2-MFA setup on an Android Google smartphone/tablet

2-MFA setup on an Android Google smartphone/tablet

Multi Factor Authentication (MFA) is a secondary authentication method besides a password; commonly a code from a text, call, or app. This is also sometimes call two-step verification. Click here for more info.

Prerequisites (WHAT you will need)

  1. Smartphone (personal or work provided one) connected to internet
  2. A computer connected to the internet

MFA setup on Google Android Smartphone/Tablet

You never need to enter your email into your smartphone/tablet for MFA. Setup/registration is done only once for each device.
  1. On your phone open the Play Store app & search for 'Microsoft Authenticator' tap Install, then Open. You may be prompted to enter in your gmail password
    1. IF prompted to Complete account setup tap CONTINUE then tap Skip in bottom-left of 'add payment option...' prompt
  2. Tap I agree at data privacy prompt. Tap Scan a QR code
    1. Alternatively tap three dots in top corner,  Add account, tap work or school account, tap Scan a QR code. IF prompted to "Pick an account to continue" tap back  & Finish
  3. At "Allow Authenticator to take pictures and record video?" prompt tap Allow or While using the app. This is required to scan a QR barcode. Set your phone down
  4. On a computer go to URL: https://aka.ms/mfasetup
  5. Sign in with your work email & computer password. Click Next on the prompt More information required
  6. Keep your account secure appears. Click Next two times. A QR barcode is shown
  7. On your phone: scan the QR code display on your computer screen

    1. After QR code has been scanned your work email address will display on your phone & you may receive a "App Lock enabled" prompt where you tap OK
  8. On the computer click Next (QR code should go away). Let's try it out should be displayed
  9. On your phone the Authenticator app will prompt for approval which requires entering number seen on PC then press Done/Yes/Approve. This may be in notifications on your phone. Authenticator app may also prompt for your phones PIN/fingerprint/face
  10. On the computer it should show Notification approved. Click Next. Click Done

Add a second fail-safe authentication method - Optional, but highly recommended

Should your smartphone/tablet be dead, replaced, wiped, lost this will ensure you can still work remotely. If work equipment is ever lost notify IT immediately.
  1. On your work computer or RDS go to URL: https://aka.ms/mfasetup then sign in with your work email & computer password
  2. Click 'Add sign-in method', choose Phone in the drop-down, Add:

  3. Enter a personal cell phone number, if you do not have a personal cell phone number, enter your work cell phone number
    1. If you do not have a personal cell or a work cell, please enter any phone number you can receive calls or texts on
    2. The phone number you enter WILL be verified with a SMS text message or call
  4. Click Text or Call (depending on the phones capabilities). Click Next

  5. Enter the code from the SMS text OR answer the call following its prompts to confirm your phone number
  6. Click Next. Click Done

Adding a new phone/tablet

  1. On your work computer or RDS go to URL: https://aka.ms/mfasetup then sign in with your work email & computer password.
  2. Approve the sign-in on the old phone/tablet. If you no longer have the old phone/tablet you may be able to click 'I can't use my Microsoft...' prompt to authenticate another way (phone or text). If you cannot get past this prompt please engage IT dept
  3. Click 'Add sign-in method', choose 'Authenticator app' in the drop-down, Add
  4. Follow the steps. Step #6 above provides more details
  5. Verify the 'Default Sign-in method' is the one you desire. Click Change if needed
  6. Delete the old phone/tablet. The model is shown (SM-G970U in example below):
  7. Its suggested you add a telephone method as well. This will allow you to make changes in the future with an old phone/tablet so works as a backup

Sources

    • Related Articles

    • 1-What is MFA Multi Factor Authentication

      WHAT is MFA Multi-Factor Authentication (MFA) means providing a secondary authentication method besides a password; commonly a code from a text, call, or app. This is also sometimes call two-step verification. WHY do we need it This is an enhanced ...

    • Sign in to Nexus Sites/Apps From Personal Devices via SSO+Multi-Factor-Authentication (MFA)

      Multi Factor Authentication (MFA) is a secondary authentication method besides a password; commonly a code from a text, call, or app. This is also sometimes call two-step verification. Click here for more info. SSO: Single Sign-On is a method to ...

    • 2-MFA setup on a iPhone/iPad

      Multi Factor Authentication (MFA) is a secondary authentication method besides a password; commonly a code from a text, call, or app. This is also sometimes call two-step verification. Click here for more info. Prerequisites (WHAT you will need) ...

    • Add Microsoft Authenticator as a Multi-Factor Authentication (MFA) Method

      You can use these steps to add Microsoft Authenticator as an MFA method. This can be used to add Microsoft Authenticator to a new phone, or to add it for the first time also. You will need access to at least one of your current MFA methods to ...

    • Access UKG/Employee Hub from Mobile Devices

      Multi Factor Authentication (MFA) is a secondary authentication method besides a password; commonly a code from a text, call, or app. This is also sometimes call two-step verification. Click here for more info. SSO: Single Sign-On is a method to ...