MFA: Self-Enrollment: Android - Microsoft Authenticator App

Topic

Multi-Factor Authentication Self-Enrollment Instructions: Android - Microsoft Authenticator application 

Environment (Products involved such as e.g. hardware, software, network)

Multi-Factor Authentication , Android , Enrollment 

Resolution or Steps

Please Note:

  • Should you encounter “Allow my organization to manage my device” it is recommended Not to select this option.

“Screen titled ‘Use this account everywhere on your device.’ Text explains that Windows will remember the account to make signing in easier and may require allowing the organization to manage certain settings. A checkbox option reads ‘Allow my organization to manage my device.’”

  • None of your personal data is stored from any phone device you select for Multi-Factor Authentication set up even with the authenticator application. Its only purpose is to authenticate and it cannot store data.

What you will need before you begin Multi-Factor Authentication set up:

Note: If you are a new student or have been notified of having a compromised account you will need to use Multi-Factor Authentication Automatic-Enrollment instructions to set up Multi-Factor Authentication rather than using instructions provided below.

  1. Immediate access to the Phone you will select for your preferred verification option
  2. A Computer with Internet connectivity

Please note: If you are both employee and student, you will need to set up Multi-Factor Authentication  on both your employee and student accounts. The Microsoft Authenticator application can support multiple accounts.  

If you are employed or take classes at multiple Minnesota State University / Colleges you only need to do this once per employee/student account.

Steps:

  • Note: Illustrations and instructions may vary slightly.
  • Step 1) On your Android phone:
    • a)  Go to the Play Store.
    • b)  Perform search for "Microsoft Authenticator". Install, then Open app.
    • (you may be prompted to enter your Google login)

“Composite image showing steps to install the Microsoft Authenticator app from the Google Play Store. On the left is the Google Play Store icon. The main phone screen shows a search for ‘microsoft authenticator,’ with the Microsoft Authenticator app listed. A pop‑up displays the app page with the buttons ‘Install’ and later ‘Open.’ The app information shows ‘Microsoft Authenticator,’ ‘Microsoft Corporation,’ rating ‘4.7★,’ ‘124K reviews,’ and ‘10M+ downloads.’ The ‘Install’ and ‘Open’ buttons are highlighted.”

  • Step 2) Add Work or school account: 
    • a)  Select Ok to the Data Privacy notification.
    • b)  Select Skip if prompted to Add Personal Account or Add Non-Microsoft Account
    • c)  Select Add Account
    • d)  Select Work or school account.

“Screen titled ‘Add account.’ The question ‘What kind of account are you adding?’ appears above three options: ‘Personal account,’ ‘Work or school account’ highlighted with a red box, and ‘Other account (Google, Facebook, etc.).’ Each option has an icon and an information button.”

  • Step 3) Tap Allow to, "Allow Authenticator to take pictures and record video?" prompt.
    • Your phone will be ready to scan or manually enter the QR code (displayed in step 8).
    • Set your phone down.
  • Important note:
    • Once you click on the Minnesota State button Enable Multi Factor Authentication outlined in the next step (Step 4), you will need to complete Multi-Factor Authentication set up before you will be able to access your email and other Minnesota State Office 365 connected services. If you cancel or do not complete the set up, you will not be able to access these services until Multi-Factor Authentication is successfully set up.
  • Step 4) Switch to your computer:
“Panel with a blue checkmark icon and the heading ‘Your account is now enabled for MFA.’ Below it is text instructing the user to sign out and sign in again to complete MFA setup, with a help link for troubleshooting. At the top left is a green button labeled ‘Enable Multi‑Factor Authentication.’ An arrow points to text on the right that reads: ‘Once you click this button you will need to complete set up of MFA before you will be able to access your email and other Minnesota State O365‑connected services.’”
  • c)  It will then display Your account is now enabled for Multi-Factor Authentication and offers the link to:
  • d)  browse or click here: https://aka.ms/mfasetup to continue Multi-Factor Authentication  set up.
  • Step 5) Sign in with your username and password:
    • Employee username: StarID@minnstate.edu
    • Student username: StarID@go.minnstate.edu
    • Click Next on the prompt More information required.
      • Please note, If you are both employee and student, you will need to set up Multi-Factor Authentication on both your employee and student accounts. The Microsoft Authenticator application can support multiple accounts.  
      • If you are employed or take classes at multiple Minnesota State University / Colleges you only need to do this once per employee/student account.
  • Step 6) Once logged in, it will say More information required. Click Next.
  • Step 7) Displayed on your computer, on the Additional security verification page:
    • a)  Under, How do you want to use the mobile app?:
      • Select Mobile app from the drop down selection
    • b)  Select a verification method:
      • Receive notifications for verification (recommended - one-tap approval)
      • Use verification code (this option continually generates a verification code sent to your phone which you will need to accurately enter for verification).
    • Note, before you click Set up, the next screen will display a Quick Response code; this Quick Response code is time-sensitive, so be ready to scan the Quick Response code with your phone.
    • c)  Click Setup
  • Step 8) On your phone:
    • Scan the Quick Response code, displayed on your computer, using your phone.

