Multifactor Authentication (MFA)
Setting up MFA for the first time
Setting Up Multifactor Authentication (MFA)
-
Access Your SIUE Email:
- Login to your SIUE Email (outlook.office365.com) on your computer.
-
Start the MFA Setup:
- A message will appear saying "More Information Required." Click the "Next" button to proceed.
-
Choose Authentication Method:
- If you want to use the App (recommended) go to option 1: Mobile App.
- If you would rather get a text message or phone call for verification go to option 2: Authentication Phone.
Option 1: Mobile App (Recommended)
-
Install Microsoft Authenticator on Your Phone
- Download the Microsoft Authenticator app from the Google Play Store (Android) or App Store (iPhone)
- Ensure you download the app with the icon shown above, published by "Microsoft Corporation."
- Download the Microsoft Authenticator app from the Google Play Store (Android) or App Store (iPhone)
-
Set Up Your Account in the App
- Open the Microsoft Authenticator app on your phone
- Tap "Add Account" or the "+" button
- Select "Work or school account" and then
- Choose "Scan a QR code."
-
Connect Your Account
- On your computer, click "Next" until the QR code appears
- On your computer, click "Next" until the QR code appears
- Use your phone's camera to scan the QR code shown on your computer
- After scanning, click "Next" on your computer to continue
-
Verify Your Identity
- A notification will be sent to your phone. Open the notification and verify your identity
- A two-digit code will appear on your computer screen. Enter this code on your phone when prompted
-
Complete Setup
- After approving the verification request, click "Done" on your computer
- Your account is now protected with MFA using the Microsoft Authenticator app
Option 2: Authentication Phone
-
To Authenticate with a Call or Text
- Select "I want to set up a different method" at the bottom of the window
- Choose "Phone" and then click "Next."
- Select "I want to set up a different method" at the bottom of the window
-
Enter Phone Number
- Enter your phone number with area code
- Select whether you want to receive verification codes via text message or phone call
- Click "Next" to continue
-
Verify Your Phone
- If you chose text verification: You'll receive a text message with a code. Enter this code on your computer.
- If you chose call verification: Answer the call and follow the spoken instructions to verify.
-
Complete Setup
- After successful verification, click "Done" to complete the MFA setup.
- Your account is now protected with MFA using your phone number.
Note: For users without smartphones, security tokens are available as an alternative. Contact the ITS Help Desk for more information about this option.
Need Additional Support?
If you have any questions or need assistance setting up MFA, please contact the ITS Help Desk:
- Call: (618) 650-5500
- Email: help@siue.edu
- Visit: Lovejoy Library Room 0005 during regular business hours.
This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!
Managing Microsoft Authenticator when you get a new phone
Updating MFA When You Get a New Phone
When you get a new phone, you'll need to update your Multifactor Authentication (MFA) settings to maintain secure access to your SIUE account. Follow the instructions below based on your specific situation.
Scenario 1: I Have Both My Old and New Phones
If you still have access to your old phone with the Microsoft Authenticator app and want to set up MFA on your new phone:
- Access the MFA setup page at https://aka.ms/mfasetup
- Sign in with your SIUE email address and password
- Approve the MFA prompt on your old phone when prompted
- Once logged in, you'll see your current authentication methods. Select "Add Method"
- Choose "Authenticator app" and follow the on-screen instructions
- Install the Microsoft Authenticator app on your new phone if you haven't already
- Scan the QR code displayed on your computer screen with your new phone
- Approve the test notification to verify the setup is working
- Your new phone is now set up for MFA. You can keep both phones registered or remove the old one
Scenario 2: I Have a New Phone but Kept My Same Phone Number
If you have a new phone with the same phone number and previously set up text message verification:
- Access the MFA setup page at https://aka.ms/mfasetup
- Sign in with your SIUE email address and password
- When prompted for MFA, click "Use a different verification option"
- Select "Text" or "Call" to receive a verification code via your phone number
- Enter the verification code to complete the sign-in
- Once logged in, you can set up the Microsoft Authenticator app on your new phone
- Select "Add Method" and choose "Authenticator app"
- Follow the on-screen instructions to complete the setup
Important: This method ONLY works if you previously set up text message authentication. If you only had the authenticator app on your old phone, follow Scenario 3 below.
Scenario 3: I Have a New Phone with a New Number and No Longer Have My Old Phone
If you have a completely new phone with a new number and no longer have access to your old phone:
- Contact the ITS Help Desk for assistance by:
- Visiting in person at Lovejoy Library Room 0005
- Calling (618) 650-5500
- We will verify your identity using alternate methods
- Once verified, we'll temporarily exempt your account from MFA requirements
- You'll then be able to log in and set up MFA on your new device
Best Practices for MFA Management
- Set up multiple authentication methods when possible to avoid being locked out
- Update your MFA methods proactively before getting rid of your old phone
- Test your new setup before deactivating or resetting your old device
Need Additional Support?
