Knowledgebase

MFA Help and Settings

Help and settings related to multi-factor authentication.

Authentication Settings

Add more sign-in methods, or make changes to verification devices, go to the top right of any Microsoft app to your settings (Circle with your initials) and click View Account.
Image of Outlook on the web view account dialog
 
Click Security Info on the left side of the page.
Image of security info dialog
 

Add Another Device

From the Security Settings in your Account, click Add Method
Image of add a method dialog
 

Setting up an Office Phone

Go to Security Info in your account settings and click Add Method. Choose Office Phone.
Image of add a phone dialog
 

Setting Up Authenticator App

Utilize the links below for assistance with installing the Authenticator app
https://www.microsoft.com/en-us/security/mobile-authenticator-app?cmp=vgfp7d_40oczo
 
Helpful Hints for Setting up the App:

You can add the Authenticator app as a method for more than one device, such as a tablet or cell phone. Be advised that your Security Info page has a short timeout window. Download the app first before logging in to your security info page to ensure you can complete all steps without your webpage timing out

Once your app is installed, go to the settings within the Authenticator app at the top right to check Settings. This is where you will go to Add Account for your Fort Lewis email when you are prompted to scan the QR code in the initial setup. Within Settings, Scroll to Security Capture and turn on to allow your app to scan the QR code for initial setup.

Consider also turning on App Lock. This setting locks your Authenticator app and requires an unlock pattern when you are prompted to authenticate your account. If you were to lose your phone, this prevents someone else from authenticating your account as you.

You can also choose to require a Biometric fingerprint or PIN number instead of the lock option above to increase your security.

Refer to the Microsoft reference pages on their webpage if you have issues completing the app setup.
https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-auth-app-download-install

Change Your Default Device

Go to the icon at the top right corner of Outlook and click View Account.
Image of Outlook on the web view account dialog
 
Go to Security Info on the left tab. This takes you to My Sign-Ins. Next to Default Sign-In method will be your current default set.
Image of security info dialog
 
Click Change and choose from another option.
Image of change default method dialog
Confirm your change.
 

Alter or Remove a Device

From the Security Info Tab, you will see your list of all activated devices. Each device has the option to the right to change certain devices like the phone number or email assigned. You will be prompted to verify a new device to complete a change. You can also remove the device as a sign-in method by clicking Delete.
Image of list of devices
 
 

I lost my Phone or got a new one. How do I update my sign-in Device?

You should be able to access your Microsoft account from your work computer. If you are connected to the FLC VPN or on campus, you should remain logged in to your Microsoft Account without being prompted.
 
From Outlook, click on the far top right initials icon on the browser and go to View Account. Click Security Info. This is where you can make changes to your current default sign-in method, add other methods, edit existing methods, and sign out on all devices if needed.
  1. Ensure you have more than one sign-in method on your account. You should have at least 2 methods set up at all times. 
  2. If your default sign-in method is your old/lost phone, or the Authenticator Mobile app, Click Change next to Default Sign-In Method and update it to another method that you can access immediately.
  3. Now is a good time to Add your new phone. Click Add Method to add the Phone. If your previous Phone was set up and you have a new phone number, you can alternatively click Change next to the number and update it to the new phone. You will be prompted to verify the new device.
  4. In your Security Info, Delete the Microsoft Authenticator app from your methods list. If you are able to access your old phone, uninstall the Authenticator App from the old phone.
  5. Add a Method and set up the Authenticator Mobile App on your new phone.
  6. Once you have ensured you have updated your default sign-in method, Click Sign Out Everywhere. You will be prompted to sign in to your Microsoft account. The old phone will now be unable to access your account.
Image of security info dialog
 

What if I am unable to verify when trying to log in to my account?

Example: I left my phone at home and was prompted to verify while on campus.
 
If you are unable to verify with your default sign-in method, under the code entry on your browser window, click “I can’t use my Authenticator App right now”.. This should provide you with the list of other devices you have set up as methods to choose how you would like to sign in. You should always have at least 2 devices configured.
Image of approve sign in request dialog
 
If you are still unable to log in to your Microsoft account, reach out to the IT Help desk:
Attached Files
Updated on Tue, 15 Feb 2022 by Bodine, James