(MFA) How To: Set Up the Authenticator App or Request Token

Title: (MFA) How To: Set Up the Authenticator App or Request Token

Audience: CNC Employees, CNC Students

Applies to: Microsoft 365 users

Category: Secure Computing

Prerequisites: Having Multi-Factor Authentication enabled on your account

Problem: N/A

Description / Summary: The below information can be used to set up Multi-Factor Authentication on your CNC account either on a work or personal phone. If you do not wish to use your mobile device, we also offer Authenticator Tokens. 

A sidenote: We strongly recommend the Microsoft Authenticator Application (available here: Microsoft Authenticator). CNC ITS staff cannot guarantee support of other authenticator applications. 

1. Before you begin your set-up, we strongly recommend that you do not attempt to set up MFA (Multi-Factor Authentication) on the same device you are logging into your CNC email with. This can result your getting caught in a sort of 'feedback loop', and being unable to complete the MFA set-up. Please use a work station, personal computer or other device (such as a lab computer) to sign into your email service, and complete the steps on your mobile device as prompted. If you do not have access to a work station, personal computer or other device, please visit a public computer kiosk to ensure ease of use.

2. Sign in to your CNC email account in a web browser. After you choose Sign in, you'll be prompted to secure your account.
   
   

3. Choose Next.

4. The default authentication method is to use the free Microsoft Authenticator app. If you have it installed on your mobile device, select Next and follow the prompts to add this account (you will be asked to scan a QR code with your mobile device — please ensure you scan it from WITHIN YOUR AUTHENTICATOR APPLICATION, and not from your phone's camera app!)

5. Once you complete the instructions to specify your additional verification method, the next time you sign in to your CNC email, you'll be prompted to provide the additional verification information or action, such as typing the verification code provided by your authenticator app. 

   1. This verification should only occur either once every 90 days, or if you are logging in from a new physical location. If you find you are being prompted more often, or are receiving suspicious prompts (ie: at 3 AM when you are on vacation in Aruba) please submit a service ticket for IT Services to investigate.