LETU MFA: Configure Your MFA Settings

Faculty/Staff/LETU Associates

• Authenticator App
• Security Key (FIDO2)
• Passkey in Microsoft Authenticator
• Hardware OATH Tokens
• SMS/Phone Call (Only available for accounts created prior to August 1, 2024)

Students

• Authenticator App
• Security Key (FIDO2)
• Passkey in Microsoft Authenticator
• Hardware OATH Tokens
• SMS/Phone Call

MFA and Older Software

Initial Setup

1. After being required to setup MFA, you see a prompt like the one below when trying to login to your LETU email or Canvas. Go ahead and click next to begin the setup. 

2. You will then be prompted to install the Microsoft Authenticator app from the Apple AppStore or Android Play Store. Go ahead and get that installed and click next. (If you do not want to, or are unable to use the app, you can set it up with a phone number instead. Scroll down for instructions). 

3. At this point, you should have the app installed. The first time you open the app, you may see a welcome screen like the one below. Just keep tapping skip until you get to the screen where you can add your first account. 

1. Tap 'ADD ACCOUNT' as shown in the second screenshot below
2. Tap 'Work or school account'
3. You will be asked for permission to use the camera. Tap Allow or OK. This is needed to scan the QR code in the next step. You will then see the view from your phone's camera. 

4. On the computer, click 'Next' as shown in the screen below. 

5. You should now see the QR code that your phone was looking for earlier. Simply aim your phone's camera toward the QR code and it will automatically scan it once it is detected. 

6. Once the code has been scanned, you will see a screen similar to the one below. Ignore these numbers for now as they will only be used if for some reason Microsoft is not able to reach you with a notification. Go ahead and click next on the computer screen and a test notification will be sent to your phone like in the next screenshot below. Tap 'APPROVE'. 

7. You should then see a screen similar to the one below indicating the notification has been approved. Click 'Next'

8. Setup is now complete! Click 'Done' to continue to your destination. 

To setup with a phone number instead of the app:

At the screen below, click 'I want to set up a different method'

Then click the drop down menu and select 'Phone'

Select the country code that corresponds to your phone number and enter in your phone number without any spaces or dashes or parenthesis. 

Then choose whether you would prefer a text message or a call to authenticate and click 'Next'. At that point, you will either be texted a code or receive a call based on your selection. Continue following the instructions on the screen until you see a screen similar to the one below. 

To change your settings after initial setup: 

After you initially setup LETU MFA you may wish to update your settings. 

1. Sign in to https://myprofile.microsoft.com

2. Click on 'UPDATE INFO'

   

3. The next page that loads will show you all of your current active security methods.  If you need to add a backup security method, Click on '+ Add method'.  You can also edit your default sign-in method and change the phone number that is used for verification if it has been previously added on this page.   
   

4. Choose the authentication method you would like to add and follow the on-screen instructions. 
   
    

I want to change my phone number, or add a secondary number

It is important to configure a secondary authentication phone number. Because your primary phone number and your mobile app are probably on the same phone, the secondary phone number is the only way you will be able to get back into your account if your phone is lost or stolen.

To change your primary phone number:

1. On the Additional security verification page, select the text box with your current phone number and edit it with your new phone number.
2. Select Save.
3. If this is the number that you use for your preferred verification option, you have to verify the new number before you can save it.

To add a secondary phone number:

1. On the Additional security verification page, check the box next to Alternate authentication phone.
2. Enter your secondary phone number in the text box.
3. Select Save and your changes are finished.

Require two-step verification again on a device you've marked as trusted

You may use the checkbox that says "Don't ask again for X days" when you perform two-step verification on your browser. If you check this box and then lose your device or think that your account is compromised, you should restore two-step verification to all your devices.

1. On the Additional security verification page, select Restore multi-factor authentication on previously trusted devices.
2. The next time you sign in on any device, you'll be prompted to perform two-step verification.

How do I clean up Microsoft Authenticator from my old device and move to a new one?

When you uninstall the app from your device or reset the device, it does not remove the activation on the back end. For more information, see Microsoft Authenticator.

_{Source: https://docs.microsoft.com/en-us/azure/multi-factor-authentication/end-user/multi-factor-authentication-end-user-manage-settings#where-to-find-the-settings-page}