MFA: How to Enroll in Multi-Factor Authentication (MFA) Using Microsoft Authenticator App (Existing Users)

The following steps will guide you through enabling multi-factor authentication (MFA) on your BSU account using the Microsoft Authenticator app on your smartphone. During the configuration, you will need to have access to both your smartphone and another device to browse the configuration screens. You may want to print this guide (or save as PDF), especially if you do not have either two monitors or a large enough screen to view both the instructions and the configuration page side-by-side. You can also watch this short video ahead of time to learn more about additional security verification https://go.microsoft.com/fwlink/?LinkId=821974

1. From the App Store, install the Microsoft Authenticator app on your phone. You need to allow notifications and camera access.
   1.    

2. On a second device, go to https://aka.ms/mfasetup and sign in to your account. Note: depending on your account configuration, you may need to verify your sign-in via a phone call or a text message.

3. If you see Security info screen, continue with step 4.  If you see Additional security verification screen, skip to step 6.
   1.    

4. On the Security info screen, click Add method, choose Authenticator app, and click Add.
   1.    

5. On the Microsoft Authenticator screen, click Next, Next, then skip to step 7.
   1.   

6. On the Additional security verification screen, select Notify me through app, select Authenticator app or Token, and click on Set up Authenticator app.
   1. 

7. When you see the screen with a QR code, go back to your phone, open the Microsoft Authenticator app, skip all the intro until you see Add account, click Add account and choose Work or school account.
   1.    

8. Using the phone camera, scan the QR code from the website you have opened on your other device, click Next. Note: an account is added to the Microsoft Authenticator app.
   1.    

9. A test notification will be sent to your phone, please click Approve, then click Next to complete the Microsoft Authenticator setup.
   1.    

10. On your other device (not phone), if you’re back on the Security info screen, click Change, choose Microsoft Authenticator – notification, and click Confirm.
    1.    

11. On your other device (not phone), if you’re back on the Additional security verification screen, click Save, click Verify prefer option, approve the push notification on your phone, and click Close.
    1.