Device Registration Instructions – Microsoft Multi Factor Authentication
Please Read before proceeding with MFA Registration: If you are upgrading your mobile device and it currently has the Microsoft Authenticator App installed, please contact the IT Service Desk when you purchase a new mobile device so that we can remove and add your new device.
Your Mobile Device has to be registered in order for the Multi-Factor Authentication to work with your Mobile Device. If you go and purchase a new phone, download the Microsoft Authenticator app and add your account, it wont work as it needs to be registered.
To start the registration process go to https://aka.ms/mfasetup on your computer (desktop or laptop, UNBC or personal).
Registration requirements:
- A computer (desktop or laptop, UNBC or personal, it doesn’t matter)
- A mobile device (to install the Microsoft Authenticator app)
Very Important Info:
- You do not need to sign in to the Microsoft Authenticator app. As per the instructions below, you use the app to scan the QR code presented on the computer screen
- Do not uninstall/remove the Microsoft Authenticator app from your device. You will receive occasional prompts in the app that you must accept before you are allowed to sign in to various UNBC systems.
- You must complete the registration wizard all the way to the end on the computer. If you do not perform the authentication test at the end of the process, your app will appear to be registered (your UNBC account will display in the app) but it will not actually work for MFA, and you will need to contact ITS to be able to re-start the registration process.
You can voluntarily register an MFA authentication app on your account at anytime by going to https://aka.ms/mfasetup, selecting the + Add sign-in method button, then selecting Authenticator app in the dropdown of the Add a method popup.
Alternately, you can wait until your account has MFA registration enforced, at which time you will be prompted to register for MFA during every sign-in. Either way, the following instructions apply.
Additional references/information about the MFA registration process:
|
When you are first required to register a device to enhance the security you will see a prompt much like the one to the right, informing you that you can proceed to your account as you normally would, or you can register a device.
Note: the 14 day grace period may be shortened, depending on security requirements.
To proceed to register your device, press Next
|
|
|
To register your device you can use either the Microsoft Authenticator app, or another authenticator application that you have on your device. These instructions are for the Microsoft Authenticator Application.
On your mobile device search for Microsoft Authenticator in the app store or play store. Once you have the application installed, select Next
|
|
|
Follow the instructions on your screen, open the authenticator app on your mobile device.
|
|
|
On your mobile device, open the authenticator application. In this example, there are already accounts registered on this device, your device may not have any accounts registered to it yet.
Press the + icon in the upper right hand corner (circled in red) to add an account.
Instead of a plus, your app may show three vertical dots. If so, tap that and select the "Add account" option.
|
|
|
Following the instructions on screen, you must select the “Work or school account” option
|
|
|
After selecting the account, you will be prompted to either sign-in or scan a QR code. These instructions describe using a QR code.
Important Note: If you do not see the option to "Scan QR code", and are only prompted to Sign in with credentials, DO NOT sign in. Exit the Microsoft Authenticator app, then re-open it and select + (or 3-dots, then "Add account"), then "Work or school account". It should now give you option to "Scan QR Code".
If you still do not see the "Scan QR Code" option, please contact IT Support.
|
|
|
On your computer, select Next and it will display a QR code that you can scan on your mobile device, to proceed onto the next step of the device registration process
|
|
|
Move your mobile device so that it can scan the QR code on your computer screen.
|
|
|
Your mobile phone will register your account with the QR code, and it will now show on the list of accounts in the Microsoft Authenticator App (note that there are now 4 accounts on the list, when before there were 3 in this example)
Note: Your newly added account will be labelled UNBC, with your username@unbc.ca underneath.
|
|
|
On your computer screen you will see a request to test that the device is functional. This may take up to 90 seconds to appear.
|
|
|
On your device, you will be prompted to accept or deny the test request.
Select Approve.
|
|
|
Your computer will then proceed with a standard login prompt.
|
|
Remember to keep your device with you! You may be prompted to verify using the Authenticator app during future sign-ins to your account.