Introduction
This guide will assist in setting up an account with Office 365 Multi-Factor Authentication (MFA). MFA will require you to complete additional authentication when signing into Office 365 resources (this includes web and desktop versions of Outlook, Skype for Business, OneDrive, and more). Where most typical authentication procedures require a username and password only, multi-factor authentication will require you to authenticate your identity using an additional method.
Special Concepts
Office 365 MFA Verification Methods
Microsoft has a set of defined methods you will select in the setup process to provide the additional verification when accessing Office 365 resources:
- Text message sent to your phone with a code to enter into the verification screen
- Phone call attempting to authenticate
- Mobile app to deny or approve
Once your multi-factor authentication is setup, you will be required to approve any new requests to access your Office 365 account. Some instances of when you will be required to approve MFA requests include:
- Signing into Outlook, OneDrive, Skype for Business, or another Office 365 application after shutting off your computer,
- Signing into an Office 365 application on a new device.
Set up a Back-up Authentication Method
It is important to set up a back-up authentication method. You will automatically be prompted to set up your first authentication method, generally the Microsoft Authenticator app. However, if you get a new phone you will need to have a back-up authentication method to pair your new phone with your account. Follow the steps below in how to "Edit Multi-Factor" to set up either voice or text methods.
Steps to Set up Multi-Factor Authentication Verification Methods
Most accounts are automatically required to use Multi-Factor Authentication and you will be prompted to configure your authentication methods the first time you sign-in to Office 365.
Steps to Add/Edit/Remove Multi-Factor Authentication Verification Methods
- Go to aka.ms/mysecurityinfo and login with your ISU credentials, if prompted for authentication.
- On the Security Info site, you can (as noted in the image by the number):
- Click "+ Add sign-in method" to add additional methods.
- Click on "Change" in the line with an existing method to modify it.
- Click on "Delete" in the line with a method to remove it from your settings.
- click on "Change" above the table to adjust your default notification method.
- Click on "Sign out everywhere" if you have lost a device or want to require re-authentication to verify that your account isn't in use somewhere that you don't want it to be.
Conclusion
After following the instructions your Office 365 Multi-Factor Authentication should be setup and ready to use and you will know how to add, change, or remove verification methods to your account.
Additional Resources
For additional instructions on setting up Microsoft Authenticator App, go to https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-auth-app-overview