Difference between revisions of "Multi-factor authentication for Office 365"

From WSU Technology Knowledge Base
Jump to navigation Jump to search
(36 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
{{TOC_Float_Right}}
 
{{TOC_Float_Right}}
−
'''Multi-factor authentication (MFA) for Office 365''' is available to all {{WSU}} students and employees for securing your access to our primary campus messaging, file storage, collaboration, and productivity system. Once you enable MFA, you will verify your credentials using a second method only available to you (e.g., respond to a notification sent to your phone) when signing in to your {{WSU}} Microsoft Office 365 account. You can change your default verification method any time. MFA is the best way to prevent someone who steals your StarID password from accessing your Office 365 account.
+
'''Multi-factor authentication for Office 365''' is available to all {{WSU}} students and employees for securing your access to our primary campus messaging, file storage, collaboration, and productivity system. Once multi-factor authentication (MFA) is enabled, you will verify your StarID credentials using a second step available to you only (e.g., respond to a notification sent to your phone) when signing in to your Microsoft Office 365 account. MFA is the best way to prevent someone who steals your StarID password from accessing your Office 365 account.
  
−
==How to enable MFA==
+
==Enable MFA==
  
−
Enabling MFA on your [[Microsoft Office 365|Microsoft Office 365]] account is a two-step process. First, [[Enable multi-factor authentication for Office 365|turn on MFA in your Office 365 settings]] and specify your preferred verification method. Second, inform the {{TSC}} that you are ready to use MFA. Within 15 minutes of receiving an email confirmation from the TSC, you will be prompted to sign in to your Office 365 account using MFA.
+
Enabling MFA on your [[Microsoft Office 365|Microsoft Office 365]] account is a two-step process:
 +
#[[Enable multi-factor authentication for Office 365|Turn on MFA in your Office 365 settings]] and specify your preferred verification method
 +
#Browse to the [https://apps.powerapps.com/play/825f9f00-0767-4ce2-a691-f61eb7b5c07a?tenantId=5011c7c6-0ab4-46ab-9ef4-fae74a921a7f Multi-factor Authentication Request page] and select the '''Enable MFA button'''.
  
−
==Understand your initial options==
+
==Your initial verification options==
−
MFA for Office 365 makes use of your phones and other mobile devices to verify your Office 365 credentials. When you first enable MFA, your three verification options are:
+
MFA for Office 365 uses your phone as a second step to verify your Office 365 credentials. When you first enable MFA, your three verification options are:
  
 
===Authentication phone===
 
===Authentication phone===
Line 13: Line 15:
  
 
===Office phone===
 
===Office phone===
−
Choose this option to receive a one-time password via a robocall to the {{WSU}} office phone assigned to you in the [[Update your campus directory information|campus directory]].
+
Choose this option to receive a confirmation request via a robocall to the {{WSU}} office phone assigned to you in the [[Update your campus directory information|campus directory]].
  
 
===Mobile app===
 
===Mobile app===
−
Choose this option to use the [[Microsoft Authenticator]] app to approve access. You can decide whether to receive a notification from the app that you can simply select to "Approve" or use one of the rolling, one-time passwords generated by the app. This method allows you to use any device on which the Microsoft Authenticator app is installed and configured to verify access. This includes your mobile phone, tablet, or even an Apple Watch.
+
Choose this option to use the [[Microsoft Authenticator]] app to approve access. You can decide whether to receive a notification from the app that you can tap to approve access or use one of the rolling, one-time passwords generated by the app. Use any device on which the Microsoft Authenticator app is installed, including your mobile phone, tablet, or smartwatch.
  
