Set Up Multifactor Authentication (MFA) for Microsoft Single Sign On (SSO)

This page explains how to set up Multifactor Authentication (MFA) during your initial sign-in process. MFA is one of the security measures Biola IT uses to protect your account. In addition to your account password, MFA is a second verification method used during sign-in.

Verification can be satisfied in the following ways:

1. The Microsoft Authenticator App (recommended method)
2. SMS text message / phone call
3. Windows Hello (on Biola owned & issued devices only)

 !  Note: Biola IT recommends you set-up at least 2 MFA methods

Table of Contents:

1. How to Setup MFA For The First Time
2. Updating & Adding Additional MFA Methods
3. Using MFA
4. Troubleshooting Errors
5. Related Topics

1. Navigate to https://myaccount.microsoft.com and log-in using your Biola email address and password
   • OR log-in to any of Biola's web services that requires MFA (i.e., myaccount.biola.edu, canvas.biola.edu, etc.)
2. After logging-in, a prompt will guide you through the process:
   • Click Next
     
3. Follow the onscreen instructions or visit this page on How To Setup the Microsoft Authenticator app on your mobile device (Android or iPhone)
   • Select "I want to set up a different method" if you do not wish to use or have trouble setting up the Authenticator App
     1. From the following drop down menu, select "Phone"
     2. Enter your mobile phone number and complete the verification process

1. Sign-in to https://myaccount.microsoft.com and click on Update info under Security Info
2. Select "+ Add sign-in method" to add additional/new methods or "Delete" next to the method you'd like to remove
   
3. Choose a method from the list that appears
   1. Microsoft Authenticator
      • Enter a 2 digit code that appears on your log-in screen to the Microsoft Authenticator App on your mobile device
      • It is recommended to turn on notifications for the Authenticator App
   2. Passkey in Microsoft Authenticator
      • Use the facial recognition, fingerprint, or pin used to unlock your device to authenticate
      • Must set-up the Microsoft Authenticator App on your mobile device first
   3. Security key or passkey
      • Use your Windows Hello finger print reader on your Biola issued device to authenticate (Windows PC only)
   4. Phone/Alternate Phone/Office Phone
      • Receive a 6 digit verification code via SMS text
      • OR receive a phone call and press # to confirm/authenticate
   5. Hardware Token/Email
      • These options are to reset your password only

1. After signing in to a Biola web service that requires MFA
   • ​​​​​​​If you set up the Microsoft Authenticator App, a 2-digit code will appear on your screen and you should receive a notification from the App
     • Enter the code in the App and select "Yes"
   • Select your preferred verification method when prompted and click Next.
2. If your verification method does not work:
   • Select "I can't use my Microsoft Authenticator app right now" or "Sign in another way" to use an alternate method

• If you are still unable to retrieve a verification code, please contact the IT Helpdesk at it.helpdesk@biola.edu or 562.903.4740 for assistance.

• Log in Using Microsoft Azure Single Sign On (SSO)