Enable multi-factor authentication for Office 365
Enable multi-factor authentication for Office 365 to prevent someone who steals your StarID password from accessing your campus Microsoft Office 365 account. Enabling multi-factor authentication (MFA) is a two-step process. First, turn on MFA in your Office 365 settings and specify your preferred verification method. Second, inform the Technical Support Center that you are ready to use MFA.
Step 1 - Adjust your Office 365 settings
- On any computer, use your favorite browser to navigate to https://account.activedirectory.windowsazure.com/Proofup.aspx and log in using the StarID@minnstate.edu (employees) or StarID@go.minnstate.edu (students) version of your username and your StarID password.
- Select Next on the More information required dialog box (Fig 1)
- In the first dropdown field, select the device you would like to use to verify your credentials (Fig 2). You will use this device to verify your selection, so pick one to which you have immediate access. The settings presented depend on the device you select:
- Authentication phone: Select this option if you prefer to be sent a robocall or text message with a one-time password (e.g., a random sequence of digits) to a mobile phone number you provide. Select your country or region, enter your mobile phone number, decide whether to receive a robocall or a text message (Fig 3), and select Next. You will receive either a text message or call immediately with a one-time password. Enter it in the space provided and select Verify to complete the process.
- Office phone: Select this option if you prefer to receive a robocall with a one-time password (e.g., a random sequence of digits) on the Winona State University office phone assigned to you in the campus directory. That number will appear in the fields provided automatically and cannot be changed (Fig 4). Select Next. You will receive a call on your office phone immediately with a one-time password. Enter it in the space provided and select Verify to complete the process. If you do not have an assigned Winona State University office phone, you cannot use this option. However, you will be able to specify an Alternate authentication phone number in your Office 365 security settings later (e.g., unlisted Winona State University phone, home office phone).
- Mobile app: Select this option if you prefer to use the Microsoft Authenticator app on your mobile phone to approve access. You can decide whether to receive a notification in the app that you can tap to "Approve" or use one of the rolling, one-time passwords generated by the app. Before you proceed, install the Microsoft Authenticator app on your mobile phone. Return to your computer and select your mobile app verification method. Then select Set up (Fig 5). A QR code will be displayed (Fig 6). Go back to the Microsoft Authenticator app, tap Add Accounts, then Work or School account. The app will ask for permission to use your camera, tap Allow. Then, use your phone to scan the QR code on your computer screen (Fig 7). Your account will be added to the app (Fig 8). Return to your computer and select Next and then Next again.
Step 2 - Submit MFA request
Once you have completed Step 1, browse to the Multi-factor Authentication Request page and select the Enable MFA button (Fig 9). Within 10 minutes, you will be prompted to sign in to Office 365 on any computer that is running any Winona State University Office 365 service (e.g., Outlook, Word, OneDrive). If you are not connected to Office 365 at the time, you will get the sign-in prompt the next time you try to connect. Enter your username and password as always and then use your selected multi-factor verification method to finish logging in.