−
==Personalize your settings==
+
==Personalize your MFA settings==
 
Once you have completed the initial setup, you can [[Change multi-factor authentication settings for Office 365|edit your MFA settings]] at any time to:
 
Once you have completed the initial setup, you can [[Change multi-factor authentication settings for Office 365|edit your MFA settings]] at any time to:
  
 
===Add an alternate phone===
 
===Add an alternate phone===
−
Add an alternate phone as a verification backup, just in case you cannot access your authentication phone, office phone, or any device with the Microsoft Authenticator app configured. If you enable this option, you will receive a robocall with a one-time password sent to an alternate phone number (e.g., your home phone).
+
Add a third phone as a verification backup, in case you cannot access your primary authentication phone, office phone, or any device with the Microsoft Authenticator app configured. If you enable this option, you choose to receive a confirmation request via a robocall to an alternate phone number (e.g., your home phone).
  
 
===Enable multiple backup verification methods===
 
===Enable multiple backup verification methods===
−
Enable any of the other three verification methods as fail-safes. If your default method fails or is unavailable (e.g., your mobile phone's battery is dead), you can use a different method instead.
+
Enable any of the other verification methods as fail-safes. If your default method fails or is unavailable (e.g., your mobile phone's battery is dead), you can use a different method instead.
  
 
===Change settings===
 
===Change settings===
−
Change phone numbers, choose a different verification default, or enable/disable the other three verification methods.
+
Change phone numbers, choose a different verification default, or enable/disable the other verification methods.
  
 
===Pair or remove Microsoft Authenticator devices===
 
===Pair or remove Microsoft Authenticator devices===
−
Pair other devices running the Microsoft Authenticator app with your {{WSU}} Office 365 account and remove existing devices.
+
Pair other devices running the Microsoft Authenticator app with your {{WSU}} Office 365 account or unpair existing devices.
  
 
==Our recommendation==
 
==Our recommendation==
−
{{WSU}} Information Technology Services strongly recommends using the Microsoft Authenticator app as your default verification method, while enabling the other three methods as fail-safes. [[Microsoft Authenticator|Install the app]] on any Apple or Android mobile phone or tablet to which you have continuous access and that is connected to the Internet via your cellular data plan and/or WiFi service.
+
{{WSU}} Information Technology Services strongly recommends using the Microsoft Authenticator app as your default verification method, while enabling the other three methods as fail-safes. [[Microsoft Authenticator|Install the app]] on any Apple or Android mobile phone or tablet to which you have continuous access and that is connected to the Internet via your cellular data plan or WiFi service.
  
 
==More wiki articles==
 
==More wiki articles==
−
*[[Frequently asked questions about multi-factor authentication for Office 365|Frequently asked questions about Office 365 multi-factor authentication]]
+
*[[Microsoft Authenticator|How to install the Microsoft Authenticator app]]
 
*[[Enable multi-factor authentication for Office 365|How to enable multi-factor authentication on your Office 365 account]]
 
*[[Enable multi-factor authentication for Office 365|How to enable multi-factor authentication on your Office 365 account]]
 
*[[Change multi-factor authentication settings for Office 365|How to change your Office 365 multi-factor authentication settings]]
 
*[[Change multi-factor authentication settings for Office 365|How to change your Office 365 multi-factor authentication settings]]
−
 
+
*[[Enable multi-factor authentication on personal accounts|How to enable multi-factor authentication on your personal accounts]]
−
==Downloads==
+
*[[Frequently asked questions about multi-factor authentication for Office 365|Frequently asked questions about Office 365 multi-factor authentication]]
−
*[https://learn.winona.edu/images/b/be/Office365MFA.pdf Printable MFA Setup Instructions]
 
  
 
==External links==
 
==External links==
 
*[https://en.wikipedia.org/wiki/One-time_password What's a one time password?]  
 
