ITS

Two-Factor Authentication

Updated on

This guide is intended for employees, students, and others who need to use Microsoft 365 (hereafter M365) or ITSvpn.

The guide describes how to set up two-factor authentication on your M365 login and use it daily.

Two-factor authentication helps increase security by adding an extra layer of security to your login. It is designed to ensure that you are the only one who can access your account, even if someone knows your password.

Expand or collapse content Installation of Microsoft Authenticator and Setup of Two-Factor Authentication

If you can set up two-factor authentication on multiple devices (mobile phones/tablets), it is recommended to do so to reduce the risk of needing IT support to reset your two-factor profile if you lose your mobile.

Note that setting up two-factor authentication requires using both your computer and mobile phone. Each time you need to switch from computer to mobile or vice versa, it will be indicated in the guide.

  1. Start by opening the website https://aka.ms/mfasetup from your computer in a private browser window. If you have this guide open in Google Chrome, Safari, or Microsoft Edge, you can right-click the link and select "Open link in incognito window" (Chrome), "New private window" (Safari), or "Open link in InPrivate window" (Edge).
  2. Log in with your ITS M365 username.
  3. Select Next.

 

You may be asked to enter your ITS M365 username multiple times.

You will then be asked to continue the installation from your mobile phone.

  1. Download the "Microsoft Authenticator" app on your mobile phone or tablet.
    • If you do not already have the Microsoft Authenticator app, you can download it by scanning one of the QR codes below or using one of the following direct links: Apple App Store, Google Play
    • Allow the app to send you notifications if you want to receive a notification each time you need to approve a login to M365 or VPN.
  1. Then select Next on the computer.

If you already have an ITS M365 account in Microsoft Authenticator on your mobile phone or tablet, you need to delete it and create a new one.

  1. Add your ITS M365 account:
    • Open the Microsoft Authenticator app on your mobile phone.
    • Select +.
    • Select "Work or school account".
    • Select "Scan a QR code".
  1. Select Next on the computer.
  1. Select "Scan QR code".
    • With your mobile phone or tablet, scan the QR code displayed on your computer.
  2. Select Next on the computer.

Approve the message in the app on your mobile phone, and Microsoft Authenticator is now set up.

You now need to link your mobile phone number to Microsoft Authenticator on the computer.

  1. Select the correct country code (i.e. Denmark (+45)) and enter the desired mobile phone number.
  2. Check the box for Send me a code via SMS.
  3. Select Next.

Microsoft Authenticator will now send an SMS with a code that needs to be entered. Two-factor authentication is now fully configured.

  1. Select Done.
Expand or collapse content Using Microsoft Authenticator

If you are not on the ITS/school network or connected to VPN, you will be asked to validate/approve on your mobile phone to access M365. If you are on the ITS/school network or VPN, validation/approval will not be necessary.

However, there may be different scenarios regarding when you are asked for approval. Some M365 programs/apps allow you to postpone the next validation by 14 days on the individual device.

The example below shows how the computer asks you to approve your login request by entering the numbers shown in the Microsoft Authenticator app.

To approve, do the following:

  1. Tap the notification you received on your mobile phone, or open the Microsoft Authenticator app directly.
  2. Enter the number shown on the computer.
  3. Approve by tapping Yes.
Expand or collapse content I got a new phone / I lost my phone / My phone is broken

If you have only set up Microsoft Authenticator on one device and you have replaced it, lost it, or it is broken, you need to reset your two-factor profile so you can set it up again on a new mobile phone.

This is done by contacting IT support at the school.

To avoid this, it is recommended to set up two-factor authentication on multiple devices (mobile phones/tablets) if possible.

Expand or collapse content My mobile phone does not support the Microsoft Authenticator app

If you cannot use the Microsoft Authenticator app, you can use a YubiKey instead.

A YubiKey is a digital security key that functions as a two-factor authentication method. When you insert the key into your computer (USB port) and are asked for two-factor authentication, you need to press the YubiKey, enter the code for it, and you will then be authenticated with two-factor authentication. Thus, a YubiKey can be used instead of, for example, the Microsoft Authenticator app on your phone.

You can purchase a YubiKey from several suppliers - for example, through Dustin.

Depending on the connection options you have on your computer (USB or USB-C), the following YubiKeys are recommended:

When you have obtained a YubiKey, you need to contact IT support at your school to set up the YubiKey as two-factor authentication.

Forrige Vejledning Opsæt YubiKey som to-faktor-godkendelse
Næste Vejledning Setting Up Two-Factor Authentication - Short Version

ITS er et IT-fællesskab blandt skoler i Midt- og Nordjylland med base i landets tredje største uddannelsesinstitution VIA.
ITS leverer en bred vifte af de it-ydelser til skolerne.
De enkelte skoler udarbejder selv vejledninger, men på dette site findes en række vejledninger fra ITS.
Evt. kommentarer eller spørgsmål til vejledningerne kan rettes til skolens lokale IT-supporter.

Andre vejledninger

 Print Vejledning