ܽƵ

Installing the Microsoft Authenticator App

How to information on how to install the Microsoft Authenticator app.

Installing and Setting Up Authenticator App method

Image of the authenticator app icon

With the free Microsoft Authenticator app, you can utilize a cell phone or tablet to verify safely with MFA when signing into your Fort Lewis College Microsoft account and applications. The app offers several options to receive and confirm authentication to suit your needs, including notification code by text, push notification, or passwordless auth. You can also add more security to your device by requiring a pin or biometric to open the Authenticator app or approve a notification; this prevents someone else from accessing your account if your device is lost or stolen.

Note: Setup involves steps on both your computer browser to access your Sign Ins page, and your mobile device. Your Sign-Ins page has a short session length (less than 10 minutes of inactivity before your process is interrupted). Ensure you are completing all setup steps promptly to avoid session timeout during the process.

Image of session timed out popup

Complete steps below to set up the Authenticator app and sync it to your Fort Lewis College Microsoft account. Ensure steps 1 through 3 are complete before moving on to step 4 to avoid session timeout during setup.

From your mobile device:

  1. the Microsoft Authenticator app to your mobile device from the link
  2. Open the Authenticator app on your mobile device, click the three dots in the top right and click Settings
  3. Scroll down to the Security section and ensure Screen Capture is on. This setting is needed to sync your Fort Lewis account in a later step
    Image of authenticator menu for settings  Images of authenticator screen capture option in settings
  4. From your desktop or laptop Sign in to your
  5. Select Add sign-in method and choose Authenticator app, then click Add
    Image of security info methods pageImage of add security method dialog
  6. You will be provided the link again to download the app to your mobile device. The app should already be downloaded to avoid session timeout during setup. Click Next.
    Image of authenticator get app screen
  7. A QR code will appear in your browser
    Image of QR code to scan for authenticator
  8. From your mobile device, open the authenticator app, select the three dots in the upper right, the click Add account
    Image of authenticator add account option  Image of authenticator add account kind
  9. Select the account type Work or school account, and select Scan a QR code
  10. Hold your mobile device up to the screen and scan the code shown on your computer browser. Click Next on the browser and mobile device once scan is complete
    Image of QR code scan for authenticator
  11. From your computer, make sure you get the message that says your configuration was successful on your browser
    Image of sucessful authenticator configuration
  12. The authenticator app will send a notification to your mobile device as a test as either a code or push notification. You will receive a popup notification on your mobile device. Open the notification on your device, and enter the provided code in your browser, or click Approve in the mobile notification
    Image of mobile device authenticator notification  Image of authenticator sign-in approval
  13. Select Next on the computer when prompted to complete the setup. The Microsoft Authenticator will now appear in your list of methods
    Image of authenticator notification approved
  14. Your Authenticator App home screen should now display the profile Fort Lewis College with your fortlewis.edu email address. If your app does not display this name on the profile, the account sync was not successful. Reach out to the IT Help Desk for assistance, or re-start the process from Step 4
    Image of authenticator app profile screen
Helpful Hints for Setting up the Authenticator App
  • You can add the Authenticator app as a method for more than one device, such as a tablet or cell phone
  • Be advised that your Security Info page has a short timeout window. Download the app first before logging in to your security info page to ensure you can complete all steps without your webpage timing out
  • Once your app is installed, go to the settings within the Authenticator app at the top right to check Settings
  • Consider also turning on App Lock. This setting locks your Authenticator app and requires an unlock pattern when you are prompted to authenticate your account. If you were to lose your phone, this prevents someone else from authenticating your account as you
  • You can also choose to require a Biometric fingerprint or PIN number instead of the lock option above to increase your security
If you are having issues installing or syncing the Authenticator app, reach out to the IT Help desk
  • Call 970-247-7444 during normal College business hours Monday through Friday
  • Email AskIT@fortlewis.edu
  • Submit an online request at
  • Call our emergency cell phone at 970-749-8191
Microsoft Authenticator Notification Options
Your Microsoft browser window will notify that you need to authenticate. Your app will send a notification to your phone. There are several options to choose from within the Authenticator App.
  • One-Time Code - Your mobile device will receive a notification pop-up with a number code to enter into your browser
  • Push Notification - Your mobile device will receive a notification pop-up to verify an attempted login by clicking Approve or Deny
  • Passwordless Auth - Your browser window will give you a 2 digit number to enter in your App notification pop-up on your mobile device. See ܽƵ Knowledgebase-MFA- Passwordless Authentication to setup this method
  • The Authenticator App can be installed on a tablet or secondary device
  • The Authenticator App can also be programed to lock your device screen with a password, biometric, or pin before you can approve a verification. This is as an additional safety measure in case your device is lost. Explore screen lock and biometric capabilities from the Settings under the 3 dots menu in the App
    Image of authenticator settings option
No Phone? If you do not have a cell phone or tablet, and would like to utilize the Authenticator App,  wi-fi only phones are available to rent from Media Services.
Refer to the Microsoft reference pages on their webpage for more information


Common FAQ’s
I accidentally dismissed my pop-up notification to authenticate on my phone.  How do I get it back?
Notifications for the Authenticator app methods can be retrieved by opening the actual App on your device. Open the App and click on the Fort Lewis College profile. This should initiate another pop-up to authenticate. 

You have about 30 seconds to authenticate before the notification expires. If you can’t get to your device within the timeframe, you can either prompt the browser window to resend the notification, or sign in a different way with another method.
What if I am unable to authenticate with my primary method when logging in to my account?
Example: I left my phone at home and was prompted to verify while on campus.

If you are unable to verify with your default sign-in method, under the code entry on your browser window, click “I can’t use my Authenticator App right now”. This should provide you with the list of other devices you have set up as methods to choose how you would like to sign in. You should always have at least 2 devices configured.
Image of MFA dialog to approve sign in
What if I lose my phone, or got a new phone, and it is my primary method for authenticating?
You should be able to access your Microsoft account from your computer while on campus connected to the campus internet network without being prompted.
In Microsoft 365, click on the far top right initials icon on the browser and go to View Account. Click Security Info. This is where you can make changes to your current default sign-in method, add other methods, edit existing methods, and sign out on all devices if needed.
  1. Ensure you have more than one sign-in method on your account. You should have at least 2 methods set up at all times. You can also check out a FIDO key as an additional method until you get a new device, or long term as a non-phone method
  2. Update your . If your default sign-in method is your old/lost phone, or the Authenticator Mobile app, Click Change next to Default Sign-In Method and update it to another method that you can access immediately.
  3. Once you have a new phone,  Add the new device from your . Click Add Method to add the Phone. If your previous Phone was set up and you have a new phone number, you can alternatively click Change next to the number and update it to the new phone. You will be prompted to verify the new device.
  4. In your Security Info, Delete the Microsoft Authenticator app from your methods list. If you can access your old phone, uninstall the Authenticator App from the old phone.
  5. Set up the Authenticator Mobile App on your new phone from . Follow the instructions above to set up the app and sync it to your Fort Lewis Microsoft account.
  6. Once you have ensured you have updated your default sign-in method, Click Sign Out Everywhere in Security Info Settings. You will be prompted to authenticate your Microsoft account to make the change. The old phone will now be unable to access your account.
    Images of security info dialog highlighting the Sign out everywhere option
What if I receive a notification to authenticate when I'm not actively trying to login to my Microsoft account, Workday, or VPN?
NEVER authorize a verification request from your primary method if you did not initiate it! If you receive an unexpected prompt to authenticate, someone else may be trying to get in to your account!

If you don't know why, just deny!
Updated on Thu, 23 Mar 2023 by Bodine, James