Setting Up Microsoft Authenticator for MFA

Microsoft Authenticator provides a secure way to verify your identity when accessing your SUNY Schenectady work or school account. Once configured, you can use the app for multifactor authentication (MFA), passwordless sign-in (if enabled), and account verification.

Before you begin:

• The Microsoft Authenticator app must be installed on your smartphone.
• You must be able to sign in to your SUNY Schenectady account.
• You should have access to your mobile device's camera to scan a QR code.
• Your account must be enabled for Microsoft Authenticator by ITS.

Note: If you experience issues during setup, contact the ITS Service Desk for assistance.

Option 1: Add a Work or School Account Using a QR Code

Step 1

Open a web browser and navigate to:

https://mysignins.microsoft.com/security-info

Sign in using your SUNY Schenectady email address and password.

Note: If you do not see the Security info page, navigate to Additional security verification, select the checkbox next to Authenticator app, and then select Configure to display your QR code.

Step 2

Select Add sign-in method.

Step 3

Choose Microsoft Authenticator from the drop-down menu and select Add.

Step 4

If Microsoft Authenticator is already installed on your phone, select Next to display the QR code.

Step 5

Open the Microsoft Authenticator app on your mobile device and select the + (plus) icon.

Step 6

Select Add account.

Step 7

Select Work or school account, then tap Scan a QR Code.

Step 8

Use your phone to scan the QR code displayed on your computer screen.

Notes:

• If you cannot use your camera, select Can't scan the image on your computer and choose Enter code manually in the Authenticator app.
• If enabled by your administrator, you may be prompted to register your device for passwordless phone sign-in and Microsoft Entra multifactor authentication.
• For U.S. Government organizations, phone sign-in accounts must be added using the Sign in with your credentials option.

Option 2: Add a Work or School Account Using Your Credentials

Step 1

Open Microsoft Authenticator and select the + (plus) icon in the top menu.

Step 2

Select Work or school account, then choose Sign in.

Step 3

Enter your SUNY Schenectady account credentials.

Note: If you have been provided a Temporary Access Pass (TAP), you may use it to sign in.

Step 4

Tap the account on your device and verify that the account information displayed in the full-screen view is correct.

Error: "To set up Microsoft Authenticator, you'll need to go to aka.ms/mfasetup on a web browser."

This error typically indicates that your account does not yet have enough authentication methods configured to obtain a strong authentication token. Open a web browser and complete additional security setup before attempting to add the account again.

Error: "You might be signing in from a location that is restricted by your admin."

Your administrator may have restricted Microsoft Authenticator registration through Conditional Access policies or Security Information Registration policies. Contact the ITS Service Desk for assistance.

Passwordless Sign-In and MFA

If your account is enabled for phone sign-in, Microsoft Authenticator can register your device for passwordless sign-in and multifactor authentication. Even if phone sign-in is not enabled, you can still use Microsoft Authenticator for standard multifactor authentication.

• Microsoft Authenticator can be used for multifactor authentication and account verification.
• The QR code setup method is the recommended enrollment method for most users.
• Passwordless sign-in availability depends on organizational settings and administrator approval.
• Temporary Access Pass (TAP) credentials can be used during enrollment when available.

Need assistance? Contact the ITS Service Desk.