2-Step Verification: Multifactor Authentication (MFA) for Microsfot 365

This article provides step-by-step instructions for setting up, changing, and resetting multi-factor authentication (MFA) for your UNC accounts, managing your verification methods and trusted devices, and updating your default verification preferences.

To keep your Microsoft 365 account safe, the University uses a security method called 2-Step Verification. With this method, you verify your identity before you see certain sensitive information or access your Microsoft 365 applications. You may verify with the Microsoft Authenticator App, a phone call, or a passcode sent through a text message.

Before You Begin

In This Article:

• Setting Up MFA
  • MFA Setup - Microsoft Authenticator App (Preferred)
  • MFA Setup - Phone Call/SMS Methods
• Modifying Existing MFA Settings
  • Add Verification Methods
  • Remove Verification Methods
  • Set/Change Default Verification Methods
• Resetting MFA​​​

​​

Setting up MFA

You can setup MFA using the Microsoft Authenticator app, A phone call, or via text message. 

MFA Setup - Microsoft Authenticator App (Preferred)

1. Please start by going to the Microsoft 365 landing page. https://Office.unc.edu
2. Sign in using your your Onyen@ad.unc.edu email address and Onyen password.
3. On the More information required page, select Next.
4. On the next screen you will be prompted to download and install the Microsoft Authenticator App.  
5. On a smartphone, go to the app store and install the Microsoft Authenticator if it is not already installed. The application is published by Microsoft Corporation.
6. Open the Microsoft Authenticator app if it is not already open and select Set up your account, if prompted allow notifications. 
7. If you already have an account select the + sign to add a new account.
8. Select Work or School Account.
9. Select Scan QR code.
10. Back to the computer, select Next on the Start by getting the app screen.
11. Select Next again on the Set up your account page.
12. Use the MFA app on your smartphone to scan the QR code displayed on the computer's screen. Your account should now be added to the Microsoft Authenticator App.
13. On the computer, select Next.
14. A verification code will be sent to your smartphone. Enter the code in the app and approve the login to proceed. 
15. On your Computer Select Next.
16. Once the notification is approved you will received a screen confirming it was approved, and confirming the default sign in method.  Please hit Done.
17. MFA is now setup!​​

MFA Setup - Phone Call/SMS Methods

1. Please start by going to the Microsft 365 landing page. https://Office.unc.edu
2. Sign in using your your Onyen@ad.unc.edu email address and Onyen password.
3. On the More information required page, select Next.
4. On the Start by getting the app screen. click I want to set up a different method.
   
5. You will be prompted to Chose a different method Select Phone.
   
6. From the Phone screen, enter your phone number. Choose the desired method: Call me or Receive a code
7. Click Next. 
8. If you selected Call me, you will receive a call from Microsoft, tap the # key on your phone to approve the authentication.
9. If you selected Receive a code, you will receive a text message. Enter in the code sent to your phone to approve the authentication.
10. you'll see a message saying verification is complete. Click Next.
11. The final notification will confirm that your MFA authentication has been successfully linked to your  account. Click Done.

Modifying Existing MFA Settings

Add Verification Methods

1. Please start by going to the Microsoft 365 landing page. https://Office.unc.edu
2. Sign in with your Onyen@ad.unc.edu (use this exact format).
3. Click on your profile photo or initials at the lower-left.
   
4. On your profile panel, click View Account.  A new tab My Account will open.
5. On the new tab, on the Security Info tile, click Update Info.
   
6. To add a new device, click + Add sign in method near the top.
   
7. Microsoft offers seven different methods that can be used for 2-step verification:
   • Passkey in Microsoft Authenticator: This option will allow you to use your phone itself to verify your identity via Bluetooth, the phone must be present at the device you authenticate against.
   • Security key: These cannot be used currently.
   • Microsoft Authenticator app (recommended): This option will guide you through setting up an app, such as the Microsoft Authenticator app, on your mobile device.
   • Hardware token: These cannot be used currently.
   • Phone: This will allow to set up a phone to receive calls/texts to verify logins.
   • Alternate phone: This is an option to set up a new phone that can be used, if your primary phone is unavailable.
   • Office phone: This option can only receive calls, so you can add an office number or any landline to verify your logins through a phone call.  This option will not appear if there is already an Office phone listed on your account, to add a new Office phone the previous one must be removed.
8. Select the method of your choosing and add the device following the directions provided.

Remove Verification Methods

1. Please start by going to the Microsoft 365 landing page. https://Office.unc.edu
2. Sign in with your Onyen@ad.unc.edu (use this exact format).
3. Click on your profile photo or initials at the lower-left.
   
4. On your profile panel, click View Account.  A new tab My Account will open.
5. On the new tab, on the Security Info tile, click Update Info.
   
6. Select Delete next to the option you would like to remove.
   
7. You will receive a confirmation prompt asking if you are sure you would like to delete this method for your account, select OK.

Set/Change Default Verification Methods

1. Please start by going to the Microsoft 365 landing page. https://Office.unc.edu
2. Sign in with your Onyen@ad.unc.edu (use this exact format)
3. Click on your profile photo or initials at the lower-left.
   
4. On your profile panel, click View Account.  A new tab My Account will open.
5. On the new tab, on the Security Info tile, click Update Info.
   
6. Near the top of the screen, click Change next to "Sign-in method when most advisable is unavailable"

6. On the Change default method pop-up, choose the default sign-in option from the drop-down.
7. Click Confirm to save your changes.

Resetting MFA

1. Please start by going to the Self Service Page.
2. If you are prompted to sign in, please use your Onyen and Password.
3. Approve the sign in with 2-Step Authentication for DUO if directed.
4. Select MFA Reset from the list in the center of the page or on the menu on the left hand side of the page (These links lead to the same page). 
   
5. Select Reset.
6. You should see the message "MFA is not enabled for this account, Please proceed with enabling MFA for your account" this indicates that MFA has been reset.
   
7. Right click on Microsoft 365 landing page and open it in a new private browsing window or use a different browser to go to https://office.unc.edu
8. Sign in with your Onyen@ad.unc.edu address and password.  If you are not prompted to Sign in, please try using a different Internet browser, or signing out and then loading the page again.
9. You should now be prompted to Sign up for MFA and can follow the steps from Setting Up MFA.