2-MFA setup on an iPhone/iPad
Multi Factor Authentication (MFA) is a secondary authentication method besides a password; commonly a code from a text, call, or app. This is also sometimes call two-step verification. Click here for more info.
Prerequisites (WHAT you will need)
- Smartphone (personal or work provided one) connected to internet & has reception
- A computer connected to the internet
MFA setup on iPhone/iPad
You never need to enter your email into your smartphone/tablet for MFA. Setup/registration is done only once for each device.
- On your phone go to the App Store & search for 'Microsoft Authenticator' tap Get, then Open. You may be prompted to enter in your Apple iCloud password
- Tap I agree at data privacy prompt. Tap Scan a QR code
- IF you don't see a "Scan a QR code" prompt tap Add account (or plus at top-right), tap Continue at backup prompt, tap Work or school account, tap Scan QR code
- Tap OK to, "Authenticator" Would Like to Access the Camera prompt. This is required to scan a QR barcode. Tap Allow to, "Authenticator" Would Like to Send You Notifications. Set your phone down
- On a computer go to URL: https://aka.ms/mfasetup
- Sign in with your work email & computer password. Click Next on the prompt More information required
- Keep your account secure appears. Click Next two times. A QR barcode is shown
- On your phone: scan the QR code display on your computer screen
- After QR code has been scanned your work email address will display on your phone & you may receive a "App Lock enabled" prompt where you tap OK
- On the computer click Next (QR code should go away). Let's try it out should be displayed
- On your phone the Authenticator app will prompt for approval which requires entering number seen on PC then press Done/Yes/Approve. This may be in notifications on your phone. Authenticator app may also prompt for your phones PIN/fingerprint/face
- On the computer it should show Notification approved. Click Next. Click Done
Add a second fail-safe authentication method - Optional, but highly recommended
Should your smartphone/tablet be dead, replaced, wiped, lost this will ensure you can still work remotely. If work equipment is ever lost notify IT immediately.
- On your work computer or RDS go to URL: https://aka.ms/mfasetup then sign in with your work email & computer password
- Click 'Add sign-in method', choose Phone in the drop-down, Add:
- Enter a personal cell phone number, if you do not have a personal cell phone number, enter your work cell phone number
- If you do not have a personal cell or a work cell, please enter any phone number you can receive calls or texts on
- The phone number you enter WILL be verified with a SMS text message or call
- Click Text or Call (depending on the phones capabilities). Click Next
- Enter the code from the SMS text OR answer the call following its prompts to confirm your phone number
- Click Next. Click Done
Adding a new phone/tablet
- On your work computer or RDS go to URL: https://aka.ms/mfasetup then sign in with your work email & computer password
- Approve the sign-in on the old phone/tablet or telephone. If you no longer have the old phone/tablet you may be able to click 'I can't use my Microsoft...' prompt to authenticate another way (phone or text). If you cannot get past this prompt please engage IT dept
- Click 'Add sign-in method', choose 'Authenticator app' in the drop-down, Add
- Follow the steps (which are basically the same as #6 above)
- Verify the 'Default Sign-in method' is the one you desire. Click Change if needed
- Delete the old phone/tablet. The model is shown (SM-G970U in example below):
- Its suggested you add a telephone method as well. This will allow you to make changes in the future with an old phone/tablet so works as a backup
Works Cited