In the chrome browser select the settings icon (three dots in the top right of the screen) and select. New Incognito window

Transcription

1 Arup MFA Enrolment

2 In order to enrol begin the MFA enrolment process it is advisable to do so in Incognito mode in your Chrome Browser. This is to avoid a clash with an existing online Microsoft service you may already use in your organisation. 2 In the chrome browser select the settings icon (three dots in the top right of the screen) and select New Incognito window 2

3 Your browser screen will change colour. Browse to: 3 3

4 Laptop/PC Screen You will now be taken to the start of the MFA enrolment process The username that you should use here will be a combination of your usual, ARUP, provided SharePoint username followed 4 E.g.: ext.gsira234@arup.com Please Note: Do not use the format global\ext.gsira234@arup.com 4

5 Laptop/PC Screen Laptop/PC Screen 5 You will then be informed that more information is required to validate your identity Please click on Use different account to allow you to enter your Arup details On the next screen you will be presented with option use another account. Select this option 5

6 6 As before the username that you should use here will be a combination of your usual, ARUP, provided SharePoint username followed E.g.: ext.gsira234@arup.com then click next 6

7 You will then be redirected to an Arup site to enter your password Please enter your SharePoint password on this page

8 Once signed in you may be greeted with a security warning box Select Yes to allow your browser to save this site to your trusted sites

9 Laptop/PC Screen 9 Once successfully authenticated you will be asked to set up MFA authentication, click on the set it up now button to start the MFA enrolment wizard 9

10 Laptop/PC Screen 0 The first page of the MFA enrolment wizard asks you to specify your preferred authentication method, the authentication methods currently available are: Authentication via the Microsoft Authenticator mobile app Authentication via mobile phone (text message or phone call) Authentication via a landline (phone call) In this example we have chosen the main option to authenticate using the Microsoft Authenticator mobile application which can be downloaded from the Apple or Google App store. It is recommended that the Microsoft Authenticator mobile app is used wherever possible 0

11 Laptop/PC Screen Once you have selected your preferred authentication method the wizard will prompt you to configure additional parameters relevant to the authentication method chosen. In this instance we have chosen to authenticate using the Microsoft Authenticator app so are given the option to configure MFA verification via push notification or by entering a verification code supplied by the app. To use the Microsoft Authenticator app you must first set it up by clicking on the blue set up button

12 Laptop/PC Screen 2 The mobile app configuration page allows you to configure the authenticator app by scanning an image or entering an app code. To continue with configuration open the Microsoft Authenticator app on your mobile device 2

13 Mobile Device Screen Select Work or school account from the list of account types 3 3

14 Azure MFA Enrolment Mobile Device Screens Configure the authenticator app by either: 4 Scanning the image displayed on the mobile app configuration page with your mobile device (the image must be within the green crosshairs) Entering the app code displayed on the configure mobile app page by selecting Or enter code manually 4

15 Laptop/PC Screen 5 Upon successful setup of the mobile authenticator app a verification test is initiated. The type of test carried out differs depending on the options chosen during setup. In this example push verification was selected therefore the authenticator app prompts us to approve access 5

16 Mobile Device Screen Click approve to complete MFA authentication 6 6

17 Laptop/PC Screen 7 After successfully authenticating with the mobile app you will be asked to provide a telephone number for phone verification. Phone verification can be used as the second factor of authentication if you lose access to the mobile app 7

18 Laptop/PC Screen 8 On exiting the wizard you will be presented with your profile page, click sign out everywhere to sign out of your Microsoft account 8

19 Arup MFA user FAQs What if I already use Microsoft Authenticator for access to other, non Arup, services? 9 Mobile Device Screen If you are using the Authenticator App with the Enter Code method then, when you open the App on your mobile device to enter your code, you will see a screen similar to the one here The Arup code is clearly labelled If you have chosen to use either the push notification function of the app, a text notification or voice message MFA will know which of your accounts it needs to provide a code for and will notify you accordingly 9

20 Arup MFA user FAQs What do I do if I do not wish to receive calls or texts to my personal phone? You have another two options you can use which are Authentication via a landline (phone call) or Authentication via the Microsoft Authenticator mobile app. 2 0 Will I be charged for receiving texts? If you are not normally charged for receiving texts to your mobile phone and if accessing from within your normal country no charges will be received for the MFA texts. Please bear in mind the text might take a few moments to arrive to your phone How does MFA affect System to System or App to App communication? The MFA system is only in use for real people system to system or app to app authentication should take place using app keys, which should be unique and long, but MFA will not impact this What if I encounter an error when trying to enrol? Please liaise with your usual Arup point of contact with any enquiries 20