Disable SMS and voice as an authentication factor

This knowledgebase article describes how to download, install, and configure the Microsoft Authenticator App and then disable less secure methods of multi-factor authentication (MFA). The IT Service Center is available to help answer any questions at itsupport@bridgew.edu or 508-531-2555.

The IT Security Office strongly recommends all members of the campus community disable SMS (text) messages and voice (phone calls) as a second factor of authentication to satisfy the University's Multi-Factor Authentication (MFA) requirement. SMS messaging and phone calls are susceptible to SIM swapping attacks, are not encrypted, phone number porting, and is less secure than using the Microsoft Authenticator App.

Download - Install - Configure the Microsoft Authenticator App

If you already have the Microsoft Authenticator App, you can skip to the section titled "Disable SMS and Voice as an Authentication Factor" below. 

Step One: go to the following website on your computer: https://aka.ms/mfasetup

Step Two: select "Add sign-in method":

 Uploaded Image (Thumbnail)


 

Step Three: Select Microsoft Authenticator:

Uploaded Image (Thumbnail)

Step Four: Follow the instructions on the screen to download the authenticator app and connect it to secure your BSU account.

Disable SMS and Voice as an Authentication Factor

Below are instructions to disable SMS and voice as an authentication factor for MFA. Instead of disabling SMS and voice, you can set the Microsoft Authenticator App as the default sign-in method. 

Step One: go to the following website on your computer: https://aka.ms/mfasetup

Step Two: select "delete" next to each phone number 

 

Configure the Microsoft Authenticator App as the Default Sign-in Method