Multifactor Authentication (MFA)

Multifactor Authentication (MFA) enhances your SIUE account's security by requiring two forms of identification: your password and a code sent to your phone or generated by a security key. This extra step makes it harder for unauthorized users to access your account, even if they know your password. As cyber threats grow more sophisticated, MFA protects your account from unauthorized access, identity theft, and data breaches.

 Setting up MFA for the first time

Setting Up Multifactor Authentication (MFA)

  1. Access Your SIUE Email:

    • Login to your SIUE Email (outlook.office365.com) on your computer.

  2. Start the MFA Setup:

    • A message will appear saying "More Information Required." Click the "Next" button to proceed.

  3. Choose Authentication Method:

    • If you want to use the App (recommended) go to option 1: Mobile App.
    • If you would rather get a text message or phone call for verification go to option 2: Authentication Phone.

Option 1: Mobile App (Recommended)

  1. Install Microsoft Authenticator on Your Phone

    • Download the Microsoft Authenticator app from the Google Play Store (Android) or App Store (iPhone)
      Microsoft Authenticator Icon
    • Ensure you download the app with the icon shown above, published by "Microsoft Corporation."

  2. Set Up Your Account in the App

    • Open the Microsoft Authenticator app on your phone
    • Tap "Add Account" or the "+" button
    • Select "Work or school account" and then
    • Choose "Scan a QR code."

  3. Connect Your Account

    • On your computer, click "Next" until the QR code appears
      image of computer showing QR code to scan
    • Use your phone's camera to scan the QR code shown on your computer
    • After scanning, click "Next" on your computer to continue

  4. Verify Your Identity

    • A notification will be sent to your phone. Open the notification and verify your identity
    • A two-digit code will appear on your computer screen. Enter this code on your phone when prompted

  5. Complete Setup

    • After approving the verification request, click "Done" on your computer
    • Your account is now protected with MFA using the Microsoft Authenticator app

Option 2: Authentication Phone

  1. To Authenticate with a Call or Text

    • Select "I want to set up a different method" at the bottom of the window
      image of "I want to set up a different method" circled in red
    • Choose "Phone" and then click "Next."

  2. Enter Phone Number

    • Enter your phone number with area code
    • Select whether you want to receive verification codes via text message or phone call
    • Click "Next" to continue

  3. Verify Your Phone

    • If you chose text verification: You'll receive a text message with a code. Enter this code on your computer.
    • If you chose call verification: Answer the call and follow the spoken instructions to verify.

  4. Complete Setup

    • After successful verification, click "Done" to complete the MFA setup.
    • Your account is now protected with MFA using your phone number.

Note: For users without smartphones, security tokens are available as an alternative. Contact the ITS Help Desk for more information about this option.

Need Additional Support?

If you have any questions or need assistance setting up MFA, please contact the ITS Help Desk:

This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!

    Managing Microsoft Authenticator when you get a new phone

    Updating MFA When You Get a New Phone

    When you get a new phone, you'll need to update your Multifactor Authentication (MFA) settings to maintain secure access to your SIUE account. Follow the instructions below based on your specific situation.

    Scenario 1: I Have Both My Old and New Phones

    If you still have access to your old phone with the Microsoft Authenticator app and want to set up MFA on your new phone:

    1. Access the MFA setup page at https://aka.ms/mfasetup
    2. Sign in with your SIUE email address and password
    3. Approve the MFA prompt on your old phone when prompted
    4. Once logged in, you'll see your current authentication methods. Select "Add Method"
    5. Choose "Authenticator app" and follow the on-screen instructions
    6. Install the Microsoft Authenticator app on your new phone if you haven't already
    7. Scan the QR code displayed on your computer screen with your new phone
    8. Approve the test notification to verify the setup is working
    9. Your new phone is now set up for MFA. You can keep both phones registered or remove the old one

    Scenario 2: I Have a New Phone but Kept My Same Phone Number

    If you have a new phone with the same phone number and previously set up text message verification:

    1. Access the MFA setup page at https://aka.ms/mfasetup
    2. Sign in with your SIUE email address and password
    3. When prompted for MFA, click "Use a different verification option"
    4. Select "Text" or "Call" to receive a verification code via your phone number
    5. Enter the verification code to complete the sign-in
    6. Once logged in, you can set up the Microsoft Authenticator app on your new phone
    7. Select "Add Method" and choose "Authenticator app"
    8. Follow the on-screen instructions to complete the setup

    Important: This method ONLY works if you previously set up text message authentication. If you only had the authenticator app on your old phone, follow Scenario 3 below.

    Scenario 3: I Have a New Phone with a New Number and No Longer Have My Old Phone

    If you have a completely new phone with a new number and no longer have access to your old phone:

    1. Contact the ITS Help Desk for assistance by:
      • Visiting in person at Lovejoy Library Room 0005
      • Calling (618) 650-5500
    2. We will verify your identity using alternate methods
    3. Once verified, we'll temporarily exempt your account from MFA requirements
    4. You'll then be able to log in and set up MFA on your new device

    Best Practices for MFA Management

    • Set up multiple authentication methods when possible to avoid being locked out
    • Update your MFA methods proactively before getting rid of your old phone
    • Test your new setup before deactivating or resetting your old device

    Need Additional Support?

