⌛ Duration: 5 min.
MFA M365
Multi-factor authentication (MFA) is easy to set up and only needs to be performed once, unless you change the device you use to authenticate. In that case, you'll need to set it up again.
Which MFA method should I choose?
|
Situation
|
Recommended MFA method
|
Available MFA method
|
|
I have a smartphone
|
Microsoft Authenticator App (notification)
|
App (notification or code)
SMS
phone call
|
|
I have a cell phone
|
SMS
|
SMS, phone call
|
Recommended configuration: Microsoft Authenticator application
We recommend that you use the Microsoft Authenticator application, as it is considered the simplest and most secure authentication method. You can even use it when you don't have Internet access, or when your phone is in airplane mode. The application does not give the HES-SO Valais-Wallis access to your personal device.
Configure Microsoft Authenticator (notification)
On your computer, in your web browser, go to: https://mysignins.microsoft.com/security-info. Log in using your HES-SO login (firstname.name@hes-so.ch) and password if you are not already logged in.
Click on Add sign-in method, select Authenticator App and click on Add.
You'll see an invitation to Start by getting the app.
On your personal smartphone, search for the Microsoft Authenticator app in Google Play or App Store, depending on your device, and install it.
Back on your computer, click Next. The next screen shows: Set up your account.
If prompted, enable notifications.
Then add an account and select Work or School.
Click Next again to display a screen showing a QR code.
On your smartphone, open the Authenticator application.
Click on the plus (+) button to Add an account.
Make sure you choose Work or School Account.
Choose the Scan QR code option.
Use your smartphone's camera to scan the QR code that appears in your computer's web browser. This will add your HES-SO account to the Authenticator application.
On your computer, in the web browser, click Next.
Multi-factor registration (MFA) will send a notification to your smartphone. Approve the notification on your smartphone by entering the 2 digits displayed, and you should see an Approved Notification screen in your web browser.
On your computer, click Next and, on the next screen, click Done.
You are now configured to authenticate using an authentication application.
Configuring another smartphone application (with code)
If you choose an application other than Microsoft Authenticator to install on your smartphone, follow the instructions below:
On your computer, in your web browser, go to: https://mysignins.microsoft.com/security-info .
Log in using your HES-SO login (firstname.name@hes-so.ch) and password if you are not already logged in.
Click on Add sign-in method.
Select Authenticator App and click on Add. You will see an invitation to Start by getting the app.
On your personal smartphone, install the desired MFA application.
Back on your computer, click on I want to use a different authenticator app.
The next screen shows: Set up your account.
Click Next again to display a screen showing a QR code.
On your smartphone, open the installed MFA application.
Use your smartphone's camera to scan the QR code displayed in your computer's web browser. This will add your HES-SO account to the application.
On your computer, in the web browser, click Next.
Now enter the 6-digit code displayed in your smartphone application.
On your computer, click Next and, on the next screen, click Done.
You are now configured to authenticate using an authentication application.
Setting up by SMS or phone call
To set up authentication by SMS or phone call, please follow the instructions below.
On your computer, in your web browser, go to: https://mysignins.microsoft.com/security-info .
Log in using your HES-SO login (firstname.name@hes-so.ch) and password if you are not already logged in.
Click on Add sign-in method, select Phone, and click on Add.
Choose your country code (e.g. Switzerland +41) and enter your phone number.
Select either Text me a code to set up authentication by text message, or Call me to set up authentication by phone call.
On your phone, open the text message or answer the automated phone call to access your authentication code.
On your computer, enter the code you received by text message or phone call enter # on your phone, then click Next, then Done on the next screen.
You are now configured to authenticate by SMS or phone call.
IMPORTANT: Do not use your office number +41 58 606 XX XX. This works with the Teams application, which will also need the MFA. When Teams asks you for the MFA, you won't be able to answer the call because you won't be authenticated.
Modify Microsoft Authenticator for use with codes
Register Microsoft Authenticator as described in the Setup Microsoft Authenticator (notification) procedure.
From the Security Information page, under Default sign-in method, click on change.
Then select the method App based authentication or Hardware token - ... and click on confirm.
Other documentation : https://support.microsoft.com/en-us/account-billing/set-up-the-microsoft-authenticator-app-as-your-verification-method-33452159-6af9-438f-8f82-63ce94cf3d29