Setting Up Multi-Factor Authentication (MFA) and Self Service Password Reset (SSPR) (Student)

Background

In order to combat the risk of ever-growing cyber threats, we are taking further steps to secure our ICT systems. We will be enabling Multi-Factor Authentication (MFA) on all student Microsoft Office 365 accounts. Once the procedure below is followed you will also be able to reset your own password using Self Service Password Reset (SSPR).

NB: We highly recommend you follow all the steps in this guide and add all three sign-in methods. If you can't use the Microsoft Authenticator app you can still authenticate your account with a code sent to a mobile phone. Please see the Setting up Self-Service Password Reset (SSPR) section for further details.

Contents

• Setting up Multi-Factor Authenticator (MFA)
• Setting up Self Service Password Reset (SSPR)
• Changing the Default Sign-In Method

Procedure

Setting up Multi-Factor Authenticator (MFA)

If you haven't already completed the steps below, when you try to access Microsoft Office 365 applications and resources from home or on your mobile phone you will receive the following More information required prompt (see below)

NB: The More information required prompt bypasses steps 1 - 3 and starts at step 4 below

1. Browse to https://aka.ms/setupsecurityinfo
2. Select Add sign-in method (see below)
   
   
   
   
3. Select Authenticator app and select Add (see below)
   
   
   
   
4. Install the Microsoft Authenticator app on your mobile device, then select Next (see below)
   
   

   NB: To install the authenticator app, search your App Store (iOS) or Play Store (Android) for Microsoft Authenticator, look for the blue padlock with the light blue user logo (see above) or click here to scan the QR codes from the Microsoft Authenticator website

5. If prompted allow notifications, then add (+) and account, and select Work or school account (see below)
   
    
6. When prompted Scan the QR code, then select Next (see below)
   

   NB: If you are completing these steps on your mobile phone select Can't scan image? and select Or enter code manually within Microsoft Autheniticator, and copy & paste the Code and URL information, then select Finish.

7. Lets try it out, enter the number displayed (NB: the number '73' below is an example) (see below)
   
   
   
   
   If you entered the correct code in time, select Next when you receive the Notification approved prompt (see below)
   
    

NB: You have now successfully setup Multi-Factor Authentication. 

NB:  Once have set up the app DO NOT DELETE IT! If you delete the app you will have to re-install it and complete the registration process again. To do this ICT Support will have to reset your MFA settings. If you have deleted your Authenticator app, please come to the ICT Support office, next to Room CO1 at KSHS and next to Room 26 at CGS, to get MFA reset

Setting up Self Service Password Reset (SSPR)

1. Browse to https://aka.ms/setupsecurityinfo
2. Select Add sign-in method (see below)
   
   
   
   
3. Select Phone and select Add (see below)
   
   
   
   
4. Select United Kingdom (+44), enter a telephone number, and select Next (see below)
   
   
   
   
5. A 6 digit code will be set to the telephone number you entered, enter the code and select Next (see below)
   
   
   
   
6. If you have entered the correct code in time you will receive a SMS verified message, select Done to finish (see below)
   
   
   
   
7. Select Add sign-in method (see below)
   
   

   
   
   

8. Select Email and select Add (see below)
   
   
   
   
9. Enter a personal e-mail address (i.e. NOT your school e-mail address), and select Next (see below)
   
   
   
   
10. A code will be sent to the e-mail address you entered, enter the code and select Next (see below)
    
    

    NB: You have now successfully setup Self Service Password Reset (SSPR)

Changing the Default Sign-In Method

By default, Microsoft Authenticator (App based authentication - notification) is used for Multi-Factor Authentication (MFA) and to access your Security Info.  Follow the steps below to change your default sign-in method.

1. Browse to https://aka.ms/setupsecurityinfo
2. You will be prompted to Approve sign-in request by entering a number within Microsoft Authenticator, open Microsoft Authenticator and enter the number, (see below)
   
   
   
   
3. Enter Change next to Default sign-in method (see below)
   
   
   
   
4. Select either Phone or App based authentication - notification, and select Confirm (see below)
   
   
   
   
5. When you access your Microsoft Office 365 account you will now be prompted to Verify your identity, select either Approve a request on my Microsoft Authenticator to use Microsoft Authenticator, or Text +XX XXXXXXXX to send a SMS to the telephone number you have on record. (see below)
   
   
   
   
6. If you choose Text +XX XXXXXXXX you will receive a 6-digit code, enter the code and select Verify (see below)
   
   
   
   

   NB: To reverse the process, select App based authentication - notification in step 4 above.  You will then be prompted to use Microsoft Authenticator as in step 2 above.