Microsoft MFA Enrollment Campaign
UCF requires multi-factor authentication (MFA) for many systems. This document can assist UCF account holders in enrolling in Microsoft MFA. While account holders can “snooze” the prompt up to three times over 14 days, the Identity and Access and Management team (IAM) recommends taking the approximately five or so minutes to enroll.
If you are ready to pre-enroll now and do not wish to wait for the prompt or you have received a prompt and need guidance, please follow the steps listed below.
1 - Begin Enrollment
When logging into a MFA protected site such as Webcourses or MyUCF the account holder will be presented with a screen like the one below after successfully authenticating with their NID and password.
One may choose to begin the enrollment process by selecting the “Next” button.
|
If the reader would prefer to enroll at a later date please select “Ask Later”. