Deploying Microsoft MFA on another device


Deploying Multi-Factor Authentication (MFA) on another device when you already have MFA enabled e.g. on your work phone and you want it also on your personal phone.

 

This guide is also applicable for installing the MFA when you replace your device with a new one: Enable MFA on your new device before you remove it from your old device. Start by going to the Security Info page (https://mysignins.microsoft.com/security-info) on your computer. Follow the instructions to add a new device. Once you have successfully installed the Authenticator app on your new device, you can uninstall the app from your old device or reset your phone.

 

More information on multi-factor authentication on the Digital Services website:

Multifactor authentication in University of Jyväskylä

Enabling your Microsoft MFA

 

Setup is recommended to be done on your computer, and you will also need a phone to install the Microsoft Authenticator application on.

 

1. Check that the software on your phone is up to date. Update it if it's not! You can check this by going to your phone settings and from there to Software Update (System Update).

2. Go to:  https://mysignins.microsoft.com/security-info on your computer. Log in with your JYU account if you haven't done that already. NOTE! To log in to Microsoft services, use the username@jyu.fi login. Check that you’re on the page the Security info.

3. On the Security info- page, select "+Add sign-in method".

In the picture you are in the Microsoft account settings Security info - My Sign-Ins. Select "Add login method" from the page.

 

4. After that screen will appear where you are, asking you to add a method. Select the Authenticator app and press "Add".

After clicking on "+Add sign-in method", a new window will appear asking you to select a method. Select the Authenticator app.

 

5. The program will then ask you to download the Microsoft Authenticator app to your phone from the Google Play or Apple App Store. Don't open the app yet! Once you have downloaded the app, press the Next button on your computer.

Next, you will be presented with a page asking you to install the Microsoft Authenticator application on your phone. Install the application on your phone and click "Next".

 

6. The program will ask you to set up an account, but you can skip this by pressing Next. Use the QR code to configure!

You will then be asked to add an account. Don't do this yet! Click "Next".

 

7. The program will then ask you to scan a QR code with your phone. Don't press the Next button yet! At this point the installing is switched on your phone.

Now you will see a QR code. Proceed with the installation on your phone.

 

8. Open the Authenticator app on your phone. Accept the terms of use. Select Scan QR code. On your phone, the app will ask you to allow the camera to take pictures and record videos. Press "Allow this once". Read the QR code on your computer screen.

Puhelin MFA

 

Your phone will notify you that the installation was successful and switches to the home page showing your JYU ID. After scanning, press Next, on your computer .

Now you can click on the "Next" button on the QR code page on your computer.

 

The program tests that the MFA is working. When you receive the MFA notification, put the two numbers displayed on your computer screen into the Authenticator notification box on your phone and click "Yes". Enter the PIN code in the Access code for your phone screen.

Now the page suggests testing Authentication. You will see two numbers that you enter into the Authenticator app on your phone.

 

9. Once you have accepted the MFA authentication on your phone, a "Notification accepted" message will appear on your computer screen. Click Next:

You will receive a notification on your computer that the authentication was accepted. Click "Next".

 

10. You will now notice a new section on the Security Information page, showing the model of your phone. (You may need to refresh the page again.) This is how you know that the enabled of MFA has been successful. Here you can add more devices that you want to use to verify your login.

Now you are back on the Security Information page, My sign-Ins. Once you have updated the page, your phone model will appear in the list.

 

11. Multi-factor authentication is now available on the device you have added, and you can accept authentication queries from any device you have added.

 

Check also: Multifactor authentication - Frequently asked questions