Setting up Microsoft MFA

Multifactor Authentication (MFA) is a vital tool for securing our accounts and devices. At MedWatch, security and privacy are a top priority. Using MFA is one of the tools we use to meet our security goals. Following the steps below, you will be able to set up your Microsoft account to utilize MFA. There will be four different options you can choose from for your Microsoft MFA; Microsoft Authenticator App, alternative authenticator apps (6 digit keys), phone calls, and texting.

In this guide, you will find:

• The Prompt
• Keep Your Account Secure
  • Microsoft Authenticator App
  • Use a different authenticator app
  • Setup a different method (Voice/Texting)
• Updating Your MFA Options

Here is a video that covers topics from this guide: SettingUpMicrosoftMFA.mp4 You will be prompted to log into your MedWatch account to access the video.

The Prompt 🦇👻

If you have not already set up MFA on your Microsoft account, you will be prompted to when you first log in. You will receive a message that states the organization needs additional information. This prompt will look like the one below. When you see this prompt, click Next.

**Note: Not receiving this notice? Don't fret. You can adjust your MFA options at any time using the https://www.aka.ms/setupMFA page. Check out the end of this guide to see how to use this page.

Keep Your Account Secure 🔒

After clicking next, you will be directed to a page titled "Keep your account secure." You can see what this page will look like by glancing at the screenshot below. From here, you have a few options for setting up MFA.

• Microsoft Authenticator App
• Use a different authenticator app
• Set up a different method
  • Phone call
  • SMS

Microsoft Authenticator App 📲

The Microsoft Authenticator App is a free application that you can install on Android and iOS devices. This is the easiest and most secure MFA method for your Microsoft account. To learn more about how to install the app, click "Download now" on the "Keep your account secure" page, or click here.

After you have installed the app on your Android or iOS device, click Next on the "Keep your account secure" page.

The following page will advise you to set up your account on the app. When setting up the app, be sure to allow notifications from the app so that it can pop up automatically when you are attempting to log in. When setting up your account on the app, use the "Work or school" option. If you haven't already installed the "Company Portal" app on your Android or iOS device, you will be prompted to at this time. Follow the directions provided on the screen to install and sign into the Company Portal app. This app allows your device to be tied to your Microsoft account.

When you have completed installing and logging into the Microsoft Authenticator and Company Portal apps, click Next on the "Keep your account sure" page.

Now that you have the Authenticator app and the QR code to connect your account on the "Keep your account secure" page, follow the steps below to add the account to your Authenticator app.

1. In the Authenticator app, click the "+" on the top right of the app.
2. Select "Scan a QR code" on the pop-up. Screenshot of this screen can be seen below.
3. If prompted, provide the app permission to access your camera.
4. Use the camera on your device to scan the QR code on the "Keep your account secure" page.
5. Once scanned, you should be returned to the app homepage and see the account added.
6. On the "Keep your account secure" page, click Next.
7. You'll be prompted to "try it out". Enter the number on the "Keep your account secure" page into the app.
8. Approve the login by clicking "Yes" and entering your Android or iOS device pin or biometrics.
9. Click Next on the "Keep your account secure" page.
10. You're done!

Use a different authenticator app 🥸

If you have a strong preference for another authenticator app, like Duo or Google Authenticator, you're welcome to set those up. However, the MedWatch Help Desk will provide limited support for this method.

To set up Microsoft MFA with a different authenticator app, follow the steps below.

1. Click the "I want to use a different authenticator app" option on the "Keep your account secure" page.
2. Click Next.
3. Open your authenticator app and open the QR scanner option.
4. Scan the QR code on the "Keep your account secure" page.
5. Save the account to your authenticator app.
6. On the "Keep your account secure" page, click on Next.
7. Enter the 6-digit number from your authenticator app into the "Keep your account secure" page.
8. You're done!

Set up a different method (Voice/Texting) 🗣️💬

There are other options you can choose from for MFA for your Microsoft account that do not require you to install an application on your phone. These options include Phone (voice) and SMS (texting).

To set up Microsoft MFA using voice or texting, follow the steps below.

1. Click on "I want to set up a different method" at the bottom of the "Keep your account secure" page.
2. From the dropdown, select "Office Phone" if you want voice only or "Phone" if you want voice and texting options. See the screenshot below to identify this dropdown.
3. Click Next.
4. Enter the phone number you want to use for MFA. Note that you'll need to start with + and the country code. In the USA, the country code would be +1.
5. If you're using the "Phone" option, select either "Receive a code" or "Call me" and click Next. A screenshot of these options can be found below. If you choose "Office Phone," you'll only have the call option available.
   1. Receive a code (Texting): You will receive a text message with a 6-digit code. Most carriers will recognize the number sending the code as Microsoft and pre-name the contact for you. Find the code in your messages and enter it into the code field on the "Keep your account secure" page, click Next, and Done.
   2. Call me (Voice): You will receive a phone call with an automated message. Listen to the message. It will tell you a number or symbol to press on your phone to approve the login. Once you press the number/symbol advised by the message, the call will end. After a moment, you can click Done on the "Keep your account secure" page.

Updating Your MFA Options

Microsoft provides an easy-to-navigate page where you can review, add, edit, or remove MFA options from your account. This includes the ability to add multiple options and setting a default option. You can find this page by going to https://www.aka.ms/setupmfa. You will be prompted to log into your Microsoft account to open this page. If you have already set up MFA, you will need to have your existing MFA option available to log into this page. If you have no access to your current MFA options, please reach out to the Help Desk.

After logging in,  you will land on the page below. When adding a new MFA sign-in option, you will follow similar steps to the ones laid out previously in this guide. The page will also provide clear instructions to help you through the process. Review the previous sections of the guide or follow the instructions on the page to proceed with these options.

1. Set default sign-in method: This option will allow you to set one of your existing sign-in options as the default. With a default set, this option will be automatically selected when signing into your Microsoft account going forward.
2. Add sign-in method: This option will allow you to add another method of approving your sign-in after entering your password on a Microsoft authentication page. You will be presented with options for phone and authenticator applications.
3. Change: For sign-in options that have this enabled, it will allow you to change the configuration of that sign-in option. For example, changing a phone will allow you to update the phone number associated with the sign-in option. You will have to re-authenticate the option by confirming with a code or phone call to the new number.
4. Delete: This will allow you to delete a sign-in option from your account. If you no longer have a certain phone number or Android/iOS device listed, you should remove it with this option.
5. Sign out everywhere: This will end all Microsoft sessions that are still currently active for your account. You will be prompted to log in again for every application or website that uses your Microsoft account.