If you have any questions or need assistance updating your MFA settings, please contact the ITS Help Desk:
- Call: (618) 650-5500
- Email: help@siue.edu
- Visit: Lovejoy Library Room 0005 during regular business hours.
This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!
General MFA information
MFA Authentication Methods
Available Authentication Methods
Microsoft Authenticator App (Recommended)
The Microsoft Authenticator app is the recommended authentication method for most users due to its convenience and security features.
Key benefits:
- Receive push notifications for quick approval
- Generate verification codes when offline
- Use across multiple devices
- No cellular service required
Getting started:
- Download the Microsoft Authenticator app from your device's app store
- Select "Add account" in the app
- Choose "Work or school account"
- Follow the on-screen instructions to link your SIUE account
Text Message or Voice Call
Receive verification codes via SMS text message or automated voice call to your registered phone number.
How it works:
- When signing in, you'll be prompted for additional verification
- Select either "Text" or "Call" option
- Receive a verification code via your chosen method
- Enter the code on the sign-in screen
Note: This method requires cellular service and may incur standard text/call charges based on your mobile plan.
Hardware Token
A physical device that generates verification codes without requiring a smartphone or internet connection.
Details:
- Hardware tokens cost $25 per device
- Ideal for users without smartphones or in areas with poor connectivity
- Available in USB or wireless formats
- To request a token, contact the ITS Help Desk at (618) 650-5500 or help@siue.edu
Alternate or Backup Phone
Register an additional phone number as a backup authentication method.
Important caution:
- Using an office phone as a verification method is not recommended for Teams phones
- This can create an authentication loop where you need MFA to access the phone that receives MFA codes
- Personal mobile phones or home landlines are better backup options
Managing Your MFA Methods
You can update, add, or remove authentication methods at any time:
- Sign in to your SIUE account
- Navigate to My Account > Security Info
- Select "Add method" to add a new verification option
- Select "Change" next to an existing method to update it
Best Practices for MFA
- Set up multiple authentication methods as backup
- Keep your contact information current
- Test your authentication methods periodically
- Contact the ITS Help Desk immediately if you lose access to all your verification methods
Frequently Asked Questions
What if I get a new phone?
If you replace your device, you'll need to set up the Microsoft Authenticator app again. Make sure you have a backup method available during this transition.
What if I'm traveling internationally?
We recommend setting up the Microsoft Authenticator app with offline codes before departure for international travel, as text messages may not be reliably delivered internationally.
Need Additional Support?
If you have any questions or need further assistance with Multi-Factor Authentication, please contact the ITS Help Desk:
- Call: (618) 650-5500
- Email: help@siue.edu
- Visit: Lovejoy Library Room 0005 during regular business hours.
This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!
Why does the Microsoft Authenticator app request so many permissions?
Microsoft Authenticator App Permissions
Essential Permissions
- Camera: Used to scan QR codes when adding work, school, or non-Microsoft accounts to the app.
- Draw over other apps: Allows verification notifications to appear over other apps you might be using, ensuring you don't miss important security prompts.
- Internet access: Required to send and receive authentication notifications and verify your identity securely.
- Run at startup: Ensures you continue to receive verification notifications even after restarting your device.
Optional and Convenience Permissions
- Contacts and phone: When signing in with a personal Microsoft account, this helps find existing accounts you use on your phone to simplify the process.
- SMS: During initial setup with a personal Microsoft account, the app can automatically read verification codes sent via text message instead of requiring you to manually enter them.
- Vibration control: Allows the app to vibrate your device when you receive a verification notification, providing an additional alert method.
- Fingerprint hardware: Enables you to use your fingerprint instead of entering a PIN when verifying your identity (for accounts that require an additional PIN).
- Prevent phone from sleeping: May be required if your organization has specific device policies enabled.
Troubleshooting Permissions
- Storage access: Only used when reporting technical problems through the app settings. Information from your storage may be collected to diagnose issues.
- View network connections: Required when adding Microsoft accounts to ensure proper connectivity.
Privacy and Security
Microsoft Authenticator is designed with your privacy and security in mind. The permissions requested are limited to those necessary for the app to function properly and provide a seamless authentication experience.
If you have concerns about specific permissions, you can manage app permissions in your device settings. However, restricting essential permissions may limit the app's functionality.
Need Additional Support?
If you have any questions about Microsoft Authenticator permissions or need assistance with MFA, please contact the ITS Help Desk:
- Call: (618) 650-5500
- Email: help@siue.edu
- Visit: Lovejoy Library Room 0005 during regular business hours.
This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!
What if I lose access to all my MFA verification methods?
If you lose access to all your MFA verification methods (such as losing your phone and having no backup methods configured), contact the ITS Help Desk immediately for assistance regaining access to your account.
Need Additional Support?
If you have any questions or need further assistance, please contact the ITS Help Desk:
- Call: (618) 650-5500
- Email: help@siue.edu
- Visit: Lovejoy Library Room 0005 during regular business hours.
This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!