Multi-Factor Authentication (MFA)

Summary

Multi-factor authentication (MFA) is an authentication method requiring two or more pieces of information to access an application/website.

Body

Description

Multi-factor authentication (MFA) is an authentication method requiring two or more pieces of information to access an application/website. Login requires a combination of your username, your password, and a mobile device or phone.

TU utilizes the Office 365 Microsoft Authenticator to manage the login process. The authenticator app provides several contact methods to choose from:

  • Receive notifications on a mobile app that can be downloaded to Androids and iOS phones. With the app, you only have to hit an approve button and it takes you right in without having to type your username and password
  • Call or text your cell phone with a verification code
  • Have an automated voice call to your office phone

Please note that it will be very important to lock your computer when you leave your desk since the authentication is based on your Windows credentials.

Authentication Options

TU Recommends using the Microsoft Authenticator app for iOS or Android devices, or via alternative methods such as text, email sent to outside email account or phone call.

Mobile Authenticator App

If you want to use the authenticator app, download the Microsoft Authenticator from your app store. When accessing university systems using your Microsoft O365 login (TUNetID@utulsa.edu), follow the prompts to set up a work or school account. If using the app, a QR code will appear on your computer screen during set-up which you will take a picture of on your cell phone for configuration.

Please note -- The initial set-up does not work well with Internet Explorer so use another Web Browser such as Chrome or Firefox.


Enroll in Multi-factor Authentication Site

 

Initial Setup

Services that currently use MFA include: Change Password, Colleague, Self-Service, and Email. When you attempt to access a service that uses MFA and you have not set up MFA, you will see this.


You will see a screen that prompts you to download the Microsoft Authenticator App OR select "I want to set up a different method."


Authentication Options

Authenticator App

Screenshot that says "Keep your Account Secure" and shows the link to download authenticator app

Download/Install

Download the app through the Google Play or Apple App store.

screenshot of apple app store screen

You will receive a pop-up message asking if you would like to receive notifications for the Authenticator app. *It is your preference but if you do not receive notifications then you will have to go to the app when receiving a push to authenticate (when you login into a system using MFA) so we suggest to allow notifications for this particular app.

screenshot of phone screen showing the 'allow notifications screen'

You will receive another message, notifying you about the app’s collection of non-personally
identifiable usage data.

screenshot showing notification about collecting personally identifiable data

Set Up

This is the first screen you will see

first screen during authenticator app set up

The second screen will prompt you to add your first account

authenticator screen prompting you so add your first account

The next screen requires you to go back to your browser and click next

setup account screenshot from browser

Scan the QR code using your phone camera/ Authenticator app

If asked to add another account then click the + and select work or personal account, then scan
QR code provided

Select to add a work or school account

screenshot showing what kind of account you want to add

USE your phone camera/Authenticator app to scan the image OR CLICK on “Can’t scan image”

screenshot of qr code that needs to be scanned by the camera in your phone

screenshot of phone camera scanning qr code on computer screen

IF you clicked “Can’t scan image” then you will see this screen next. It has a CODE and URL for
you to enter and create a new account.

ENTER both code and URL on phone.

screenshot showing how to manually add an account to the app

You should see this screen next:

screenshot of what you will see when you successfully add code and url from previous step

Click 'Next'

Screenshot of what you will see when you successfully add your new account

CLICK done and you should see a green pop up showing you were successful, click NEXT and
then Self-Service/WebAdvisor/Colleague screen should display.

*IF clicking “Done” does not close out the window or take you to another screen, on the first
click a green pop up says you were successful, additional clicks on “Done” a red pop up says
there was an error. Simply close out the browser if you have received the green pop up at least
once.

 

Alternative Method (Text or Phone Call)

To setup a different method other than that Authenticator app, click I want to set up a different method at the bottom of the prompt.

mfa example screen

Select phone from the drop down menu

mfa example screen

Click CONFIRM

mfa example screen

Enter the phone number you wish to use to verify your account each time you login and select a contact option – to Text you a code or to Receive a phone call.

mfa example screen

If you select to receive a code via text, then a code will be sent to verify your phone #

Enter the code and click Next

You will receive a message that your phone was registered successfully

mfa example screen

Click Next and you will see a screen that says success and displays the phone number you provided

Details

Details

Article ID: 133226
Created
Fri 5/14/21 10:53 AM
Modified
Wed 11/22/23 2:25 PM