Embed Size (px)
Citation preview
Microsoft Multi-Factor Authentication (MFA)
User Guide Version 3.1
Page 1 of 26
WHAT IS A MULTI-FACTOR AUTHENTICATION (MFA)? Multi-Factor Authentication is a method of confirming a user’s claimed identity by utilizing a combination of two different factors:
1. Something you know (your computer login username and password) 2. Something you have (a one-time passcode configured to be received on your
mobile phone)
WHAT IS A MICROSOFT AUTHENTICATOR? Microsoft Authenticator is an app that provides a second layer of security (like the RSA SecurID app) after your password. When logging in, you'll enter your NH password, and then you'll be asked for an additional way to prove it's really you. Either approve the notification sent to the Microsoft Authenticator, or enter the verification code generated by the app. You enroll with in Microsoft MFA through the Microsoft Authenticator app and add your work account. This will let Northern Health know that the sign-in request is coming from a trusted device and help you seamlessly and securely access additional Microsoft apps and services without needing to log into each. Because Microsoft Authenticator supports single sign-on, once you have proven your identity once, you will not need to log in again to other Microsoft apps on your device.
ENROLLING IN MICROSOFT MFA Enrolling in Microsoft MFA can be completed in multiple ways. Please select one of the following methods that’s applicable to your situation and follow the set by set instructions.
You have a computer and mobile device (best option)
You only have a mobile device
You only have a computer
Page 2 of 26
ENROLLING IN MICROSOFT MFA USING A COMPUTER
AND A MOBILE DEVICE On your computer
NOTE: For best results considering using Microsoft Edge, Google Chrome or Firefox web browsers.
1. Please copy and paste this link you’re your browser:
(https://account.activedirectory.windowsazure.com/proofup.aspx?whr=healthbc.onmicrosoft.com) to be greeted with this Sign in page paste this link into your browser :
2. Enter your Northern Health email address (i.e. [email protected]).
3. Click Next.
a. If prompted, enter your password and click Sign In.
Page 3 of 26
4. You’ll see this pop-up, click Next.
5. Next you’ll see a screen with the
HealthBC Terms of Use, click
Accept.
On your mobile device
6. Download the Microsoft Authenticator app to your mobile device. NOTE: Go to Google Play (for Android devices) or the App Store (for iOS devices) on your mobile device to download the app. On NH corporately managed mobile phones, this step can be completed using the Catalog app (Apple ID not required in corporate store).
7. Open the Microsoft Authenticator app on your mobile device.
8. If prompted, tap Allow to receive notifications.
9. Tap Add Account
Page 4 of 26
10. Tap Work or school account
11. If prompted, tap OK to allow access to camera. You will require camera access to scan the QR code.
On your computer
12. Go back to your computer and on the Setup Account page, click Next.
Page 5 of 26
13. Using your mobile device, scan the QR code displayed on the computer
Note: Upon successful scanning, your account will be added.
14. Click Next.
15. Respond to the notification on your mobile device by selecting Approve.
Note: If you do not see a notification, open the Microsoft Authenticator app and “pull down” (slide your finger down and release) on the screen to refresh and check for notifications 16. Your computer will display Notification Approved. Click Next.
Page 6 of 26
17. Now you’ll be asked to register a second secure method.
You can choose “Phone” or “Security questions”. If you continue with the Phone
method, you’ll need to enter your phone number to receive an SMS text code or
select the “Call me” method and respond to the touch tone phone call.
To continue with the Security questions, you’ll want to click on the “I want to set
up a different method” at the bottom left of your screen and select Security
questions from the drop down list. Click Confirm.
Page 7 of 26
18. Fill in five (5) of the available twenty (20) Security questions and click on the
Done.
19. Select Done and close your browser
Note: Your Microsoft MFA has been enabled and is now ready to use.
Page 8 of 26
Note: You can modify your Microsoft account security settings anytime by visiting: https://mysignins.microsoft.com/
20. Upon completing your Microsoft multi-factor authentication registration, take time
to visit your My Apps portal located here. You can access and use the My Apps
portal on your computer, or from the mobile version of the Edge browser on an
iOS or Android mobile device. Learn more here.
