Setting Up Multi-Factor Authentication For Office 365

Introduction

Office 365 is St. Cloud State's email and storage solution for all students and employees providing anytime, anywhere access to email, documents, contacts and calendar. Multi-factor Authentication (MFA) requires more than one method of verifying your identity to confirm that it is really you logging into your SCSU email/Office 365 account. This protects you and our SCSU community by preventing cybercriminals from accessing your account. Multi-factor authentication for your SCSU email/Office 365 account will confirm your identity by verifying something you know (your username & password) and something you have (a trusted device – such as a mobile phone).

More information about Office 365 multi-factor authentication can be found on the SCSU website: https://www.stcloudstate.edu/its/office-365/mfa.aspx

If you are unable to enroll into multi-factor authentication at this time, please contact our HuskyTech/IT department. Contact information for HuskyTech can be found online at https://www.stcloudstate.edu/its/huskytech/default.aspx

Instructions

1. Identify which devices/verification methods you will use for your multi-factor authentication, and keep those devices nearby so you can authenticate as needed. 
   • It is recommend to set up at least two different verification methods and, if at all possible, two different devices. 
   • Options for verification methods/devices are available on the Multi-Factor Authentication (MFA) for Office 365 Services knowledge base article. 
2. Log into Office 365 online at https://login.microsoftonline.com/?whr=minnstate.edu 
   • Students use your StarID@go.minnstate.edu and StarID password; faculty/staff use your StarID@minnstate.edu and StarID password 
3. You should be prompted with a screen that says "More Information Required". Click on the blue "Next" button.
   • If you do not see this screen, please sign out and sign back in at https://login.microsoftonline.com/?whr=minnstate.edu. If you still do not get a screen that says "More Information Required", please contact HuskyTech. 
4. The MFA Setup Wizard will appear. Complete the steps outlined below as prompted by the MFA Setup Wizard. If you have any issues with the MFA Setup Wizard, please contact HuskyTech. 

Step 1 of the MFA Setup Wizard will ask “How should we contact you?”

Click on the drop-down list that says “Authentication phone.”  You have three (3) main ways of setting up MFA, “Authentication phone,” “Office phone,” or “Mobile app.”  Select which method you prefer to initially use MFA.

NOTE: If you wish to use a Mobile app on your device that supports mobile apps, such as an iPhone or Android phone, we recommend you download and install the Microsoft Authenticator app, which can support other systems and services, such as your bank.

Authentication Phone

1. If you wish to use “Authentication phone,” enter your phone number and select the option to either have a text message or voice call to the number entered, then click “Next.”

1. If you selected “Send me a code by text message,” MFA will prompt you to enter the code sent to your device.  Enter the code and click “Verify.”

2. If you selected “Call me,” MFA will display “Verifying phone:  Answer it to continue.”  The incoming call will display “RESTRICTED.”  Answer the call, and follow the instructions of which key or keys to enter.

Office Phone

1. If you wish to use “Office phone,” enter your phone number then click “Next.”

2. MFA will display “Verifying phone:  Answer it to continue.”  The incoming call will display “RESTRICTED.”  Answer the call, and follow the instructions of which key or keys to enter.

Mobile app

• Android Authenticator App Installation Process 
• iPhone Authenticator App Installation Process 

1. Have MS Authenticator or a third-party app downloaded and installed on the mobile device you will be setting up Authenticator on.
2. To verify MFA with a notification approval, select “Receive notifications for verification,” the click “set up.”

1. You will now see the Authenticator app screen displayed with a QR code

2. Open the Authenticator app and follow the instructions to take a picture of the QR code.

3. If the QR code does not work, you can manually enter the information below the QR code.

4.  Click “Next” on the MFA Wizard page, which will display “Step 2: Let’s make sure that we can reach you on your Mobile App device – Please respond to the notification on your device” and will send a verification request.

5. MFA will now send a verification message with a “Deny or Approve” to your device.  Click on “Approve” to verify.

6. In a few seconds after you have clicked on “Approve,” MFA will respond with “Verification successful.  Taking you to the next step…”

3. Optional: (if step 2 not completed, otherwise skip to step 4) To verify MFA with a security code, select “Use Verification code,” the click “set up.”

1. You will now see the Authenticator app screen displayed with a QR code.  Click on “Configure app without notifications,” then click “Next.”  The QR code will change.

2. Open the Authenticator app and follow the instructions to take a picture of the QR code.

3. If the QR code does not work, you can manually enter the information below the QR code.

4. Click “Next” on the MFA Wizard page, which will display “Step 2: Enter the verification code from the mobile app.”

5. Enter the code, then click “Verify.”

4. MFA will prompt for an additional security measure in case the Authenticator app or mobile device is inaccessible by “adding phone verification to your password.”  Below “Step 3: In case you lose access to the mobile app,” enter a phone number where MFA can call for verification, then click “Done.”

NOTE:

1. MFA will NOT call this number for validation during the MFA Setup Wizard. Ensure you have entered the correct phone number before clicking “Done.”
2. The phone number should be a different number other than your mobile device, in case your device is damaged, lost, or stolen. Consider using a spouse or trusted family member’s phone as an alternative.

The setup is complete! MFA is now enabled for your Office 365 account.