MFA: Setting up Authenticator App on a new phone

Summary

This article provides instructions for setting up Multi-factor Authentication (MFA) for your M365 account on a new or different phone device.  This article is for use when replacing a phone (or mobile device) that was already set up with both:

  1. the Microsoft Authenticator app for use with MFA for M365 at USNH 
  2. plus at least one backup method.  

After you have two or more MFA methods and have your existing phone number ported to a new phone or device, then you are ready to follow these steps.  

Important: If you did NOT have a backup MFA method on your old phone, then you must call the Technology Help Desk or visit in person to set up the Microsoft Authenticator app on your new phone.

First: Please install the app on your new phone or device before you begin the set up steps below.  You will find step-by-step instructions in the article Installing the Microsoft Authenticator App

For an overview, we recommend this two-minute video of the entire process, also available at https://youtu.be/jTwtosQkn6I .

 

How-To

Task: To re-register a new phone device for Multi-factor Authentication (MFA) for your USNH M365 account.

 

Instructions

Step 1On your computer, go to:  myaccount.microsoft.com 

If your account is already signed in, Skip down to Step 2.

Step 1A - If prompted with a Microsoft Sign In page, sign in using your username@usnh.edu (e.g. jbd2519@usnh.edu) to identify yourself.

Step 1B - Enter your current password on the next screen.

Step 1C - When prompted to authenticate your login with the Microsoft Authenticator app, click Sign in another way or I can't use my Microsoft Authenticator app right now

Step 1D - Choose one of your alternate authorization methods, such as having a text message (or phone call) sent to your new phone (with the same phone number as your old phone had).

Important: If you did not set up any alternative (backup) authorization methods, then you must call the ET&S Help Desk or visit in person to re-register your new phone.

Step 1E - Enter the code from the text message or phone call and click Verify.

 

Step 2 - Click on UPDATE INFO in the Security info tile

Security info box with "UPDATE INFO" link

 

Step 3 - Locate the Microsoft Authenticator method in your list of methods and click Delete.  Confirm the deletion.  This removes the old phone's app registration from your account.

Note: if you see more than one Microsoft Authenticator app in the list, be sure to delete the one tied to your old phone's model number or device name (shown in the second column).

Step 4 - Click Add sign-in method

Security info with list of MFA sign-in methods and link to "Add sign-in method"

 

Step 5 - Click the Choose a method drop down and select Authenticator app

"Add a method" dialog with drop-down box and option to select "Authenticator app"

 

Step 6 - If you do not have the Microsoft Authenticator app on your phone, install it now.  

Step 7 - Click Next after the Microsoft Authenticator app is installed on your phone.

Pop up with links to get the Microsoft Authenticator app and a "Next" button to use after the app is installed on your phone.

 

Step 8 - On your phone, open the Microsoft Authenticator app.  Allow notifications if prompted.

Step 9 - In the app, click Add account or the Plus Sign +. Select Work or School account and the option to Scan QR Code.

in app Add Account options

 

Step 10 - If prompted, Allow the app to Access the Camera.

Allow the app to Access the Camera by clicking OK

 

Step 11 - Use your phone to scan the QR code that appears on the computer screen.  After you scan the code, click Next.

Image to scan the QR code

 

Step 12 - If prompted, Allow the Authenticator app to Send You Notifications.

Step 13 - On your phone, Approve the test notification from Microsoft Authenticator

Let's try it out

 

Step 14 - You're all set and can now use the Microsoft Authenticator app for multi-factor authentication (MFA).

Notification approved

 

Step 15 - We strongly recommend that you also set up one or more backup methods to use if your primary method is not available.  Follow on-screen prompts to add as many back up methods as you desire from the Choose a method drop down. 

Example: Choose other method(s) for Microsoft MFA

 Choose a method drop down list

Possible methods include:

  • Call my authentication phone
  • Text a code to my authentication phone
  • Call my office phone
  • Notify me through a mobile app (as just set up above)
  • Use verification code from app or token - this includes modern YubiKeys

See this article which explains how each MFA method behaves as you use Microsoft resources such as Email, Teams, OneDrive, or SharePoint: Choosing a preferred method of Multi Factor Authentication (MFA) for M365.

 

Outcome

MFA for M365 is now set up on your new or different phone or device.  

Users who have set up Multi-factor Authentication for M365 will be prompted to MFA periodically when signing into Email, Teams, OneDrive sync, and other M365 tools on both their computers and their mobile devices. Other applications (such as myPortal, Kaltura, and Canvas) use Single-Sign On (SSO) so users may be prompted to MFA when logging into those applications as well.

 

Further reading

Two-minute video from Microsoft - shows the entire process

MFA: Multi-factor Authentication and USNH Systems

MFA: Choosing a preferred method of Multi Factor Authentication (MFA) for M365

MFA: Adding Backup Multi-Factor Authentication (MFA) Methods

MFA: Installing the Microsoft Authenticator App

MFA: Setting up Multi Factor Authentication (MFA) for M365 - using a computer (recommended method)

MFA: Setting up Microsoft Authenticator App using Mobile Phone/Device only

MFA: Changing phones or phone numbers

 

Need additional help?

Visit the Technology Help Desk Support page to locate your local campus contact information or to submit an online technology support request.  For password issues you must call or visit the Help Desk in person.