Multifactor Authentication (MFA)
Multifactor Authentication (MFA) enhances your SIUE account's security by requiring two forms of identification: your password and a code sent to your phone or generated by a security key. This extra step makes it harder for unauthorized users to access your account, even if they know your password. As cyber threats grow more sophisticated, MFA protects your account from unauthorized access, identity theft, and data breaches.
Setting up MFA for the first time
How to Set Up MFA
NOTE: Students beginning in the fall of 2024 are being auto-enrolled in groups now. If this is you and you want to set up MFA before you are auto-enrolled you can do it here.
-
Access Your SIUE Email:
- Login to your SIUE Email (outlook.office365.com) on your computer.
-
Start the MFA Setup:
- A message will appear saying "More Information Required." Click the "Next" button to proceed.
-
Choose Authentication Method:
- If you want to use the App (recommended) go to option 1: Mobile App.
- If you would rather get a text message or phone call for verification go to option 2: Authentication Phone.
Option 1: Mobile App (Recommended)
-
Install the App on Your Phone:
- Download the Microsoft Authenticator app from the Google Play Store for Android or the Apple App Store for iPhone.
- Please ensure that you download the app with the icon displayed above, and verify that it is published by "Microsoft Corporation."
- Download the Microsoft Authenticator app from the Google Play Store for Android or the Apple App Store for iPhone.
-
Scan QR Code:
- Open the app on your phone and tap "Add Account" or the "+" button.
- Select "Work or school account" and then choose "Scan a QR code."
- On your computer, click "Next" until a QR code appears.
- Use your phone's camera to scan the QR code on your computer screen, then click "Next" on your computer.
-
Verify:
- A two-digit code will appear on your computer. Enter this code on your phone and verify your identity.
-
Complete the Setup:
- Click "Done" after you approve the verification request, your phone will be linked to your app and account, completing the setup process.
Option 2: Authentication Phone
-
To Authenticate with a Call or Text:
- Select "I want to set up a different method" at the bottom of the window.
- Choose "Phone" and then click "Next."
- Select "I want to set up a different method" at the bottom of the window.
-
Enter Phone Number:
- Type in your phone number and choose to receive a text message or phone call for verification.
-
Verify:
- If you chose to receive a call, answer the phone and follow the spoken instructions.
- If you chose to receive a text, enter the verification code from the message into your computer.
-
Complete the Setup:
- After you approve the verification request, your phone will be linked to your app and account, completing the setup process.
Need Help?
If you have any questions or need assistance, please get in touch with the ITS Help Desk:
- Call: (618) 650-5500
- Email: help@siue.edu
- Visit Lovejoy Library Room 0005 during regular business hours.
Note: For those without smartphones, we offer a security token alternative. Contact the ITS Help Desk for more information.
Updating Microsoft Authenticator when you get a new phone
I got a new phone but still have my old phone:
- If you have a new phone but still have your old phone, you can easily set up MFA on your new device. To do so, go to https://aka.ms/mfasetup and log in using your SIUE email address. During the login process, use your old phone to approve MFA. Once logged in, you can choose to set up Authenticator on your new phone. Follow the instructions provided to add the new device as an approved MFA option. With Authenticator set up on your new phone, you can receive MFA notifications and verify your identity easily and securely.
I got a new phone but still have the same phone number:
- If you have a new phone with the same phone number, updating your MFA settings is straightforward. Go to https://aka.ms/mfasetup and log in using your SIUE email address. During the MFA process, you will see a "Use a different verification option" button. Click on it and select the option that works best for you, either by text or call. Once you are logged in, you can set up Authenticator on your new phone. Follow the instructions provided to add the new device as an approved MFA option. With Authenticator set up on your new phone, you can receive MFA notifications and verify your identity easily and securely.
This method ONLY applies if you have setup text message authentication, if you only have the authenticator app you'll need to follow the options below.
I got a new phone with a new number and no longer have my old phone:
- If you have a new phone with a new number and no longer have access to your old phone, you will need to contact us at the ITS Help Desk to temporarily exempt your account to allow for a new setup. To reset your MFA methods, you can either visit the ITS Help Desk in person or call us at (618)650-5500. We will verify your identity and assist you in resetting your MFA methods.
If you have any questions or concerns about updating your MFA settings or need further assistance, please do not hesitate to reach out to us at (618) 650-5500 or email us at help@siue.edu. We are available to provide support and guidance to ensure that your MFA setup is seamless and secure.
General MFA information
Authentication Methods
Microsoft Authenticator App
- The Microsoft Authenticator app is a popular way to authenticate using MFA. Users can install the app on their smartphone or tablet and receive push notifications for authentication requests. Users can then approve or deny the request using the app. Additionally, the app can generate verification codes that can be used for authentication when an internet connection is unavailable.
Text Message or Voice Call
- Users can also authenticate using a text message or voice call. When prompted for authentication, users can choose to receive a text message or voice call with a verification code. They can then enter the verification code to complete the authentication process.
Hardware Token
- A hardware token is a physical device that can be used for authentication. Users can plug the token into their computer or use it wirelessly to authenticate. This option is particularly useful for users who don't have access to a smartphone. Tokens will cost $25, if you are interested in a hardware token you can contact the ITS Help Desk at (618) 650-5500 or help@siue.edu to make arrangements.
Alternate or Office Phone
- You have the option to add an additional phone as a backup. Please note that using an office phone as a verification method is not recommended, especially if it is a Teams phone. This is because logging in to a Teams phone will require MFA, which can create a loop of needing to authenticate MFA to authenticate MFA.
Microsoft MFA provides several options for users to authenticate. Users can choose the option that works best for them based on their needs and preferences. By using MFA, users can help protect their accounts and data from unauthorized access.
If you have any questions or concerns about updating your MFA settings or need further assistance, please do not hesitate to reach out to us at (618) 650-5500 or email us at help@siue.edu. We are available to provide support and guidance to ensure that your MFA setup is seamless and secure.
Why does the app require so many permissions?
Here is a full list of permissions we may ask for, and how they are used in the app. The specific permissions you see depend on the type of phone you have.
- Camera: We use your camera to scan QR codes when you add a work, school, or non-Microsoft account.
- Contacts and phone: When you sign in with your personal Microsoft account, we try to simplify the process by finding existing accounts that you use on your phone.
- SMS: When you sign in with your personal Microsoft account for the first time, we have to make sure that your phone number matches the one we have on record. We send a text message to the phone where you downloaded the app. The message contains a 6-8 digit verification code. Instead of asking you to find this code and enter it in the app, we find it in the text message for you.
- Draw over other apps: When you receive a notification to verify your identity, we display that notification over any other app that might be running.
- Receive data from the internet: This permission is required for sending notifications.
- Prevent phone from sleeping: If you register your device with your organization, they can change this policy on your phone.
- Control vibration: You have the option to choose whether you would like a vibration whenever you receive a notification to verify your identity.
- Use fingerprint hardware: Some work and school accounts require an additional PIN whenever you verify your identity. TO make the process easier, we allow you to use your fingerprint instead of entering the PIN.
- View network connections: When you add a Microsoft account, the app requires network/internet connection.
- Read the contents of your storage: This permission is only used when you report a technical problem through the app settings. Some information from your storage is collected to diagnose the issue.
- Full network access: This permission is required for sending notifications to verify your identity.
- Run at startup: If you restart your phone, this permission ensures that you continue you receive notifications to verify your identity.
If you have any other questions or issues with your MFA please contact the ITS Help Desk at 618-650-5500 or help@siue.edu, and we'll be happy to assist you.
