ܽƵ

MFA Help and Settings

Help and settings related to multifactor authentication.

MFA Setup When Enabled Automatically

Multifactor Authentication has been enabled automatically for certain Fort Lewis College groups on specific dates to maintain sufficient security to Fort Lewis accounts and data. Review the rollout dates below to determine if your demographic at ܽƵ has been enrolled in MFA:
  • 4/15/2022 - new employees and rehires
  • 10/15/2022 - all faculty, staff and other employees
  • 1/1/2023 - Workday portal access for staff, faculty, and student workers requires MFA
  • 3/27/2023 - new students who confirm attendance at Fort Lewis College on and after March 27th
  • 5/15/2023 - all active students
  1. When MFA is auto-enabled, your next login to any Microsoft application (Webmail, Teams, Word, Excel, Sharepoint, etc.) will prompt the message “more information required” before you can proceed. Click Next to add your verification method. Start with the Phone option for the quickest MFA setup, or see instructions to set up other method choices. You can add more methods and change your default after initial setup is complete.
    Note: You may choose ‘Skip for now’ if needed, which delays the setup for 14 days; after 14 days, you will receive this message again upon login, and will be required to finish setup before you can access any Microsoft applications.
    MFA more information required dialog
    1. To set up your phone, enter the phone number and choose Call me to receive an automated call, or Text me a code to receive a code to enter in your browser. Click Next.
      MFA phone setup dialog
  2. The process will test your method chosen to complete setup.
    1. If you choose Call me, answer the verification phone call sent to the phone number you entered, and follow the instructions.
    2. If you chose Text me a code, wait for the text to arrive to your phone, and enter it in the browser window.
  3. Click Done on your browser when your device has been verified successfully. Once finished you can access your ܽƵ Microsoft applications.
  4. Take the short to learn everything you need to know about method options, managing settings, and the ܽƵ policy for how often and when you will need to authenticate.

Manage Your Multifactor Authentication Settings in Microsoft

  1. To view current verification methods, add more sign-in methods, or make changes to methods, go to the top right of any Microsoft O365 app to your settings (Circle with your initials) and click View Account.
    Image of view account dialog
  2. Click Security Info on the left side of the page. Once the page loads you can see all methods you have set up and your current default method.
    Image of security information
Note: Your Sign-Ins page has a short session length (less than 10 minutes of inactivity before your process is interrupted). Ensure you are completing all setup steps promptly to avoid session timeout during the process.
Image of session timed out dialog
Ensure you have at least 2 methods set up for your account in the event you lose or do not have access to your default method. The first method you set up with MFA will be your default primary method until you change it from these settings. 

Add Another Device

  1. From the Security Info in your Microsoft Account, click Add sign-in MethodImage of security info dialog
  2. Choose one of the options to continue. Follow the additional instructions below for each optionImage of add a method dialog

Add an Office Phone Method

Note: This method is compatible with your landline work phone and Microsoft Teams number. 
  1. Go to Security Info in your account settings and click Add Method (See above instructions). Choose Office Phone and click AddGo to Security Info in your account settings and click Add Method. Choose Office Phone.
    Image of Add a method dialog
  2. Verify the populated country. Enter your Fort Lewis full phone number, or your Teams phone number (found in the Calls tab under the Keypad in Teams); if your Fort Lewis extension currently routes to Teams, you can enter either phone number.  Click Next
    Image of Phone dialog
  3. A verification phone call will be sent to the office phone number. The call will prompt you to enter a code or single key on your keypad to complete setup; if calling your Teams, click on the Keypad icon at the top of the phone call in Teams to open the keypad and click the key(s)
  4. After entering the code your screen will confirm if the verification was successful. Click Done
    Image of phone registered successfully dialog
Office Phone will now appear in your list of methods.

Setting Up Authenticator App

Refer to the Knowledgebase article below for install and setup instructions for the Authenticator App as a verification method.

Change Your Default Device

  1. Go to the icon at the top right corner of Outlook and click View Account
  2. Go to Security Info on the left tab. Next to Default Sign-In method will be your current default set
    Image of security info dialog change option
  3. Click Change and choose from another option.  Click your new select and ConfirmImage of change default method dialog
  4. You will be prompted to authenticate with the new method.  Complete the verfication on your device
  5. Click Done in your browser when complete

Update or Remove a Method or Device

From the Security Info Tab, you will see your list of all activated methods and devices. Each device has the option to the right to change certain devices like the phone number or email assigned by clicking Change. You will be prompted to verify a new device to complete a change. You can also remove the device as a sign-in method by clicking Delete.
Image of security info dialog highlighting change and delete options
FAQs

What if I am unable to verify when trying to log in to my account?

Example: I left my phone at home and was prompted to verify while on campus.
If you are unable to verify with your default sign-in method, under the code entry on your browser window, click “I can’t use my Authenticator App right now”.. This should provide you with the list of other devices you have set up as methods to choose how you would like to sign in. You should always have at least 2 devices configured.
Image of approve sign in request dialog
If you are still unable to log in to your Microsoft account, reach out to the IT Help desk:
  • Call 970-247-7444 during normal College business hours Monday through Friday
  • Email AskIT@fortlewis.edu
  • Submit an online request at
  • Call our emergency cell phone at 970-749-8191
Please see the Multifator Authentication FAQs page for more information.
Additional FAQ’s from Microsoft: Microsoft MFA -
Attached Files
Updated on Mon, 15 May 2023 by Bodine, James