Security | Multi Factor Authentication (MFA)

Owned by Savannah Swanson, created
Last updated: Jul 25, 2022
5 min read

Instructions on enrolling in MFA using the Microsoft Authenticator app - most secure and recommended

Frequently Asked MFA Questions

Quick Steps: 

  1. Install the Microsoft authenticator app (Skip this step if you do not have a Smart Phone or if you already have an authenticator app you use)

  2. On a computer go to https://aka.ms/mfasetup and choose Mobile App (choose Authentication Phone if you do not have a Smart Phone)

  3. Click Setup to pull up the QR code page. (choose sign in if you do not have a smart phone)

  4. Launch the Authenticator app and scan the QR code (Skip this step if you do not have a smart phone)

  5. Configure your verification method to notify you through the app (choose Text code to my authentication phone if not using a smart phone)

  6. Set up your phone number as a backup to receive a code as an alternate way to log in

  7. Set up a work number, land line or trusted partners phone number as another backup way to log in

 

Detailed Steps Using the Mobile App

  1. From a computer, go to https://aka.ms/mfasetup
    If prompted, sign in using your StarID@go.minnstate.edu (students) or StarID@minnstate.edu (employees) and StarID password.

  2. Additional Security Verification

    1. Set the dropdown to Mobile App

    2. Choose Receive Notifications for verification 

    3. Click Set up
      Note: If you do not have a smartphone to install the authenticator app, choose Text Code to my authentication phone number. Be sure to use a phone that enables text messages and not a landline phone.

  3. Once the screen displaying the QR code is up, open the Microsoft Authenticator app (or your preferred authenticator app), install it from the app store if you have not already. Click I agree and choose Scan a QR code from the screen in the Authenticator app.

  4. Scan the QR code on your computer screen from your phone using the authenticator app.

     

  5. After you have scanned the QR code you should see the account in your Authenticator app and you should see a message on the computer screen that the mobile app has been configured.

  6. On the computer screen, click Next.
    You will be prompted to Approve the sign in on your authenticator app. If you chose to have a code texted to you, enter the code. 

  7. Finish setting up your verification options and add your phone number if applicable as an alternate authentication method.


    You are now set up! If you are logged in to Teams or the Outlook desktop app, you may have to re-authenticate with MFA. Once you authenticate on a device it will remember that device.

 

Note: Other authenticator apps such as Google Authenticator and Duo can also be used to set up your MFA if you prefer to set up MFA using an existing authenticator app on your phone.

On your assigned college-owned laptop, it is recommended to say Yes to the “Save your login”.  The security risk is low; if your device is stolen or lost, report it to IT immediately and reset your StarID password to mitigate that risk. Never save your log ins on a public or shared device.

 

Video Instructions

If you prefer video instructions, here is a link: https://youtu.be/uWbkLuI4g30?t=83

Update your authentication method add a backup phone number or change your phone number for MFA

Visit this link to update your MFA security verification - https://aka.ms/mfasetup

Recommendations

It is highly recommended to use the mobile app as your 2nd factor authentication.  It is the most convenient.  However, it is also recommended to have another option set up (or even multiple options), such as Call personal phone or call your office phone.

That way if you forget your cell phone at home, and you are prompted for login, you can still use your office phone as an option.

Smartphone App (Notification) - Most secure and recommended 

Type in your username and password. A notification will be sent to your phone that you will have to select Allow on, after which you will be logged in.

 

Cell Phone Receive A Text Message

Type in your username and password, it sends a message to your phone​
You type the code from the text message into the box that appears, then you’re logged in

 

Cell Phone or Landline - Automated call with a code to a phone

After you type in your username and password, your phone is called. ​
A recording says that Microsoft is calling to verify your login and requests you press the pound (#) key. ​
After you press it, your login is allowed through. ​
If you don’t press it (or don’t pick up the call), you aren’t allowed to login

 

Office Phone - UC Client or Physical Phone on Campus - Automated call with a code to a phone

We recommend only using this as a back up to the mobile app and your cell phone.
After you type in your username and password, your phone is called. ​Note: You need to be logged into your computer and be able to access to access the UC Client. Mac users so not have the UC Client.
A recording says that Microsoft is calling to verify your login and requests you press the pound (#) key. ​
After you press it, your login is allowed through. ​
If you don’t press it (or don’t pick up the call), you aren’t allowed to login

 

Smart phone App (Rolling Code) - Most secure and recommended 

Type in your username and password.  At the prompt, type in the rolling code that appears in your Authenticator app, after which you will be logged in

What if none of my MFA options are working?

Technology Support will need to do an MFA reset on your account.

For security purposes of protecting your identity and account access, we will need to verify your photo ID in person in Technology Support T.3302, bring a valid photo ID. Alternatively, if you prefer not to come to campus, you can preset your valid photo ID and verify some information on a Zoom call. We can send a Zoom invite to an email you have access to.

 We will ask you to verify three pieces of information in addition to the photo ID.

This information is what the college has on file for you. Below are the types of validation we can accept.

  1. DOB

  2. Physical address

  3. Phone number

  4. Personal email address

  5. Classlist

  6. TechID (8-digit college ID number. This is different than your StarID)
     

Your account will reset within 15 minutes of IT submitting the reset request for you.

After the account is reset, you will be prompted to set up MFA again.

 Acceptable Photo IDs

  • Minneapolis College Photo ID Card

  • Highschool Photo ID

  • Tribal ID

  • Federal/Government Issued ID

  • Military ID

  • State ID

  • Driver's License

  • Passport – Any country

What is not acceptable as a photo ID:

  • Pictures of an ID

  • A social security card

  • A birth certificate

Recommendations:

  1. Set up your account with the authenticator app

  2. Add one or more phone numbers as backup to reduce risk of needing your account reset.

 

Note: Numbers outside the US can be added as backup for those who travel.