Page 9 of 26
ENROLLING IN MICROSOFT MFA USING ONLY A MOBILE
DEVICE On your mobile device
NOTE: For best results considering using Microsoft Edge, Google Chrome or Firefox mobile web browsers.
1. Please copy and paste this link into you’re mobile web browser:
(https://account.activedirectory.windowsazure.com/proofup.aspx?whr=healthbc.onmicrosoft.com) to be greeted with this Sign in.
2. Enter your Northern Health email address (i.e. [email protected]).
3. Click Next.
a. If prompted, enter your password and click Sign In.
Page 10 of 26
4. You’ll see this pop-up, click Next.
5. Next you’ll see a screen with the
HealthBC Terms of Use, click
Accept.
On your mobile device
6. Download the Microsoft Authenticator app to your mobile device. NOTE: Go to Google Play (for Android devices) or the App Store (for iOS devices) on your mobile device to download the app. On NH corporately managed mobile phones, this step can be completed using the Catalog app (Apple ID not required in corporate store).
7. Open the Microsoft Authenticator app on your mobile device.
8. If prompted, tap Allow to receive notifications.
9. Tap Add Account
Page 11 of 26
10. Tap Other (Google, Facebook, etc.)
11. If prompted, tap OK to allow access to camera. You will require camera access to scan the QR code.
In your mobile browser
12. Go back to mobile browser and on the Setup Account page, click Next.
13. Click Next.
Note: Ensure you’ve already downloaded and have the Microsoft Authenticator app open.
Page 12 of 26
14. Click Next
15. Now you need to copy and paste the Account name and Secret key from
mobile web browser into the Authenticator app.
In the Microsoft Authenticator app
16. Select “Or enter code manually”
Page 13 of 26
17. Copy and paste the Account name and Secret key from mobile web browser
using the copy options highlighted with red circles into the Authenticator app and
select Finish.
18. Copy the rolling number from the Authenticator app by tapping on it.
In your mobile browser
19. Paste the rolling number from the Authenticator app into your mobile web
browser and click Next.
20. Enter your 10 digit mobile phone number into the field and select Next.
Page 14 of 26
21. You’ll receive a text message on your mobile device. Copy it and enter it into the
field click Next.
22. Click Next again.
23. You’ve completed enrolling in Microsoft MFA!
Page 15 of 26
24. Select Done.
Note: Your Microsoft MFA has been enabled and is now ready to use.
25. Upon completing your Microsoft multi-factor authentication registration, take time
to visit your My Apps portal located here. You can access and use the My Apps
portal on your computer, or from the mobile version of the Edge browser on an
iOS or Android mobile device. Learn more here.
Page 16 of 26
ENROLLING IN MICROSOFT MFA USING ONLY A
COMPUTER On your computer
NOTE: For best results considering using Microsoft Edge, Google Chrome or Firefox web browsers.
1. Please copy and paste this link you’re your browser:
(https://account.activedirectory.windowsazure.com/proofup.aspx?whr=healthbc.onmicrosoft.com) to be greeted with this Sign in page paste this link into
your browser :
2. Enter your Northern Health email address (i.e. [email protected]).
3. Click Next.
a. If prompted, enter your password and click Sign In.
Page 17 of 26
4. You’ll see this pop-up, click Next.
5. Next you’ll see a screen with the
HealthBC Terms of Use, click
Accept.
6. Setup Account page, click Next.
Page 18 of 26
7. Select I want to use a different authenticator app.
8. Click Next.
Page 19 of 26
9. Click on Can’t scan image?
10. Now you need to copy and paste the Account name and Secret key from this
into the Edge or Chome web browser extension.
In a new web browser tab on your computer
11. Opening a new browser tab go https://authenticator.cc
Page 20 of 26
12. Add the browser extension by clicking on the Add to Edge.
13. Install the browser extension click Get.
14. Click Add Extension
Page 21 of 26
15. Select the Authenticator browser extension (that you just installed) and click on
the pencil icon.
