Multi-Factor Authentication on Office 365 Help


Are you having a problem with....
 

  1. The MFA Wizard?
  2. Accessing your emails via the www.office.com website after setting up MFA?
  3. Accessing your emails using the Outlook client after setting up MFA?
  4. What ifs / Other?

 





MFA Wizard Help

 

Q1. I don't know which contact method to use - please advise us?

A1. As per the setup guide, you need to use a telephone as the second authentication option.  If you have a direct dial landline number you can of course use this, but please be aware that many school phone systems may have trouble because of either the automated answering system you have or security on these phones that stop the # key being accepted when these authentication calls come in.  

By far the easiest way is to use the Microsoft Authenticator app on your mobile phone and choose the 'use verification code' option.

It is also worth mentioning that you can use a third party desktop app instead of a mobile app.  We recommend the Mobile App as it is a purely Microsoft product, but for those without a mobile it could be worth considering.

 

Q2.  The desktop app sounds interesting, tell me more!

A2. The one we have tested is call WinAuth.  Our tech team have produced the following guidance.  Please note, if you need hands on help with this you may need to speak to your local technician.

  1. Download WinAuth from https://github.com/winauth/winauth/releases/download/3.5.1/WinAuth-3.5.1.zip.
  2. Extract the executable to the desktop and run it.
  3. Click the Add button and then select Microsoft from the drop-down and name the account the same as the email address (e.g. office@).
  4. Proceed with enabling MFA on the account concerned through the Office 365 website.
  5. When the QR code appears, select the "Configure app without notifications" link and copy the secret key shown below the QR code (should be 16 characters).
  6. Paste into box under step 7 in the WinAuth window and click the Verify Authenticator button under step 8.
  7. Click the Next button on the website, then the Verify now button.
  8. Type the code generated by WinAuth into the website and click Verify to complete.  If successful, click OK in WinAuth to save the new account.
  9. Finally, deselect the “Protect with my own password” checkbox and select the “Encrypt to only be useable on this computer” and “And only by the current user on this computer" checkboxes, then click OK.



Q3.  I share this account with someone else - how do we both MFA?

A3. You can configure the as many mobile apps as you like for an account.  Either run through the wizard together and use the same configuration details as they appear on screen or, if you have already run through the MFA wizard, login to www.office.com and follow the instructions in Changing your MFA choices and Setting up new app passwords to setup a second mobile app instance.

 




 




 

Accessing your emails via the www.office.com website after setting up MFA
 

Q10. I am using the authenticator code on my phone but don't have it today, and I am being asked for it to log on!

A10.  Either click the option to "Sign in another way" if you have setup a backup option or contact us to reset your MFA settings for you, enabling you to setup a new method you can access now.


 




Accessing your emails using the Outlook client after setting up MFA


Q20. I am using Outlook 2010 or my app password is not being accepted by Outlook 2013

A20. Please follow the steps below to clear out old credentials.
 

Windows 7
 

  1. Ensure Outlook is closed.
  2. Open the Start Menu and type "credential manager" into the search box.  You should see the now be able to launch Credential Manager from the Start Menu.

  3. You will see credentials saved for "MicrosoftOffice..." that mention your emaill address.  Click to open these up and choose to "Remove from vault".

     
     
  4. Close Credential Manager and relaunch Outlook to reenter the App Password again from scratch.


Windows 10

 

  1. Ensure Outlook is closed.
  2. Open the Start Menu and type "credential manager".  You should now be able to launch the Credential Manager option that appears.


     
  3. Click on 'Windows Credentials'.  You should see credentials saved for "MicrosoftOffice..." that mention your emaill address.  Click to open these up and choose to "Remove".
  4. Close Credential Manager and relaunch Outlook to reenter the App Password again from scratch.

 

 

 

 

 


 

What ifs?


Q30. What if I switch mobile phone or mobile phone number?
A30. Simply follow the instructions for Changing your MFA choices and Setting up new app passwords.

 

Q31. I have received an automated call from Microsoft asking me to press # to allow login to an account, but I am not having a problem logging in - should I press #?
A31. No.  If the school are getting a prompt to allow an account to log in via MFA but do not know who it is, please do not press #.  If the issue persists however please let us know it is happening.
 

 

Close