MFA Pilot Instructions

Transcription

1 MFA Pilot Instructions Getting Started You will need the following: Your smartphone, a computer, and Internet access. Before using MFA your computer will need to be running Office If you are still on Office 2013 you will need to update your computer or Multi Factor will not work correctly. 1. On a PC go to the start button, type in Software Center in the search bar. 2. Click on the Office 2016 Package 3. Once installation is complete you can proceed with the MFA setup. There are a number of notification options available for 2-step verification. We recommend using the app called Microsoft Authenticator/Azure Authenticator* which uses Push Notification to your smart phone. It is quickest method for authenticating (as you don t have to enter in a 6-digit code, you just tap approve/verify or deny when prompted on your smartphone when signing into O365). * NOTE: Microsoft uses both Microsoft Authenticator and Azure Authenticator interchangeably Install Microsoft Authenticator from the App store on your phone Installing the Microsoft Authenticator App will allow you to receive push notifications. If you are using an Android Phone (iphone users - instructions immediately follow the Android instructions) 1. Go to Apps, select Play Store 2. Search for Microsoft Authenticator 3. Click Install

2 4. Once the app is installed, click on Open. 5. On the Accounts screen, click on ADD ACCOUNT 6. Under What kind of account are you adding? Select Work or school account. 7. A pop up box will appear asking, Allow Authenticator to take pictures and record video? Tap ALLOW (You will need to take a picture of the QR code). 8. Your camera will turn on and is ready to record the QR code. Put your phone to the side and go to your computer.

3 If you are using an iphone 1. Go to App Store 2. Search for Microsoft Authenticator 3. Tap on the Microsoft Authenticator app to download Note: You will need to know your itunes Password) 4. Once the app is installed, click on Open.

4 5. On the Authenticator would like to send you notifications screen, Tap Allow. 6. On the Accounts screen, tap ADD ACCOUNT 7. Under What kind of account are you adding? Select Work or school account.

5 8. A pop up box will appear asking, Authenticator Would Like to Access the Camera? Tap OK (You will need to take a picture of the QR code). 9. Your camera will turn on and is ready to record the QR code. Put your phone to the side and go to your computer.

6 Setting up 2 -Step Authentication for Office 365 By setting up 2-step verification, you add an extra layer of security to your Office 365 account. You sign in with your password (verification # 1) and an account verification notification is sent to your phone (verification # 2). 1. Sign into Office 365 on your computer with your St. Thomas account & password. Click on the blue box under your name that says Set it up now 2. In the drop down box next to Step 1: How should we contact you? choose Mobile App 3. Next to How do you want to use the mobile app? Choose Receive notifications for verification. 4. Click on Set up.

7 5. You will see the Configure mobile app dialog box on your computer. (You should already have the app installed on your smartphone). On your smartphone open the Authenticator app. 6. Scan the QR image displayed in your browser (like the one shown below). 7. Once you have successfully scanned the image, your account will be added automatically to the Authenticator app on your phone, and it will display a six-digit code.

8 8. On your computer, Choose Contact Me in your browser on the O365 page. 9. Next you will verify that O365 can reach your smart phone. 10. You should receive a push notification on your phone. Tap Approve/ Verify (Android/iPhone)

9 11. On your computer you will next see the follow screen. O365 sets up an initial app password for you to use with other applications so these other apps can connect to your Office 365 account. If you're using other apps like Outlook on your smart phone, you'll need to create an app password so these other apps can connect to your Office 365 account. 12. Go to your smart phone and open up your default account. You will need to change your password to the app password provided by O365 (like the one shown on the screenshot above). 13. Your smart phone should now be able to access O Go to your computer, click Done in your browser. You are now set up to use Multi-Factor Authentication on O365 and on your smartphone default application. Optional - Push Notifications 30 Days The next time you sign into O365 you will see a check box that says Don t ask again for 30 days. Check that box. (Note: The 30 days is based on the cookies settings for each of your browsers, if you are using different browsers and different computers to sign into O365 you will need to check the box on each of these separately).

10 Creating an app password for Office 365 If you're using other apps like Outlook on your smart phone, you'll need to create an app password so these other apps can connect to your Office 365 account. The app password is a code that gives an app or device permission to access your Office 365 account. Note: You will need to use the App Password for accessing on your smartphone. If you are a MAC user you will need to enter the App Password to access the Outlook client on your MAC (ipad, Laptop, Desktop). You do not need to use the App Password when using a browser and accessing O365 from the web. 1. Sign into Office 365 using your St. Thomas password on your computer. 2. You will receive a push notification to your smartphone to verify that it is you signing into your O365. Tap Approve/Verify (Android/iPhone). 3. On the main O365 sign in page (on your computer) 4. Once you have successfully logged in click on Office 365> Choose Settings > Under Your app settings select > Office Choose Security & Privacy > Additional security verification > Update your phone numbers used for Account security.

11 6. At the top of the page, choose app passwords.

12 7. Choose create to get an app password. 8. If you want to copy the password, choose copy password to clipboard. Note: You will not be able to see this password again once you leave this page. You can always create a new app password if you need one. 9. For accessing on your smart phone - go to your smart phone and open up your default account. When prompted to enter a password, enter the app password in the password box. Note: The lag time on when an application may request an app password varies. The best thing to do is to go into your phone s settings and update the password with the app password right away. You should only have to do this one time. You can always generate a new app password from O365 if you need to add another phone or other application that needs an app password to access O365 by using the instructions above.

13 Change how you get 2-step verification notification If you want to change how you receive 2 -step verification via O365 there are a number of options you can choose; these include calling your authentication phone, text to authentication phone, call to office phone, notify through app (push notification) and code via the app. 1. Sign in to Office 365 using your password (on your computer). 2. Click on Office 365> Choose Settings > Under Your app settings select > Office Choose Security & Privacy > Additional security verification > Choose Update my phone numbers used for account security. 4. The following page will display:

14 5. Choose how you want to get your verification from O Follow the prompts on the page.