Multi-Factor Authentication (MFA), also known as 2FA, is an additional verification step to increase security for Microsoft user accounts. Microsoft offers multiple ways to authenticate and verify users. This article describes three of the most frequently used authentication methods: Microsoft Authenticator app, SMS, and email.
Microsoft Authenticator App
Microsoft Authenticator app is used to verify a sign-in request for a user's Microsoft account. This is Purely Cloud's recommended method of MFA.
Step 1: Sign in to Microsoft Account
Click this link https://aka.ms/MFASetup and sign in to Microsoft 365 account.
Step 2: Add Method
Click + Add method.
Step 3: Select Authenticator App
Select Authenticator app from the drop-down menu. Click Add.
Step 4: Download Microsoft Authenticator App
Users will receive a prompt to download Microsoft Authenticator app. Click Next.
Step 5: Click Next
Step 6: QR Code
Remain on Scan the QR code page until Microsoft Authenticator app is setup on a mobile device.
Step 7: Download Microsoft Authenticator App
Download Microsoft Authenticator app on a mobile device.
Step 8: Select Scan QR Code
Step 9: Access to Camera
Microsoft Authenticator app will ask for a permission to access the camera. Select OK.
Step 10: Scan QR Code
Use the app to scan the QR code from Step 6.
If the QR code does not scan, follow the instructions in this link to manually enter the code.
Step 11: Approve Sign-In
Users will receive a notification from Microsoft Authenticator app to either Approve or Deny access to the account. Select Approve.
Confirmation
The account is now added to the Microsoft Authenticator app. Microsoft Authenticator is set as the default MFA method.
SMS
This method of MFA uses a text messaging feature to verify a sign-in request for a user's Microsoft account.
Step 1: Sign in to Microsoft Account
Click this link https://aka.ms/MFASetup and sign in to Microsoft 365 account.
Step 2: Add Method
Click + Add method.
Step 3: Select Phone
Select Phone from the drop-down menu. Click Add.
Step 4: Enter Phone Number
Enter the phone number, then choose Text me a code. Click Next.
Step 5: Enter Verification Code
Enter the verification code from the text message into the text field. Click Next.
Step 7: Click Done.
Email Address
Email address cannot be used as sign-in authentication method. Email address is only available as a verification option for self-service password reset (SSPR). When a password needs to be reset an email is sent for verification.
Step 1: Sign in to Microsoft Account
Click this link https://aka.ms/MFASetup and sign in to Microsoft 365 account.
Step 2: Add Method
Click + Add method.
Step 3: Select Email
Select Email from the drop-down menu. Click Add.
Step 5: Enter Alternative Email Address
Enter an alternative email address that is different from the work email address. Click Next.
Step 6: Enter Verification Code
Enter verification code sent to the alternative email address into the text field. Click Next.
The security info is now updated and the alternative email address can be used to verify the user's identity when using password reset.
For further assistance, contact Purely Cloud Support at [email protected].