MFA for Microsoft 365 Setup with Mobile App

Introduction to Setup MFA with Mobile App 

The instructions further below will demonstrate how to setup MFA (Multi-Factor Authentication) on a Mobile App (Microsoft Authenticator) for Microsoft 365. The Microsoft Authenticator app is the best MFA option to set as the default for its security and reliability.


Looking for general information, instructions on how to add more MFA options, or need assistance troubleshooting an error? Here are the other articles available about MFA for Microsoft 365:

 


How to Setup MFA with Mobile App

 

1.  Begin by logging in to your EFSC Email account. For the best results, log in to your myEFSC account first and then click the appropriate Email icon.

 

2. You should now be directed to the Microsoft Sign in page. Log in using your EFSC Email Address to proceed.

 

3. With MFA now required, you should now be on the More information required page. Click on the Next button.

 

4. The next page will begin the MFA setup steps. On the first Keep your account secure page, Microsoft Authenticator will be recommended. At this point, download the Microsoft Authenticator app to your phone or mobile device that you have access to most. You may select the Download Now option on the setup page or navigate to the appropriate app store on your device (ex. App Store for iOS or Google Play for Android). After you have successfully installed the Microsoft Authenticator app, click on Next.

Note: You will notice the “I want to set up a different method” link on this page. This can be utilized to choose setting up MFA using another option such as text. For other setup options, return to the top of this page and locate the article list. It is recommended to continue with these instructions and setup the Microsoft Authenticator app.

 

 

5. There are two possible screens that should show up next depending on if you are on a Desktop/Laptop (A) or Mobile Device (B) during the MFA setup process.

A. If you are setting up MFA while on a Desktop/Laptop device, you should be prompted with the screen below. If necessary, ensure notifications are enabled for the Microsoft Authenticator on your mobile device. After opening the app, there should be an option to Add an account (you may also see a + sign) and then an option to select Work or school. At this point, return to the Desktop/Laptop device on the MFA setup page in the image below, and click Next.

 

You will should now be on the screen that contains a QR code to scan as seen below. Using your mobile device and the Microsoft Authenticator, select the Scan a QR code option to open the device’s camera and then hover your mobile device over the QR code that is displaying on the Desktop/Laptop device.

The Microsoft Authenticator app should then show an Activating prompt briefly and then switch to a screen that will display an Account added successfully prompt. Your EFSC Email Address should now be listed as an account.

At this point, return back to the Desktop/Laptop device where you are setting up MFA (seen in picture below), and then click Next. To continue, proceed to step 6 of these instructions.

Note: If scanning the QR code with the mobile device is not working, but you have the camera opened on the Microsoft Authenticator app, there will be another option for Or Enter Code Manually. This will display two fields for Code and URL. The Code and URL to input can be found on the MFA setup page below the QR code by clicking the Can’t scan image? button. Although the Code and URL are long and not too easy to type in quickly, these can be entered into the Microsoft Authenticator app to activate in the same way the QR code would. This should only be needed if there are issues scanning the QR code with the camera.

 

B. If you are setting up MFA while on a Mobile Device (the same device Microsoft Authenticator is installed on), you should be prompted with the screen below. Select the link for Pair your account to the app by clicking this link.

Since you are using the same device to setup MFA that you have the Microsoft Authenticator installed, this should automatically bring up the Microsoft Authenticator app and show an Activating prompt briefly. This will switch to a screen that will display an Account added successfully prompt. Your EFSC Email Address should now be listed as an account. At this point, return back to the MFA setup page as seen in the image below and click Next.

Note: This MFA setup page will have a Show QR Code link as well but it should not be needed as using the Pair your account link will perform the same function automatically. The QR code may only be needed if you started the MFA setup on a device that you are not using the Microsoft Authenticator app.

 

6. Following adding the account to the Microsoft Authenticator app, a prompt will appear on the setup page to Approve the notification. The MFA setup page will display a two digit number. At the same time, your mobile device should receive a notification to approve the sign in. Open this notification to proceed.

