Azure MFA Frequently Asked Questions

How do I...

Change my MFA Settings?

There are several situations where you may need to add an additional MFA device or switch to a new one.  For each of these cases, you will first need to access your Microsoft "Security Info" settings

• Login to Microsoft Security Info
  
  • If you have already configured MFA for your account, you will need to fulfill an additional verification before these settings can be accessed.
  • If your device is unavailable and/or you are unable to meet these requirements, please contact the CIS HelpDesk to gain access.

Switch to a New Phone (Device)

If you have the new device, but it does not yet have your existing phone number:

1. Setup the Microsoft Authenticator method on the new device following instructions in the section below to "Add an Additional MFA Device"
2. Activate your new phone through your provider
3. Remove your old device, following instructions in the section below to "Remove a MFA Device" 

If you have already activated your new device with your existing phone number:

1. Login to your Microsoft Security Info page.
   
   1. If you don't have your old device and don't have your existing phone number configured as a backup method, you will need to contact the CIS HelpDesk to assist you in adding an additional MFA method.
2. Select, "I can't use my Microsoft Authenticator app right now" and choose to receive a call or text to complete the MFA requirements.
3. Select "Add method" and follow the on-screen instructions to register the Microsoft Authenticator app.
4. Once your new device is completely configured for Azure MFA, remember to remove your old device, following the instructions below to "Remove a 2FA Device"

Switch to a New MFA Device with New Phone Number

If you have your new phone number and device, you may follow the instructions below to "Add an Additional 2FA Device" and add the new phone number.

If you have already switched devices and no longer have the old device, you will need to contact the CIS HelpDesk to assist you in adding an additional MFA method.

Add another authentication method?

1. Login to your Microsoft Security Info page.
2. Select "Add method"  and follow the on-screen instructions to register the additional device.

Note: If you do not have your existing 2FA device, you will need to contact the CIS HelpDesk to assist you in gaining access to your Security Info page.

Remove an authentication method?

1. Login to your Microsoft Security Info page.
2. You should see your registered authentication methods
3. Click "Delete" for the device you would like to remove

Reactivate the same phone/device? 

1. Login to your Microsoft Security Info page.
2. You should see your registered authentication methods
3. Click "Require re-register MFA" 

Manage the mobile app notifications

If you have an Android or iOS mobile device, you can install the relevant mobile app (  iOS   |  Android   ) and use it for push notifications.

This method is highly recommended for the following reasons:

• It is the quickest and most convenient option
  • Your phone is already something you carry with you.
  • MFA Push is as simple as approving a notification on your smartphone
  • It's quicker than receiving a text and typing in a passcode or answering a phone call
• It is more secure
  • Azure MFA push notifications uses end-to-end encryption that SMS and phone calls cannot
• It still works even if your mobile device has no internet connectivity
  
  • See steps below to use a "Authenticator Passcode"

Microsoft Authenticator Mobile Passcode

1. Open the Microsoft Authenticator mobile app
2. Tap the "Seattle Pacific University" entry to expand and see the passcode
3. During SSO login, select "Use a verification code from my mobile app" to enter the passcode
   1. If Push notifications are your default method, you won't see this option unless you select "I can't use my Microsoft Authenticator app right now"

How often will I....

Be prompted to MFA on my web browser?

After your initial sign up and MFA prompt, you may not see prompts again for up to one week.  If you change browsers or devices or use incognito/In Private browsing, you will be prompted to MFA more often.

Be prompted to MFA on my computer applications (Outlook, Teams, Mail, etc.)

After your initial sign up, you should receive prompts on the applications you use either the next time you open them or when your log-in session times out.  After that initial time, your MFA prompts will be approximately once per quarter.

Why can't....

I request the additional accounts or resources  I need after I setup Azure MFA?

After you setup MFA, it can take up to an hour for Microsoft to recognize the change.  Please wait and try again to request your additional accounts in the Banner Info System. (see Request Additional Accounts)

What if...

I can't use the mobile app?

Setup Text Message

You may configure a text-enabled mobile device as your MFA Device.  When you receive the MFA prompt during login, you'll need to take a couple extra steps compared to a push notification.

1. Click "Text +X XXXXXXXX89"
   1. If Push notifications are your default method, you won't see this option unless you select "I can't use my Microsoft Authenticator app right now"
2. Wait for text message (SMS Message rates may apply)
3. Enter the provided verification code and click "Verify"

Phone Call

You may configure a phone (NOT your Campus Phone) as your MFA Device.  When you receive the MFA prompt during login, you'll need to take a couple extra steps compared to a push notification.

1. Click "Call +X XXXXXXXX89"
   1. If Push notifications are your default method, you won't see this option unless you select "I can't use my Microsoft Authenticator app right now"
2. Answer the phone call and follow the prompt
3. If successful your authorization will be approved

I can't use the mobile app, text messages or phone call options for MFA?

Please reach out to the CIS HelpDesk at help@spu.edu or call our office at 206-281-2982 to talk through your options and next steps.