What is Multi-Factor Authentication?
A debit card and pin code are perfect examples of MFA! Your card pin code is something you know, while the bank debit card is something you have. In order to withdraw money from your account at the ATM, you need both methods of authentication, therefore, we have Mutli-Factor Authentication!
To achieve MFA with our Microsoft Company accounts, we will need to set up our mobile phones with the Microsoft Authenticator app and verify this app is working correctly.
Setting Up Microsoft Authenticator for the First Time
If this is your first time logging in to your new computer or new Company Microsoft account, you will be immediately greeted by a Set Up Authenticator Prompt.
You will need your Phone for this setup, as well as the computer or other device you are using to sign in to your account with.
See a video of this process instead of reading!
If you are setting this up for the first time and you’re not being immediately prompted, open your internet browser and navigate to: https://aka.ms/mfasetup
If you have already set this up once before and you got a new phone, skip to the Managing Previously held Authentication Methods section of this article.
Let’s start by Downloading the Microsoft Authenticator to our Mobile Phones.
Microsoft Authenticator Android
Once the app is downloaded and installed on your phone, you will need to:
- Accept the App Terms and Conditions of the App
- Allow Permissions to access and send Notifications
- Allow permissions to use Camera (for scanning the QR Code)
On the welcome screen of the app, select the option to Scan a QR Code
Once your camera is up and ready to scan, go back to your other device where you are trying to sign in. Select Next.
Select Next until you see a QR code appear.
Scan the QR Code with the Scan a QR Code Option in the Microsoft Authenticator App.
This step is successful when you see a code appear on your phone with your email listed.
Click Next on your Computer or other device, and follow the instructions. This step carries, but typically you will be asked to:
- Click a notification on your phone to “allow sign in”
- Select the right number displayed on your phone and computer screen
- Enter the code provided by the app on your phone to validate your sign-in.
You should now see a confirmation that the steps have been successful, and your Authenticator is ready to use.
Android Phones
Microsoft Authenticator Android
Advanced Permissions Settings for Android
On Android, the Authenticator app is a simple Authenticator app with a number of extra features. It allows you to add your other MFA codes and back them up to your Personal Microsoft account if you have one. It also doubles as a password manager, as well as a passkey manager.
Because of the way Android phones are set up, you may also need to download the Intune Company Portal App. This app will allow you to install other Microsoft Apps, managed by your organization such as Outlook, OneDrive, and others.
iPhones or other iOS devices
Advanced Permissions Settings for iOS
On iOS, the Authenticator app serves as both a simple Authenticator, as well as your company information broker app. The Microsoft Authenticator is all you need to install other applications such as Outlook and OneDrive.
My Company Microsoft Account & Security Info
You can find a lot of your personal account settings for your Company Microsoft Account by going to:
https://myaccount.microsoft.com
Alternatively, if you’re already signed in to Microsoft, you can find you account settings by clicking on your name in the top right
You can also find your account settings in Windows, by going to Settings > Accounts > Email & Accounts
From here you can set your profile picture, security info and authentication methods, locations, and more.
Security and Personal Info
Once you’re logged into Microsoft My Account Settings, click on the Security Info tab on the left.
Here you should see a list of authentication methods you have previously set up, and the option to set up new methods. You can also use this page to Sign Out of Everywhere in case you have lost one of your devices or believe your account may be compromised.
It is recommended to check this page every now and then to make sure your information, security methods and devices are up to date.
Managing Previously held Authentication Methods
In the Security Info Tab, select Add sign-in method. Choose a method you would like to add, and follow the instructions on screen to register the method.
Remove or Delete any authentication methods you no longer use to ensure your account is safe.
