Purpose: Guide users on how to set up the Microsoft authenticator app which is StFX recommended
Microsoft Authenticator App
StFX recommends the Microsoft authenticator app as your main method of authentication for M365 MFA. The Authenticator app can be configured the for the following options
- Passwordless Authentication (recommended)
- Push Notifications
- One-time verification codes (which can be used even if your device does not have data)
The authenticator app does not rely on SMS for code authentication so is a good option for those who travel frequently without SMS coverage. Text messages can be intercepted though SIM swapping, number porting, and social engineering attacks. Authenticator app notifications and number matching are generally more resistant to these types of attacks. As of Feb 2027 Microsoft will be retiring SMS and phone as method for MFA.
Setting up on a Computer or Laptop
On your Computer
If not at the setup prompt, login to mysigns.microsoft.com and click Security Info.
-
Click on the Add Method
-
Choose Authenticator App from the drop down option
-
Press Next & Next again to get the QR Code
On your Phone/Tablet
- Download the Microsoft Authenticator App (found in the App/Play Store)
-
Tap the + > Work or school account.
-
Use your phone to scan the QR Code that is on your computer screen.
Notes:
-
iPhone users may have to enable the camera in Settings in order to scan.
-
If you can't use your phone camera, you'll have to manually enter the 9 digit code and the URL.
-
Your account will be added automatically to the app and will display a six-digit code, that will change every 30 seconds.
On your computer
-
Click Done.
-
Now wait for the test to complete.
On your Phone
-
You will see a notification for a new sign in.
-
Go to the Microsoft Authenticator app.
-
Tap Approve to allow it and put in the code displayed on your computer screen.
*Note if you do not see the approve when going into the app click the check for notifications
Setting up on your Mobile Device
If your users are trying to do everything on a single mobile device, the simplest method is:
- Install the Microsoft Authenticator from the play or apple store
- Open the app
- Tap the + Add Account
- Select Work or School Account
- Choose Sign in or set up on device, instead of scanning a QR code
- Sign in with your fulls stfx email and stfx password
- Follow the prompts to test the setup.
Setting up Passwordless Authentication
-
In the Authenticator App tap your stfx account.
- Select Setup Passwordless sign-in.
- Sign into your stfx Account
- Register your device with to your M365 Account