Enable multi-factor authentication for Office 365

Enable multi-factor authentication for Office 365 to prevent someone who steals your StarID password from accessing your campus Microsoft 365 account. Adjust your Microsoft 365 security settings and specify your preferred verification method.

Adjust your Microsoft 365 security settings

On any computer, use your favorite browser to navigate to https://account.activedirectory.windowsazure.com/Proofup.aspx and log in using the StarID@minnstate.edu (employees, guest accounts) or StarID@go.minnstate.edu (students) version of your username and your StarID password.
Select Next on the More information required dialog box (Fig 1)
In the first dropdown field, select the device you would like to use to verify your credentials (Fig 2). You will use this device to verify your selection, so pick one to which you have immediate access. The settings presented depend on the device you select:

Authentication phone: Select this option if you prefer to be sent a robocall or text message with a one-time password (e.g., a random sequence of digits) to a mobile phone number you provide. Select your country or region, enter your mobile phone number, decide whether to receive a robocall or a text message (Fig 3), and select Next. You will receive either a text message or call immediately with a one-time password. Enter it in the space provided and select Verify to complete the process.

Office phone: Select this option if you prefer to receive a robocall with a one-time password (e.g., a random sequence of digits) on the Winona State University office phone assigned to you in the campus directory. That number will appear in the fields provided automatically and cannot be changed (Fig 4). Select Next. You will receive a call on your office phone immediately with a one-time password. Enter it in the space provided and select Verify to complete the process. If you do not have an assigned Winona State University office phone, you cannot use this option. However, you will be able to specify an Alternate authentication phone number in your Office 365 security settings later (e.g., unlisted Winona State University phone, home office phone).

Mobile app: Select this option if you prefer to use the Microsoft Authenticator app on your mobile phone to approve access. You can decide whether to receive a notification in the app that you can tap to "Approve" or use one of the rolling, one-time passwords generated by the app. Before you proceed, install the Microsoft Authenticator app on your mobile phone. Return to your computer and select your mobile app verification method. Then select Set up (Fig 5). A QR code will be displayed (Fig 6). Go back to the Microsoft Authenticator app, tap Add Accounts, then Work or School account. The app will ask for permission to use your camera, tap Allow. Then, use your phone to scan the QR code on your computer screen (Fig 7). Your account will be added to the app (Fig 8). Return to your computer and select Next and then Next again.

Screenshots

Fig 1. Select Next
Fig 2. Select the first field (1) and select preferred device from menu (2)
Fig 3. For Authentication phone, enter country/region (1) and mobile phone number (2), and select a verification method (3)
Fig 4. For Office phone, check the entry for accuracy and select Next
Fig 5. For Mobile app, select verification method (1) and select Set up (2)
Fig 6. For Mobile app, a QR code will appear on computer screen
Fig 7. For Mobile app, use Microsoft Authenticator app to scan QR code
Fig 8. For Mobile app, your WSU account is now added to the Microsoft Authenticator app
Fig 9. Select the Enable MFA button.