Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Anchor
top
top

This page is dedicated to information and support for Microsoft Two-Factor Authentication (2FA) at Syracuse University, also referred to as multi-factor authentication (MFA), two-step authentication, or 'added security verification' used by services like SUmail and Office 365.

...

Table of Contents
maxLevel2
minLevel2

About Microsoft 2FA

Microsoft 2FA is currently enabled for Syracuse University all Faculty and Staff as well as Students who have opted-in who are accessing Office 365 applications accessed or downloaded through https://portal.microsoft.com2FA is an added verification step during authentication that helps to prevent the unauthorized use of University NetIDs and passwords by ensuring that only the account owners themselves use their credentials on systems hardened with 2FA, in this case, Office 365. Typically, 2FA is described as “something you know and something you have” where the “something you know” is your username and password, and the “something you have” (often called a “second factor”) is a private, unique code generated just for you.

Additional information about two-factor authentication can be found on the Two-Factor Authentication home page

Info
titleStudent Opt-In Now Live

As part of ongoing efforts to protect digital identities and related University information, Information Technology Services (ITS) has enabled two-factor authentication (2FA) for student email and other Office 365 services. To opt-in, visit NetID.syr.edu and click Two-Factor Opt-in to get started.


Warning
titleStudent Activation Coming Spring 2019

Any students who have not already opted-in to 2FA by early February will have 2FA activated automatically sometime before the end of the semester. These students will receive several email notifications starting 30 days prior to the student’s automatic activation date. Opting in will stop these notifications.

...

Table of Contents
maxLevel2
typeflat

Configuring Your Account - Setup and Management

Anchor
config
config

Follow the steps below for 2FA configuration.

Table of Contents
maxLevel3
minLevel3

Get The App

Download and install the Microsoft Authenticator app for AndroidiOS, or Windows Phone.

Set up the Microsoft Authenticator app

Follow the 6 Steps provided by Microsoft to setup the Authenticator app with your account.

Modify Existing Microsoft MFA Configuration

You can manage or update your authentication settings on the Microsoft 2FA method management page.


Traveling with Microsoft 2FA including Syracuse Abroad
Anchor
travel
travel

If you are traveling and plan to use your Office365, be sure to have a way to authenticate your login and configure authentication methods prior to traveling. Note that if use call or text for authentication, your mobile device will require service at your destinations. Additionally, if you use the office phone method, an alternative method will be required while traveling. Note that the mobile app method method does not require  require an internet connection.

You can manage or update your authentication method settings on the Microsoft 2FA method management page or see the the Configuring Your Account section below for first time setup. 

Info
titleGoing Abroad?

Syracuse Abroad students should configure their 2FA as soon as possible, download and set up the Microsoft Authenticator mobile application on their mobile device, and take their mobile device when they go abroad. Configuring before you leave enables your continuing access to protected University accounts regardless of location. Students should ensure their authentication methods function correctly, and should be sure to have their configured mobile device when they go abroad.

Note
titleCountry Code and Costs

Please note that country code(s) must be provided for phone options, and standard/international message and data rates apply.

No Methods Available While Traveling or Abroad? If you have any limitations which prohibit the use of the authentication methods while traveling, please contact the ITS Help Desk by calling at 315-443-2677, by emailing help@syr.edu, or by stopping into 1-227 CST.

Table of Contents
maxLevel2
typeflat

...

Follow the steps below for first time configuration of your 2FA methods.

Table of Contents
maxLevel3
minLevel3

Step 1: Login

To access your account, open a web browser and visit https://portal.microsoft.com.

Next, sign in with your username and password. After doing so, you should receive a screen that is similar to the one shown below.

Office 365 sign in screenImage Removed

Click on [ Set it up now ] to continue.

Return to Top

Step 2: Verification Method

You have the option to select:

  • Mobile App (recommended)

  • Office phone
  • Authentication phone

Option Descriptions:

  • When selecting the Authentication phone you have the option to have Microsoft SMS (Text) message you a verification code or call your number.
    • Enter your information and click [ Next ]
  • When selecting the Office phone, you may have Microsoft call your number.
    • Enter your information and click [ Next ]
  • When selecting Mobile App, you will have the selections below:

More information about authentication methods can be found in the Available Authentication Methods section.

Additional security verification screenImage Removed

 

Additional security verification screenImage Removed

Clicking on "Receive Notification for verification" and then pressing [ Set up ] will produce the image below.

mobile app QR code screenImage Removed

In order to use this method you must:

  1. Install the Microsoft Authenticator app for Windows Phone, Android, or iOS
    1. The app can be found in the "Store" on the platform you are using
  2. In the app, add an account and choose "Work or school account"
  3. Scan the QR image shown. If you are unable to scan the image, you can enter the information under the image
  4. Click [ Next ]
  5. Click [ Next ] again.

Step 3: Microsoft Connection

Microsoft will try to verify your phone and this may require action on your end depending on what option was selected in Step 1, shown below:

Additional security verification screen pending mobile device confirmationImage Removed

 

Note
iconfalse
titleProviding Alternative Number

You may be asked to provide a phone number in-case you lose access to your mobile app. You may place the phone number of the phone you are using the app on (as shown below).

Additional security verification screen to add mobile device numberImage Removed

Step 4: Finishing

At the end will be a page about using existing applications. Some of the apps, but not limited to, are:

  • Older Microsoft Office Installs
  • Apple Mail
Note
titleNot Required for Any SU Apps

This is NOT required for any SU Apps, that are supported, you may ignore this page and simply press [ Done ].

These apps do not use phone verification, so in their case you are provided an ID that you can use should you need to verify. A sample of the page is shown below.

Additional security verification screen to allow access to applicationsImage Removed

You may now hit [ Done ] to finish.

Microsoft Support Documents

How to Use Two-Step Verification with Your Microsoft Account

...