Multifactor Authentication
Multifactor Authentication (MFA) is a security measure that requires users to provide two or more forms of verification before gaining access to an account or application. This typically involves something you know (like a password) and something you have or are — such as a mobile device, fingerprint, or facial recognition.
By requiring multiple factors, MFA significantly reduces the risk of unauthorized access. Depending on the application and its security policies, the frequency with which you’re prompted to complete MFA may vary.
Microsoft Authenticator Setup Instructions
Step 1. Download and install the Microsoft Authenticator application
The authenticator application can be downloaded by scanning the QR code with your phone.
Download the Microsoft Authenticator application by tapping on the Apple App Store or Google Play Store below.
Step 2. Add Microsoft Authenticator to your University of New Haven account
- On your computer, visit the My Security portal or go to https://mysignins.microsoft.com/security-info.
- If prompted, login with your University of New Haven email address and password.
- Select Add sign-in method
- Select Microsoft Authenticator from the list
- On the Start by getting the app window, select Next.
- On the Set up your account window, select Next.
- The Scan the QR code page appears. Remain on this page on your desktop while you set up the Microsoft Authenticator app on your mobile device. Do not scan this QR code until step 12. Note: The QR Code presented on your computer can only be scanned by the Microsoft Authenticator application.
- Open the Microsoft Authenticator app on your iOS or Android device, select to allow notifications (if prompted).
- Tap on the + icon on the upper-right corner.
- A new screen will appear to add an account to the application. Tap on Work or school account.
- On your device, select the Scan QR code option.
Note: The first time you set up the Microsoft Authenticator app, you might receive a prompt asking whether to allow the app to access your camera (iOS) or to allow the app to take pictures and record video (Android). You must select Allow so the authenticator app can access your camera to take a picture of the QR code in the next step. If you don’t allow the camera, you can still set up the authenticator app, but you’ll need to add the code information manually. - Scan the provided code on your computer with the Microsoft Authenticator app.
- When you see your University of New Haven account listed, please go back to your computer for further setup. Keep your device nearby as it will be needed shortly.
- Select Next on the Scan the QR code page on your computer.
- Once you click Next, a number will appear on your screen and a push notification will be sent to your device to test your account.
- Type the number shown on your computer into the Microsoft Authenticator application on your device and tap Yes.
- After you enter the number and tap Yes, the notification has been approved. On your computer click Next.
Congratulations! You are now setup with the Microsoft Authenticator app and can receive push notifications for multi-factor authentication verification and for password reset.
MFA Frequently Asked Questions
No. MFA using the Microsoft Authenticator app or a Security Key is mandatory for all University systems and applications, such as Office 365, starting June 15, 2025.
Microsoft Authenticator is the MFA tool the Office of Information Technology has selected to provide an MFA solution to the University community. Microsoft Authenticator is a leader in the MFA industry, especially in Higher Ed. After extensive testing, OIT has determined Microsoft MFA provides the best combination of security and user experience.
Users are required to download an app to their smartphone (iPhone or Android) and register that device to their account. At the time of login to myCharger (and any future systems secured by MFA) they will receive an alert on their smartphone to verify their identity on the Microsoft Authenticator app. Users are advised to register a second authentication method, such as a phone call, text/SMS, or security key to verify your identity.
Microsoft Authenticator app (Default Method)
- Microsoft Authenticator is the preferred solution for approving MFA requests. It provides a push notification to enter a two digit code into the authentication dialogue, and can generate 6 digit codes if needed.
SMS Codes
- Users can receive text messages/SMS containing codes they can enter to approve the authentication.
- This method is only recommend as a back-up if the Authenticator app is not available. To receive text messages for authentication you must first set up your account to include text messaging as a verification method.
Phone Calls
- Users can register a cell or landline phone number to receive a call that prompts them to approve the authentication.
- This method is only recommend as a back-up if the Authenticator app is not available.
Security Key (Hardware token or Passkey)
If you do not own a smartphone or would like a strong secondary authentication method, a Security Key may be utilized.
In the event you don’t have your standard authentication device with you or you don’t own a smartphone, be sure to register additional devices such as your office phone or additional mobile device. Microsoft providers users the option to receive a call or text to verify your identity.
Additionally, you may register a Security Key (hardware token) as an MFA method. If you do not have a compatible smartphone, there is a 20% discount for Yubikeys purchased through the Yubico store. Fill out the form at https://www.yubico.com/education-offer, and you well be emailed a code that you can use at checkout from the store. Be sure to use your University of New Haven emails as your email address.
Multi-factor authentication means that anyone logging into your email account must know both the password and have something with them – like a cell phone or security key.
If your account becomes compromised – say because of phishing or someone stealing your password – they still won’t be able to access your account because they are unable to provide the second required authentication factor.
No, but it should greatly reduce them.
Most phishing emails and other email-based scams sent to University of New Haven accounts are caught by spam filters. Occasionally, however, a phishing attack is successful, and the scammer gains access to a compromised account and uses it to send out additional emails to users.
To change your default sign-in method go to My Security portal or go to https://mysignins.microsoft.com/security-info.
- Select Security Info on the left menu
- Select the Change option
- Select your preferred sing-in method (App based authentication – notification is recommended)
What do I do if I need help?
For assistance with Microsoft Authenticator, or issues accessing MFA secured systems, please click the button below.