    If you have any questions or need assistance updating your MFA settings, please contact the ITS Help Desk:

    This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!

    General MFA information

    MFA Authentication Methods

    Available Authentication Methods

    Microsoft Authenticator App (Recommended)

    The Microsoft Authenticator app is the recommended authentication method for most users due to its convenience and security features.

    Key benefits:

    • Receive push notifications for quick approval
    • Generate verification codes when offline
    • Use across multiple devices
    • No cellular service required

    Getting started:

    1. Download the Microsoft Authenticator app from your device's app store
    2. Select "Add account" in the app
    3. Choose "Work or school account"
    4. Follow the on-screen instructions to link your SIUE account

    Text Message or Voice Call

    Receive verification codes via SMS text message or automated voice call to your registered phone number.

    How it works:

    1. When signing in, you'll be prompted for additional verification
    2. Select either "Text" or "Call" option
    3. Receive a verification code via your chosen method
    4. Enter the code on the sign-in screen

    Note: This method requires cellular service and may incur standard text/call charges based on your mobile plan.

    Hardware Token

    A physical device that generates verification codes without requiring a smartphone or internet connection.

    Details:

    • Hardware tokens cost $25 per device
    • Ideal for users without smartphones or in areas with poor connectivity
    • Available in USB or wireless formats
    • To request a token, contact the ITS Help Desk at (618) 650-5500 or help@siue.edu

    Alternate or Backup Phone

    Register an additional phone number as a backup authentication method.

    Important caution:

    • Using an office phone as a verification method is not recommended for Teams phones
    • This can create an authentication loop where you need MFA to access the phone that receives MFA codes
    • Personal mobile phones or home landlines are better backup options

    Managing Your MFA Methods

    You can update, add, or remove authentication methods at any time:

    1. Sign in to your SIUE account
    2. Navigate to My Account > Security Info
    3. Select "Add method" to add a new verification option
    4. Select "Change" next to an existing method to update it

    Best Practices for MFA

    • Set up multiple authentication methods as backup
    • Keep your contact information current
    • Test your authentication methods periodically
    • Contact the ITS Help Desk immediately if you lose access to all your verification methods

    Frequently Asked Questions

    What if I get a new phone?

    If you replace your device, you'll need to set up the Microsoft Authenticator app again. Make sure you have a backup method available during this transition.

    What if I'm traveling internationally?

    We recommend setting up the Microsoft Authenticator app with offline codes before departure for international travel, as text messages may not be reliably delivered internationally.

    Need Additional Support?

    If you have any questions or need further assistance with Multi-Factor Authentication, please contact the ITS Help Desk:

    This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!

    Why does the Microsoft Authenticator app request so many permissions? 

     

    Microsoft Authenticator App Permissions

    Essential Permissions

    • Camera: Used to scan QR codes when adding work, school, or non-Microsoft accounts to the app.
    • Draw over other apps: Allows verification notifications to appear over other apps you might be using, ensuring you don't miss important security prompts.
    • Internet access: Required to send and receive authentication notifications and verify your identity securely.
    • Run at startup: Ensures you continue to receive verification notifications even after restarting your device.

    Optional and Convenience Permissions

    • Contacts and phone: When signing in with a personal Microsoft account, this helps find existing accounts you use on your phone to simplify the process.
    • SMS: During initial setup with a personal Microsoft account, the app can automatically read verification codes sent via text message instead of requiring you to manually enter them.
    • Vibration control: Allows the app to vibrate your device when you receive a verification notification, providing an additional alert method.
    • Fingerprint hardware: Enables you to use your fingerprint instead of entering a PIN when verifying your identity (for accounts that require an additional PIN).
    • Prevent phone from sleeping: May be required if your organization has specific device policies enabled.

    Troubleshooting Permissions

    • Storage access: Only used when reporting technical problems through the app settings. Information from your storage may be collected to diagnose issues.
    • View network connections: Required when adding Microsoft accounts to ensure proper connectivity.

    Privacy and Security

    Microsoft Authenticator is designed with your privacy and security in mind. The permissions requested are limited to those necessary for the app to function properly and provide a seamless authentication experience.

    If you have concerns about specific permissions, you can manage app permissions in your device settings. However, restricting essential permissions may limit the app's functionality.

    Need Additional Support?

    If you have any questions about Microsoft Authenticator permissions or need assistance with MFA, please contact the ITS Help Desk:

    This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!

     

    What if I lose access to all my MFA verification methods?

    If you lose access to all your MFA verification methods (such as losing your phone and having no backup methods configured), contact the ITS Help Desk immediately for assistance regaining access to your account.

    Need Additional Support?

    If you have any questions or need further assistance, please contact the ITS Help Desk:

    This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!


    Keywords:
    mfa, multi factor authentication, 2FA, faq, setup, set up, app, mobile app, authenticator app, multifactor, multi-factor 
    Doc ID:
    138438
    Owned by:
    Aaron W. in Southern Illinois University Edwardsville
    Created:
    2024-07-16
    Updated:
    2025-03-27
    Sites:
    Southern Illinois University Edwardsville
    Clean URL:
    https://kb.siue.edu/mfa