Set up the Authenticator App as your MFA authentication method

If you are new to Multi-Factor Authentication (MFA), you must opt-into MFA before you can use it to secure your WWU computer account. Read the following article to learn more (including how to opt-in):
Multi-factor Authentication (MFA) for WWU Universal Accounts

The most common verification method for MFA is to have a security code sent to your mobile phone via text message (SMS), but we recommend the free Microsoft Authenticator app if you have an iPhone or Android smartphone. The Authenticator app allows you to simply tap a button that appears as a notification on your smartphone or smartwatch, so you don’t have to type in a security code. The process to approve a sign-in with the authenticator app is:

  1. Enter your universal password in the web page or app you are signing into with your username@wwu.edu.

  2. Tap the “Approve” button when it appears as a notification on your smartphone or smartwatch.

REMEMBER: Never approve a sign-in you request you did not expect. If you receive a request to approve a sign-in and you did not just enter your password, it might mean someone is trying to access your account with your password.

Instructions

Install the free Microsoft Authenticator app on your mobile device by searching for “Microsoft Authenticator” in the App Store (or iOS devices like iPhones and iPads) or the Google Play Store (for Android devices).

The Authenticator app may ask for permission to access your device’s camera. It needs camera access to scan the QR code as described in Step 6 below. If you do not allow the app to access your camera, you will still be able to set up Authenticator by using the “Can’t scan image?” link, but it will require typing a long code and URL.

  1. Go to https://mysignins.microsoft.com/security-info to add a new sign-in verification method.

  2. Click the Add Method button.

  3. Choose Authenticator App and click the Add button.

  4. If you have not already installed the Authenticator app, you will be prompted to install it on your mobile device. When you have the app installed, click NEXT.

  5. Sign into the app with your username@wwu.edu and your universal password. If prompted, allow notifications. Then add an account, and select "Work or school".

  6. Use the Authenticator app on your mobile device to take a photo of the QR code on your computer screen. If you are not able to take a photo of the QR code from within the app, click the Can’t scan image? link beneath the QR code and follow the instructions for entering the code manually.

     

  7. Click NEXT on your computer and you should receive a test approval request.

  8. For the last step we strongly suggest adding your mobile device phone number to act as a backup if you're unable to access or use the mobile app for any reason.

Set Authenticator as your default 

Verify that Microsoft Authenticator - notification is set as the default sign-in method as shown below:

If your default sign-in method is not set to Microsoft Authenticator - notification:

  1. Click CHANGE

  2. Select Microsoft Authenticator - notification (not the option that says “Authenticator app or hardware token - code”) and then click the CONFIRM button.

Passwordless Authentication - stop entering your password!

Once you have Authenticator set up you can enable passwordless authentication:

  1. Open the Authenticator app on your mobile device

  2. Tap your username@wwu.edu and then tap Enable phone sign-in and follow the prompts.

After you enable phone sign-in you will be able to sign into Office 365 apps and pages by tapping a number on your phone that matches the one displayed on your computer. You will not need to enter a password! (You will still need to enter your password for web pages and services that do not use the Microsoft single-sign-on service.)

Detailed Instructions

For additional detailed instructions on how to set up, modify, or uninstall Authenticator, view Microsoft’s instructions for setting up Authenticator.