Setting Up Multi-Factor Authentication for New Students, Faculty and Staff

Introduction

Office 365 is St. Cloud State's email and storage solution for all students and employees providing anytime, anywhere access to email, documents, contacts and calendar. Multi-factor Authentication (MFA) requires more than one method of verifying your identity to confirm that it is really you logging into your SCSU email/Office 365 account. This protects you and our SCSU community by preventing cybercriminals from accessing your account. Multi-factor authentication for your SCSU email/Office 365 account will confirm your identity by verifying something you know (your username & password) and something you have (a trusted device – such as a mobile phone).

As of April 12th, 2021, new SCSU students will need to setup multi-factor authentication for their account in order to access their SCSU email and other Office 365 services. In late April 2021, new faculty/staff will need to setup multi-factor authentication for their account in order to access their SCSU email and other Office 365 services. If you joined SCSU prior to these dates, you are still encouraged to set multi-factor authentication up for your account.

More information about Office 365 multi-factor authentication can be found on the SCSU website: https://www.stcloudstate.edu/its/office-365/mfa.aspx

If you are unable to enroll into multi-factor authentication at this time, please contact our HuskyTech/IT department. Contact information for HuskyTech can be found online at https://www.stcloudstate.edu/its/huskytech/default.aspx

Instructions

  1. Identify which devices/verification methods you will use for your multi-factor authentication, and keep those devices nearby so you can authenticate as needed. 
  2. Log into Office 365 online at https://login.microsoftonline.com/?whr=minnstate.edu 
    • Students use your StarID@go.minnstate.edu and StarID password; faculty/staff use your StarID@minnstate.edu and StarID password 
  3. You should be prompted with a screen that says "More Information Required". Click on the blue "Next" button.
  4. The MFA Setup Wizard will appear. Complete the steps outlined below as prompted by the MFA Setup Wizard. If you have any issues with the MFA Setup Wizard, please contact HuskyTech

 

Step 1 of the MFA Setup Wizard will ask “How should we contact you?”

       

Click on the drop-down list that says “Authentication phone.”  You have three (3) main ways of setting up MFA, “Authentication phone,” “Office phone,” or “Mobile app.”  Select which method you prefer to initially use MFA.

NOTE: If you wish to use a Mobile app on your device that supports mobile apps, such as an iPhone or Android phone, we recommend you download and install the Microsoft Authenticator app, which can support other systems and services, such as your bank.

 

Authentication Phone

  1. If you wish to use “Authentication phone,” enter your phone number and select the option to either have a text message or voice call to the number entered, then click “Next.”

  1. If you selected “Send me a code by text message,” MFA will prompt you to enter the code sent to your device.  Enter the code and click “Verify.”

  1. If you selected “Call me,” MFA will display “Verifying phone:  Answer it to continue.”  The incoming call will display “RESTRICTED.”  Answer the call, and follow the instructions of which key or keys to enter.

Office Phone

  1. If you wish to use “Office phone,” enter your phone number then click “Next.”

  1. MFA will display “Verifying phone:  Answer it to continue.”  The incoming call will display “RESTRICTED.”  Answer the call, and follow the instructions of which key or keys to enter.

Mobile app

  1. Have MS Authenticator or a third-party app downloaded and installed on the mobile device you will be setting up Authenticator on.
  2. To verify MFA with a notification approval, select “Receive notifications for verification,” the click “set up.”

  1. You will now see the Authenticator app screen displayed with a QC code

  1. Open the Authenticator app and follow the instructions to take a picture of the QC code.

  1. If the QC code does not work, you can manually enter the information below the QC code.

  1.  Click “Next” on the MFA Wizard page, which will display “Step 2: Let’s make sure that we can reach you on your Mobile App device – Please respond to the notification on your device” and will send a verification request.

  1. MFA will now send a verification message with a “Deny or Approve” to your device.  Click on “Approve” to verify.

  1. In a few seconds after you have clicked on “Approve,” MFA will respond with “Verification successful.  Taking you to the next step…”

  1. Optional: (if step 2 not completed, otherwise skip to step 4) To verify MFA with a security code, select “Use Verification code,” the click “set up.”

  1. You will now see the Authenticator app screen displayed with a QC code.  Click on “Configure app without notifications,” then click “Next.”  The QC code will change.

  1. Open the Authenticator app and follow the instructions to take a picture of the QC code.

  1. If the QC code does not work, you can manually enter the information below the QC code.

  1. Click “Next” on the MFA Wizard page, which will display “Step 2: Enter the verification code from the mobile app.”

  1. Enter the code, then click “Verify.”

 

  1. MFA will prompt for an additional security measure in case the Authenticator app or mobile device is inaccessible by “adding phone verification to your password.”  Below “Step 3: In case you lose access to the mobile app,” enter a phone number where MFA can call for verification, then click “Done.”

NOTE:

  1. MFA will NOT call this number for validation during the MFA Setup Wizard. Ensure you have entered the correct phone number before clicking “Done.”
  2. The phone number should be a different number other than your mobile device, in case your device is damaged, lost, or stolen. Consider using a spouse or trusted family member’s phone as an alternative.

The setup is complete! MFA is now enabled for your Office 365 account.