16. Select the + icon and select add select Manual Entry.
17. Now enter the Account Name from Microsoft Authenticator web browser tab into
the Issuer field and enter the Secret Key into the Secret field and click Ok.
Page 22 of 26
18. Now copy the rolling number in the browser extension by clicking on it.
In the Microsoft Authenticator web browser tab your computer
19. Moving back to the Authenticator web browser tab, enter the rolling number into
Enter code field and click Next.
Page 23 of 26
21. Your computer will display Notification Approved. Click Next.
22. Now you’ll be asked to register a second secure method.
You can choose “Phone” or “Security questions”. If you continue with the Phone
method, you’ll need to enter your phone number to receive an SMS text code or
select the “Call me” method and respond to the touch tone phone call.
To continue with the Security questions, you’ll want to click on the “I want to set
up a different method” at the bottom left of your screen and select Security
questions from the drop down list. Click Confirm.
Page 24 of 26
23. Fill in five (5) of the available twenty (20) Security questions and click on the
Done.
24. Select Done and close your browser
Note: Your Microsoft MFA has been enabled and is now ready to use.
Page 25 of 26
Note: You can modify your Microsoft account security settings anytime by visiting: https://mysignins.microsoft.com/
25. Upon completing your Microsoft multi-factor authentication registration, take time
to visit your My Apps portal located here. You can access and use the My Apps
portal on your computer, or from the mobile version of the Edge browser on an
iOS or Android mobile device. Learn more here.
Page 26 of 26
FREQUENTLY ASKED QUESTIONS (FAQ) Tips to try before calling Service Desk!
• Have your mobile device in hand with Microsoft Authenticator app open before
logging on.
• Clear Internet cache by pressing Ctrl+F5.
• Try a different Internet browser (Microsoft Edge, Google Chrome or Firefox).
• Start an in-private or incognito session.
• If having issues with token registration, do not uninstall the Microsoft Authenticator app. Instead, remove your account on the app and start over.
1. Need help getting your Microsoft MFA profile set up? Call the ITS Service Desk
at 250-565-2784 or 1-888-558-4357.
2. Can I self-register a new phone?
a. Yes! You can modify your Microsoft account security settings anytime by
visiting: https://mysignins.microsoft.com/
3. What if I don’t receive the App notification from MFA or it’s delayed?
a. Sometimes it takes longer to receive the MFA code. You can re-request
the code again if the system times-out at the first attempt
4. What if I don’t have a company phone?
a. If you want to use the mobile app you can use any personal device that
runs iOS or Android, either a cell phone or a tablet
5. I’m using the mobile app and there’s no cell or data connection
a. The mobile app supports the offline mode. There is a one-time passcode
generated every 30 seconds in the MS Authenticator App, that can be
used to login to the MFA portal
6. What if I forgot my cell phone or the battery is dead?
a. If you have access to your alternate authentication method, you can login
to MFA portal and change your default method
7. My cell phone is forgotten/dead and I can’t remember my alternate authentication
method?
a. Call the ITS Service Desk 24/7 at 250-565-2784 or 1-888-558-4357
![Duo MFA Managing Your Devices - University of MiamiMulti-Factor Authentication (MFA) Documentation: Managing Devices [5] Reactivate Duo Mobile Click the “Reactivate Duo Mobile”](https://img.pdfslide.us/doc/110x75/5f1e89f8efa5f70a91561bbb/duo-mfa-managing-your-devices-university-of-miami-multi-factor-authentication.jpg)
![Duo Multi-Factor Authentication (MFA) · Multi-Factor Authentication (MFA) Documentation: FAQs [1] Duo Multi-Factor Authentication (MFA): Frequently Asked Questions (FAQs) What is](https://img.pdfslide.us/doc/110x75/5b65cd517f8b9a6e1f8c5f4e/duo-multi-factor-authentication-mfa-multi-factor-authentication-mfa-documentation.jpg)
