MFA: Automatic Enrollment: Android - Microsoft Authenticator App

Topic

Multifactor authentication Automatic Enrollment Instructions: Android - Microsoft Authenticator applicator 

Environment (Products involved such as e.g. hardware, software, network)

Multifactor authentication , Android, Application

Resolution or Steps

What you will need before you begin Multifactor authentication set up:

Note: If you are not a new student or have not been notified of having a compromised account you will need to use Multifactor authentication Self-Enrollment instructions to set up Multifactor authentication rather than using instructions provided below.

  1. Immediate access to the Phone you will select for your preferred verification option
  2. A Computer with Internet connectivity
  • Please note: If you are both employee and student, you will need to set up Multifactor authentication on both your employee and student accounts. The Microsoft Authenticator application can support multiple accounts.  
  • If you are employed or take classes at multiple Minnesota State University / Colleges you only need to do this once per employee/student account.

Steps:

  • Note: Illustrations and instructions may vary slightly.
  • Step 1) On your Android phone:
    • a)  Go to the Play Store.
    • b)  Perform search for "Microsoft Authenticator". Install, then Open app.
    • (you may be prompted to enter your Google login)

“Composite image showing steps to install the Microsoft Authenticator app from the Google Play Store. The Google Play Store icon appears on the left. A phone screen shows the search bar with the text ‘microsoft authenticator.’ Search results display the Microsoft Authenticator app with the text ‘Microsoft Authenticator,’ ‘Microsoft Corporation,’ ‘4.7★,’ ‘100M+ downloads,’ and an ‘Install’ button highlighted. A follow‑up screen shows the same app with an ‘Open’ button highlighted.”

  • Step 2) Add Work or school account: 
    • a)  Select Ok to the Data Privacy notification.
    • b)  Select Skip if prompted to Add Personal Account or Add Non-Microsoft Account
    • c)  Select Add Account
    • d)  Select Work or school account.

“Screen titled ‘Add account’ with the question ‘What kind of account are you adding?’ showing three options: ‘Personal account,’ ‘Work or school account’ highlighted with a red box, and ‘Other account (Google, Facebook, etc.).’ Each option has a corresponding icon.”

  • Step 3) Tap Allow to, "Allow Authenticator to take pictures and record video?" prompt.
    • Your phone will be ready to scan or manually enter the QR code (displayed in step 6).
    • Set your phone down and proceed to Step 4.
  • Step 4) Switch to your computer:
    • a)  Browse to the Additional security verification page.
    • b)  Sign in with your username and password:
    • c)  Click Next on the prompt More information required.
      • Please note, If you are both employee and student, you will need to set up Multifactor authentication on both your employee and student accounts. The Microsoft Authenticator application can support multiple accounts.  
      • If you are employed or take classes at multiple Minnesota State University / Colleges you only need to do this once per employee/student account.
  • Step 5) Displayed on your computer, on the Additional security verification page:
    • a)  Under, How do you want to use the mobile app?:
      • Select Mobile app from the drop down selection
    • b)  Select a verification method:
      • Receive notifications for verification (recommended - one-tap approval)
      • Use verification code (this option continually generates a verification code sent to your phone which you will need to accurately enter for verification).
    • Note, before you click Set up, the next screen will display a Quick-response code; this Quick-response code is time-sensitive, so be ready to scan the Quick-response code with your phone.
    • c)  Click Setup
  • Step 6) On your phone:
    • Scan the Quick-response code, displayed on your computer, using your phone.

“Composite image showing the ‘Additional security verification’ webpage with the text ‘Step 1: How should we contact you?’ and a highlighted ‘Set up’ button. Next to it, a photo of a hand holding a phone displaying a QR code. An arrow points from the phone to a computer monitor on the right that shows a webpage with a large QR code and a blue ‘Next’ button below it.”

  • After the Quick-response code has been scanned, Minnesota State Colleges and Universities and your account will display on your phone.

“Screen showing an account labeled ‘MNSCU’ with an ID‑card icon on the left and a blurred email address ending in ‘@go.minnstate.edu.’”

  • Step 7) On your computer, on the Additional security information window:
    • Click Next. Displayed will be Step 2: Let’s make sure that we can reach you on your Mobile App device
    • Note: If you have set up a Pin or biometric face/fingerprint to access your phone, you may be prompted for this to proceed.

“Composite image showing examples of phone security prompts. On the left, a blue screen displays a lock icon with the text ‘Authenticator locked’ and a button labeled ‘UNLOCK.’ In the center and right, gray pop‑up screens show the message ‘Enter your screen lock to access “Authenticator”’ with subtext ‘Please unlock to proceed,’ and fields labeled ‘Enter your current PIN’ or options such as ‘USE PIN’ and ‘Cancel.’ A heading above reads: ‘Examples: Prompt for entry of your phone PIN or biometrics used to access your phone (graphics may vary).’”

  • Step 8) On your phone the Authenticator app will prompt you for approval or display a verification code:
    • If you selected – Receive notification for verification:
      • Select Approve prompted on your phone
    • If you selected – Use verification code:
      • On your computer, enter the verification code received on your phone, then click Verify
  • Step 9) On your computer, on the Additional security verification page:
    • a)  A prompt to "Secure your account by adding phone verification to your password" and "Step 2: In case you lose access to the mobile app" will be displayed.
    • b)  The phone number you enter should be a different number other than your mobile device; this is to help ensure you are not locked out of your account in the event you do not have immediate access to your primary phone, your battery is dead, your primary device is lost, stolen or damaged or you get a new phone or number.
      • Consider using a spouse or trusted family member’s phone as the added back-up phone number (i.e. the "added phone verification to your password").
      • Note: This added phone number will not be called for validation during this set up process.
    • c)  Select country and ensure you have entered the correct phone number before clicking Done.

Your account is now set with Multifactor authentication protection.

If you need assistance with Multifactor authentication please contact Information Technology Service Desk.

Please Note:

  • Should you encounter “Allow my organization to manage my device” it is recommended Not to select this option.

“Screen section with the heading ‘Use this account everywhere on your device.’ Below it is text explaining that Windows will remember your account to make sign‑in easier and that you may need to allow the organization to manage certain settings. A checkbox option reads ‘Allow my organization to manage my device.’”

  • None of your personal data is stored from any phone device you select for Multifactor authentication set up even with the authenticator app. Its only purpose is to authenticate and it cannot store data.
 
Was this helpful?
78% helpful - 9 reviews
Print Article