2-Step Verification: Multi-Factor Authentication (MFA) for Microsoft 365

This article provides step-by-step instructions for setting up, changing, and resetting multi-factor authentication (MFA) for your UNC accounts, managing your verification methods and trusted devices, and updating your default verification preferences.

To keep your Microsoft 365 account safe, the University uses a security method called 2-Step Verification. With this method, you verify your identity before you see certain sensitive information or access your Microsoft 365 applications. You may verify with the Microsoft Authenticator App, Passkey, or a Security Key.

 

Before You Begin

 

In This Article:

​​

Setting up MFA

You can setup MFA using the Microsoft Authenticator app, available on Android and iOS

MFA Setup - Microsoft Authenticator App (Preferred)

  1. Please start by going to the Microsoft 365 landing page. 
  2. Sign in using your your Onyen@ad.unc.edu email address and Onyen password.
  3. On the More information required page, select Next.
  4. On the next screen you will be prompted to download and install the Microsoft Authenticator App.  
  5. On a smartphone, go to the app store and install the Microsoft Authenticator if it is not already installed. The application is published by Microsoft Corporation.
  6. Open the Microsoft Authenticator app if it is not already open and select Set up your account, if prompted allow notifications. 
  7. If you already have an account select the + sign to add a new account.
  8. Select Work or School Account.
  9. Select Scan QR code.
  10. Back to the computer, select Next on the Start by getting the app screen.
  11. Select Next again on the Set up your account page.
  12. Use the MFA app on your smartphone to scan the QR code displayed on the computer's screen. Your account should now be added to the Microsoft Authenticator App.
  13. On the computer, select Next.
  14. A verification code will be sent to your smartphone. Enter the code in the app and approve the login to proceed. 
  15. On your Computer Select Next.
  16. Once the notification is approved you will received a screen confirming it was approved, and confirming the default sign in method.  Please hit Done.
  17. MFA is now setup!​​

 

 

Modifying Existing MFA Settings

Add Verification Methods

  1. Please start by going to the Microsoft 365 landing page. 
  2. Sign in with your Onyen@ad.unc.edu (use this exact format).
  3. Click on your profile photo or initials at the lower-left.
  4. On your profile panel, click View Account.  A new tab My Account will open.
  5. On the new tab, on the Security Info tile, click Update Info.
  6. To add a new device, click + Add sign in method near the top.
  7. There are four 2-step verification methods presented within Microsoft 365:
    • Microsoft Authenticator app (recommended): This option will guide you through setting up an app, such as the Microsoft Authenticator app, on your mobile device. (Android and iOS)
    • Passkey in Microsoft Authenticator: This option will allow you to use your phone itself to verify your identity via Bluetooth, the phone must be present at the device you authenticate against.
    • Passkey : This would include other Passkey managers e.g. LastPass, Apple Keychain, 1Password, BitWarden, and ProtonPass. 
    • Security key: You can check with your department to see if a security device can be purchased on the departmental P Card.  Otherwise, they are inexpensive and can be purchased through Amazon or other retailers.
  8. Select the method of your choosing and add the device following the directions provided.

 

Remove Verification Methods

  1. Please start by going to the Microsoft 365 landing page. 
  2. Sign in with your Onyen@ad.unc.edu (use this exact format).
  3. Click on your profile photo or initials at the lower-left.
  4. On your profile panel, click View Account.  A new tab My Account will open.
  5. On the new tab, on the Security Info tile, click Update Info.
  6. Select Delete next to the option you would like to remove.
  7. You will receive a confirmation prompt asking if you are sure you would like to delete this method for your account, select OK.

 

Set/Change Default Verification Methods

  1. Please start by going to the Microsoft 365 landing page.
  2. Sign in with your Onyen@ad.unc.edu (use this exact format)
  3. Click on your profile photo or initials at the lower-left.
  4. On your profile panel, click View Account.  A new tab My Account will open.
  5. On the new tab, on the Security Info tile, click Update Info.
  6. Near the top of the screen, click Change next to "Sign-in method when most advisable is unavailable"

  1. On the Change default method pop-up, choose the default sign-in option from the drop-down.
  2. Click Confirm to save your changes.

 

Resetting MFA

  1. Please start by going to the Self Service Page.
  2. If you are prompted to sign in, please use your Onyen and Password.
  3. Approve the sign in with 2-Step Authentication for DUO if directed.
  4. Select MFA Reset from the list in the center of the page or on the menu on the left hand side of the page (These links lead to the same page). 
  5. Select Reset.
  6. You should see the message "MFA is not enabled for this account, Please proceed with enabling MFA for your account" this indicates that MFA has been reset.
  7. Right click on Microsoft 365 landing page and open it in a new private browsing window or use a different browser to go to https://m365.cloud.microsoft/apps?auth=2&home=1
  8. Sign in with your Onyen@ad.unc.edu address and password.  If you are not prompted to Sign in, please try using a different Internet browser, or signing out and then loading the page again.
  9. You should now be prompted to Sign up for MFA and can follow the steps from Setting Up MFA.

 

 

Print Article