Sign into the MFA link https://mysignins.microsoft.com/security-info.
  2. Choose the link to + Add method
  3. Graphical user interface, text, application, email

Description automatically generated
  4. Choose email. Follow the prompts to enter your email address and verify the account.

Set your default authentication option

Now that you have more than one option for MFA authentication you should pick one to be the default.

  1. Click the Set default sign-in method.
  2. Graphical user interface, text, application

Description automatically generated
  3. Set your preferred option. The Default will be displayed on the screen now.
  4. Graphical user interface, text, application, email

Description automatically generated