MFA: Self-Enrollment: Authentication Phone - For Call or Text

Article Type: How To

Instructions: Set up Multi-factor (MFA) for Authentication Phone

What you will need before you begin MFA set up:

Note: If you are a new student or have been notified of having a compromised account you will need to use MFA Automatic-Enrollment instructions to set up MFA rather than using instructions provided below.

1. Immediate access to the Phone you will select for your preferred verification option
2. A Computer with Internet connectivity

• Phones with call-only capability
• Cell phones without smart capabilities - although this does not need to be a smartphone, the text messaging option does require a compatible phone.
• Important: If you have an iPhone or Android please use instructions: iPhone or Android

Steps:

• Important note:
  • Once you click on the Minnesota State button Enable Multi Factor Authentication outlined in the first step (Step 1), you will need to complete MFA set up before you will be able to access your email and other Minnesota State O365 connected services. If you cancel or do not complete the set up, you will not be able to access these services until MFA is successfully set up.

• Step 1) From your computer, browse to https://minnstate.edu/mfa.
  • a)  Click, Enable Multi Factor Authentication < Your Name > button.

• b)  It will then display Your account is now enabled for MFA and offers the link to:
• c)  browse or click here: https://aka.ms/mfasetup to continue MFA set up.

• Step 2) Sign in with your username and password:
  • Employee username: StarID@minnstate.edu
  • Student username: StarID@go.minnstate.edu
  • Click Next on the prompt More information required.
    • Please note, If you are both employee and student, you will need to set up MFA on both your employee and student accounts.
    • If you are employed or take classes at multiple Minnesota State University / Colleges you only need to do this once per employee/student account.

• Step 3) On your computer, on the Additional security verification page:
  • a)  Under Step 1: How should we contact you? select Authentication phone from the drop down menu.
  • b)  Select country and enter your 10-digit phone number you will be using for MFA verification.
  • c)  Under Method, select a verification method:
    • Call me
      • You will need to use this option if your phone has call-only capability or does not have text messaging capability.
      • Consider this option if you prefer not to enter a six-digit code accurately each time you authenticate to Microsoft apps.
      • This method places an automated voice call to the phone number you provide. Answer the call and press the pound key (#) on the phone keypad to authenticate.
    • Send me a code by text message
      • This method sends a text message containing a verification code that you will need to accurately enter in to the sign-in interface
  • d)  Click Next.

• Step 4) You will receive a call or verification code on your phone:

  • If you selected – Call me:
    • The Additional security verification page on your computer, will display Verifying phone.
    •  You will receive an incoming call on your phone displayed as Restricted.
    • Answer the call and follow the instructions.
  • If you selected – Send me a code by text message:
    • On your computer, enter the verification code received on your phone, then click Verify

• Set Alternate authentication option(s):

Important: To help ensure you are not locked out of your account, please set up as many of the phone options as possible. This provides a way to verify authentication in the event you do not have access to your primary phone, your battery is dead, your primary device is lost, stolen or damaged or you get a new phone or number.

• Select the checkmark next to each option you would like to set up, select country and enter the phone number.
• For Campus Office Phone, make sure to enter the exact 10-digit phone number for your desk phone. Do not include extension information. If the number listed is a general campus number, this will not work, make sure the phone number is your specific desk phone number.

• Step 5) Click Save, after you have set any alternate phone options you would like.
  • Your account is now set with MFA protection!

If you need assistance with MFA please contact IT Service Desk.

Information Security

What should I do when I get a verification request I don’t recognize?

If you receive approval requests for access to your Office 365 and you are not actively signing in to Minnesota State O365 connected applications (in other words you did not just attempt to log in to your O365 account using your Minnesota State O365 login credentials) then deny the access.

Stay Vigilant:

• You will not be prompted by MFA without your attempt to log in. MFA verification will never prompt you first. Do not approve or take action on any prompts if you are not logging into your account.
• No one, including IT Services, Metropolitan State University, Minnesota State Colleges or Universities, or other entities which may appear to be related, will ever contact or prompt you to ask you to “approve” an MFA notification or ask for a verification code.  
• Do not press # key for verification or enter verification code if you receive a voice call on your mobile device, office, or alternate phone. Ensure your spouse or trusted family doesn’t automatically enter the key(s) without checking with you first.