*[https://en.wikipedia.org/wiki/One-time_password What's a one time password?]  
 +
*[https://enterprise.verizon.com/resources/reports/dbir/ Verizon 2019 Data Breach Investigations Report]
 
*[https://www.forbes.com/sites/enriquedans/2018/12/04/no-doubt-about-it-your-password-has-been-stolen No doubt about it: Your password has been stolen]
 
*[https://www.forbes.com/sites/enriquedans/2018/12/04/no-doubt-about-it-your-password-has-been-stolen No doubt about it: Your password has been stolen]
 
*[https://thenextweb.com/google/2019/05/23/google-data-shows-2-factor-authentication-blocks-100-of-automated-bot-hacks/ Google data shows 2-factor authentication blocks 100% of automated bot hacks - The Next Web]
 
*[https://thenextweb.com/google/2019/05/23/google-data-shows-2-factor-authentication-blocks-100-of-automated-bot-hacks/ Google data shows 2-factor authentication blocks 100% of automated bot hacks - The Next Web]
Line 51: Line 53:
 
*[https://www.wired.com/story/two-factor-authentication-apps-authy-google-authenticator/ How to Secure Your Accounts with Better Two-Factor Authentication - Wired.com]
 
*[https://www.wired.com/story/two-factor-authentication-apps-authy-google-authenticator/ How to Secure Your Accounts with Better Two-Factor Authentication - Wired.com]
  
−
[[Category:Security]][[Category:Microsoft Office 365]][[Category:MFA]]
+
[[Category:Security]][[Category:Microsoft Office 365]][[Category:MFA]][[Category:Keep Working]]

Revision as of 14:46, 11 May 2020

Multi-factor authentication for Office 365 is available to all Winona State University students and employees for securing your access to our primary campus messaging, file storage, collaboration, and productivity system. Once multi-factor authentication (MFA) is enabled, you will verify your StarID credentials using a second step available to you only (e.g., respond to a notification sent to your phone) when signing in to your Microsoft Office 365 account. MFA is the best way to prevent someone who steals your StarID password from accessing your Office 365 account.

Enable MFA

Enabling MFA on your Microsoft Office 365 account is a two-step process:

  1. Turn on MFA in your Office 365 settings and specify your preferred verification method
  2. Browse to the Multi-factor Authentication Request page and select the Enable MFA button.

Your initial verification options

MFA for Office 365 uses your phone as a second step to verify your Office 365 credentials. When you first enable MFA, your three verification options are:

Authentication phone

Choose this option to receive a one-time password (e.g., a random sequence of digits) via a robocall or text message sent to a phone number you provide. Although this does not need to be a smartphone, the text messaging option does require a compatible phone. Text messages will arrive via your phone's default messaging app (e.g., Apple iMessage).

Office phone

Choose this option to receive a confirmation request via a robocall to the Winona State University office phone assigned to you in the campus directory.

Mobile app

Choose this option to use the Microsoft Authenticator app to approve access. You can decide whether to receive a notification from the app that you can tap to approve access or use one of the rolling, one-time passwords generated by the app. Use any device on which the Microsoft Authenticator app is installed, including your mobile phone, tablet, or smartwatch.

Personalize your MFA settings

Once you have completed the initial setup, you can edit your MFA settings at any time to:

Add an alternate phone

Add a third phone as a verification backup, in case you cannot access your primary authentication phone, office phone, or any device with the Microsoft Authenticator app configured. If you enable this option, you choose to receive a confirmation request via a robocall to an alternate phone number (e.g., your home phone).

Enable multiple backup verification methods

Enable any of the other verification methods as fail-safes. If your default method fails or is unavailable (e.g., your mobile phone's battery is dead), you can use a different method instead.

Change settings

Change phone numbers, choose a different verification default, or enable/disable the other verification methods.

Pair or remove Microsoft Authenticator devices

Pair other devices running the Microsoft Authenticator app with your Winona State University Office 365 account or unpair existing devices.

Our recommendation

Winona State University Information Technology Services strongly recommends using the Microsoft Authenticator app as your default verification method, while enabling the other three methods as fail-safes. Install the app on any Apple or Android mobile phone or tablet to which you have continuous access and that is connected to the Internet via your cellular data plan or WiFi service.

More wiki articles

External links

Retrieved from "https://learn.winona.edu/w/index.php?title=Multi-factor_authentication_for_Office_365&oldid=66985"