How to use the Microsoft Authenticator App
Set-up instructions begin in the section below following the number matching update.
Important notes:
-
Users who use SMS text, a security token or other tools for MFA will not be impacted by this change.
-
Apple Watch will no longer be compatible with the Authenticator app, as a mobile device is now required to verify your identity.
For those who use alternate methods for the MFA approval process, this is a great time to consider switching to the Microsoft Authenticator app! It provides a more secure MFA process and is a simple and seamless experience. Read about MFA best practices.
Setting Up MFA Using the Microsoft Authenticator App
Follow the steps below to set up the Microsoft Authenticator App on your device.
On your computer, navigate to this webpage in a browser: https://aka.ms/mysecurityinfo
(Note: you may need to use the "skip for now" option to get to this page when it pops up with the prompt to set up MFA)
Sign into your UoG account if prompted, then select Add sign-in method. A new window will now appear. From the drop down menu, select Authenticator App and click Add.
Once you have the app downloaded, click Next on the computer to go to the following screen.
Open the app on your mobile device. Depending on the type of device, you may be prompted by a screen that says "We need your help to improve". You can choose to share your app usage data or not by tapping the checkbox, but you will need to select "Accept" in order to continue with the setup. You may also be prompted by a pop up to allow push notifications on your device. This will also need to be allowed as well.
The next screen on your phone will show three options for setting up your account (be aware that it may appear slightly different from what is shown below).
"Sign in with Microsoft"
"Add a work or school account"
"Scan a QR code" (alternatively it may say "Other Account")
Return to the computer and select Next once again, taking you to the following screen.
You will now see a screen that says "Scan the QR code" with an image of a QR Code. On your phone, select either "Scan a QR code" or "Add a work or school account", then select the option "Scan a QR code". If you are prompted to allow the app to access your camera, allow it to do so and scan the QR code. This will add your account on the phone. After the account is added, you will get a prompt on your phone letting you know that App Lock has been enabled. This means that in order to access the Authenticator App or approve sign-ins on your account, you will need to enter your device's password or use biometrics such as Face ID or Touch ID (if supported on your mobile device) first.
Select Next on the computer.
The next page will read "Lets try it out" and will send a login approval request to your phone. On the phone, you should get either a pop up, or a notification asking you to approve the sign in. Approve it, then enter your phone's password or biometrics. After this is done, click Next one last time on the computer.
Alternatively, if you prefer, you can also use the verification code on your Authenticator app should the approval notification not work for whatever reason. Simply click on your account on the main screen in the Authenticator app. There should then be a 6 digit code displayed (please note that the code changes every 30 seconds so you will need to check the code every time should you choose this method). Enter the code on the device you are trying to sign in with and it will sign you into your account.
You are now set up to use Multi Factor Authentication
You should now see "Microsoft Authenticator" on your accounts security information page. If you would like to add another sign-in method or edit those you already have, that can be done from the Security info page as well.
Should you have trouble following these steps or need further clarification, you can either take a look at our resources for Azure MFA enrolment page, and our MFA Frequently Asked Questions Page, or please reach out to the Help Centre at IThelp@uoguelph.ca or 519-824-4120 ext. 58888.