Microsoft Authenticator

The AUAS considers safe online working very important. This is why two-step verification has been activated for the Microsoft Cloud. This includes OneDrive, Microsoft Teams, Microsoft Power BI and Microsoft Dynamics.

What is two-step verification?

Two-step verification allows an additional check to be made during login to establish the identity of the user with certainty. Two-step verification can also be encountered, for example, when logging in to your bank and/or DigiD. Want to learn more about what two-step verification is and how it works? Then take a look at this page from Microsoft on two-step verification .

One-time setup for Microsoft 365 apps

To gain access to Microsoft 365 you need to activate the two-step verification once via your mobile phone. When using Microsoft 365 you could, in case of suspicious login attempts, be asked to verify your login via your mobile phone. In this way we ensure that only you can access your mail and files stored in the Cloud.

Getting started with two-step verification

Make sure your private mail address is registered in DSPE before you start! Is this not the case yet? Then follow the steps below to do so:

  1. Log in to https://dspm.hva.nl and click on the tile 'Personal data'.
  2. Click on the tab 'Contact details' and change your private email address here.

Now go through the steps below to set up two-step verification on your cell phone.

  1. Open a browser on your laptop and go to https://aka.ms/mfasetup .
  2. Sign in with your full AUAS e-mail address and password.
  3. Click on Next until a QR code appears.
  4. Now take your phone and download the Microsoft Authenticator app (if you don't have this app yet).
  5. Open the app and click on Add Account > Work or School Account > Scan QR code.
  6. Scan the code on your laptop and click on Next.
  7. A test sign in request is sent to your app. Approve this test.
  8. Click on Next and Done at the website.

Two-step verification has now been set up successfully. If you have any questions or if your two-step verification doesn't work properly, please contact the Service Desk ICT Services at +31 (0)20-595 1402.

FAQ'S ABOUT THE MICROSOFT AUTHENTICATOR APP

We often use only a password to access our data. If someone were to hack you or look over your shoulder, however, your data become available to others. Two-step verification complements your password with another factor: something that you have. An example is a request on your telephone for additional confirmation to log in, also called a token. You then have to accept this additional confirmation after you have entered your password. In effect, it is a double check. Banks have been using two-step verification for much longer (such as TAN codes or an identifier).

Yes, of course. If you select the Microsoft Authenticator app, you do not require a mobile number. You should bring your device to work, though. Should you fail to register your mobile number, you will need to visit the FS desk in order to re-register if you replaced a lost phone. This process requires an identity document.

The Microsoft Authenticator app is available for iOS and Android. Use the links to check whether your device is compatible. If your device is unsuitable for the app, you have another option: during the registration wizard, select Telefoon [Telephone] as two-step verification. You will be called and asked to press the # button as additional confirmation when logging in. You should bring your device to work, though.

It works exactly the same domestically and abroad. You might be asked to confirm your login more often abroad, however.

If your phone does not have a signal or an active internet connection, use the code from the Authenticator app. You can select another method while logging in.

As each code is only visible for 30 seconds, you will never have the same code twice. These codes are one-off, so you need not remember them.

If you have a new telephone as well as a new mobile number, you need to re-register. To do so, go to https://id.medewerker.hva.nl, click on Two-step verification for Microsoft Cloud, log in and click on Reset two-step verification for Microsoft Cloud.

Should your new phone have the same number that you also registered in accordance with the manual, you can re-register the Microsoft Authenticator app using this mobile number. Follow the instructions for setting up two-step verification on this page.

There could be several reasons why installing the app does not work.

  • I do not have an active internet connection on my mobile phone or tablet. Find an active internet connection, which you need in order to download the app.
  • Your telephone may have been configured only to enable downloading apps via Wi-Fi. Turn off this option (please note: your data use may incur higher costs) or find a spot where you can connect to Wi-Fi and try again.

The apps require access to your camera, which you need in order to scan QR codes during the installation and the use of two-step verification. These apps only activate your camera for the above purposes.

I am registering from my telephone.
You will not succeed. What you need is a device to display the QR code (preferably a PC) and a tablet or smartphone to scan the QR code.

I am having problems with the camera.

  • You cannot use the Microsoft Authenticator app without a functioning camera. In this case, set up your telephone number for two-step verification.
  • The app does not automatically open my camera. Close and reopen the app.
  • If it still does not work, restart your phone and try again.

I have waited too long.
You are now unable to scan the QR code. Close the browser of your PC as well as the app and start over.

Tips to scan the QR code properly:

  • hold your telephone perfectly still while scanning. It may take a while before the scan is made, as your camera needs to focus on the QR code;
  • ensure that the QR code is fully visible while scanning;
  • ensure that only the QR code is visible while scanning;
  • do not hold your finger or other objects in front of the camera while scanning;
  • increase the brightness of your computer screen to enhance the contrast of the QR code and facilitate the scanning process of your camera.

Visit https://aka.ms/mfasetup. If you are having difficulties, follow the instructions on this page.

Yes, we recommend it. If you do, you will always have a back-up method. To add multiple methods, visit https://aka.ms/mfasetup.

Check the app settings on your telephone. Make sure that notifications are enabled. If they are, check the following settings:

  • is your telephone set to Do Not Disturb or Silent Mode? This set-up may interfere with push notifications;
  • are you receiving notifications from other apps? If not, the issue could rest with your device or with the Android or Apple push protocol;
  • are you receiving notifications from other accounts in the app? Log into https://aka.ms/mfasetup and delete the device in question. Next, delete the associated account from the app and add it again.

Outdated or special apps may not be able to handle two-step verification. In this case, choose one of the following apps:

  • the standard Mail app on iOS 11.x or later;
  • Outlook on iOS 10.x or later;
  • Outlook on Android.

When setting up the two-step verification, choose the option to register your mobile phone number. With this method you will be called at the specified number and then give a confirmation by typing #.

You can request a temporary exemption, valid for four days. To apply, go to https://id.medewerker.hva.nl, click on Two-step verification for Microsoft Cloud, log in and click on Request temporary exemption two-step verification for Microsoft Cloud.

You can, but we recommend that you always use a VPN connection for MS Teams and OneDrive.

The App is probably protected by App Lock, which is a security setting on your phone. Check your phone's settings to find out how to turn it off, or Google your phone type to find out how to reset it on your phone.

Go to https://aka.ms/mfasetup and log in with your e-mail address and password. If you have set up two-step verification correctly, you will then receive a request on your phone to confirm the login.

You still need to set up two-step verification in the usual way. A Yubikey can't as yet be used for Microsoft Cloud two-step verification.

Published by  ICT Services 21 April 2022