“Composite image showing steps for mobile app setup in the Microsoft ‘Additional security verification’ process. On the left, the screen displays ‘Step 1: How should we contact you?’ with ‘Mobile app’ selected and the option ‘Receive notifications for verification’ checked. A blue ‘Set up’ button is highlighted. In the center, a phone screen shows a ‘Configure mobile app’ page with a QR code. On the right, a computer monitor shows the same ‘Configure mobile app’ page with a large QR code and a ‘Next’ button. A red arrow points from the phone’s QR code to the QR code on the computer screen.”

  • After the Quick Response code has been scanned, Minnesota State Colleges and Universities and your account will display on your phone.

“Account entry labeled ‘MNSCU’ with an ID‑card icon on the left and a blurred email address ending in ‘@go.minnstate.edu.’”

  • Step 9) On your computer, on the Additional security information window:
    • Click Next. Displayed will be Step 2: Let’s make sure that we can reach you on your Mobile App device
    • Note: If you have set up a Pin or biometric face/fingerprint to access your phone, you may be prompted for this to proceed.

“Composite image showing examples of security prompts for accessing the Authenticator app. On the left, a blue screen displays a lock icon with the text ‘Authenticator locked’ and a button labeled ‘UNLOCK.’ In the center, a prompt reads: ‘Enter your screen lock to access “Authenticator.” Please unlock to proceed. Enter your current PIN.’ with ‘Cancel’ and ‘Continue’ buttons. On the right, a similar prompt shows a fingerprint icon with the text ‘Enter your screen lock to access “Authenticator.” Please unlock to proceed,’ and a ‘USE PIN’ option. A heading above reads: ‘Examples: Prompt for entry of your phone PIN or biometrics used to access your phone (graphics may vary).’”

  • Step 10) On your phone the Authenticator app will prompt you for approval or display a verification code:
    • If you selected – Receive notification for verification:
      • Select Approve prompted on your phone
    • If you selected – Use verification code:
      • On your computer, enter the verification code received on your phone, then click Verify
  • Step 11) On your computer, on the Additional security verification page:
    • a)  A prompt to "Secure your account by adding phone verification to your password" and "Step 2: In case you lose access to the mobile app" will be displayed.
    • b)  The phone number you enter should be a different number other than your mobile device; this is to help ensure you are not locked out of your account in the event you do not have immediate access to your primary phone, your battery is dead, your primary device is lost, stolen or damaged or you get a new phone or number.
      • Consider using a spouse or trusted family member’s phone as the added back-up phone number (i.e. the "added phone verification to your password").
      • Note: This added phone number will not be called for validation during this set up process.
    • c)  Select country and ensure you have entered the correct phone number before clicking Done.

Your account is now set with Multi-Factor Authentication protection.

If you need assistance with Multi-Factor Authentication please contact Information Technology Service Desk.

Information Security:

What should I do when I get a verification request I don’t recognize?

If you receive approval requests for access to your Office 365 and you are not actively signing in to Minnesota State Office 365 connected applications (in other words you did not just attempt to log in to your Office 365 account using your Minnesota State Office 365 login credentials) then deny the access.

Stay Vigilant:

  • You will not be prompted by Multi-Factor Authentication without your attempt to log in. Multi-Factor Authentication verification will never prompt you first. Do not approve or take action on any prompts if you are not logging into your account.
  • No one, including Information Technology Services, Metropolitan State University, Minnesota State Colleges or Universities, or other entities which may appear to be related, will ever contact or prompt you to ask you to “approve” an Multi-Factor Authentication notification or ask for a verification code.  
  • Do not press # key for verification or enter verification code if you receive a voice call on your mobile device, office, or alternate phone. Ensure your spouse or trusted family doesn’t automatically enter the key(s) without checking with you first.

Resources

Additional Resources:

Was this helpful?
0 reviews
Print Article