Note: The image below displays what the Approve notification will look like on a mobile device as well as the MFA setup page for the two digit number when setting up MFA while on a mobile device.

 

After selecting the Approve sign-in? notification, this will open the Microsoft Authenticator to a screen that will say “Are you trying to sign in? Eastern Florida State College (your email) Enter the number show to sign in.Enter the number you see on the setup page into the blank field on the app and then select Yes.

 

7. As long as the numbers matched in the previous step, you should then be prompted to a Notification approved screen. Click Next to continue.

 

8. The next screen should say Success! and include the Microsoft Authenticator as the Default sign-in method. The phone or device model that was setup with the Microsoft Authenticator may be listed. Click on Done to conclude the main setup process.

 

9. Finally, you should then be prompted to the Stay signed in? page. You may select Yes to proceed into your Student Email / Microsoft 365 account.

Notes: Choosing Yes on this page does not guarantee that you will not need to log in to your account next time. This will usually timeout, so expect to log in each time with your EFSC Email address and confirm your identity with MFA. Keep in mind that if you have multiple email addresses that utilize this Microsoft platform set to sign in automatically that conflicts may arise accessing one or the other.

 

10. MFA has now been setup and you should be all set! The next time a login is required you will be prompted to verify your identity with MFA similar to step 6 above. See the section below for more details.

 


MFA Verification Process

After your verification option(s) have been successfully set, your EFSC Email account will be even more secure with MFA enabled. What is expected now that MFA is setup? Each time you log in to your EFSC Email account, you will be prompted to verify your identity, which happens immediately after entering your password. The verification is required before you may proceed to log in to the account.

 

First, select an option that is either most convenient for you at the time or is the one you have available to confirm your identity. Then, follow the instructions depending on the option selected to approve the sign-in. In this article we will review the two options using the Microsoft Authenticator app:

A.  Approve a request on my Microsoft Authenticator app – Choosing this option will be similar to step 6 in the section above.

After selecting this option, you will be prompted to the Approve sign in request page which will have a two-digit number. A notification will be sent to your phone to open, and then you will enter the two-digit number here. This should complete the verification.

 

B.  Use a verification code – This will utilize the Microsoft Authenticator app and is an alternative to the approve notification. You will be asked for a code that can be found within the Microsoft Authenticator app on the mobile device it is installed on.

After opening the app, select your EFSC Email account and there will be a section for One-time password code. This will be a 6-digit code to enter to approve the sign in request. Please note that the code in the app is on a 30 second timer and will refresh to a new code, so this must be entered quickly. After entering the code and clicking Verify, this should complete the verification.

 

Once the verification has been confirmed, you should then receive the prompt if you want to Stay signed in. Please keep in mind that selecting Yes will not guarantee that you will remain signed in, and you will likely need to confirm your verification the next time you log in. Keep in mind that if you have multiple email addresses that utilize this Microsoft platform set to sign in automatically that conflicts may arise accessing one or the other.

 

As mentioned previously, expect to verify your identity with one of the MFA methods you set up each time you log in to your EFSC Email account. What may not prompt you each time are the various Office products available, including Outlook applications. Typically, these will only ask you to sign in and confirm your identity once until either the password has changed on the account or there is an update or issue of some kind that requires you to sign in again.

Once you have confirmed your MFA verification option, you will then have access to your account!

 


For further assistance, questions, or concerns, please either create a ticket or call the IT Support Desk at 321-433-7600, open 7am to midnight, 7 days a week.

To create a ticket, login to your myEFSC account and locate the IT Support section as seen in the image below. When creating a ticket, select the Email, Teams & Calendaring category, followed by the appropriate Email Assistance service to submit a ticket. Please include an alternative contact method (if you cannot access your email). Include details, error messages, and provide screenshots, if possible, of the steps you have taken so we may further assist you.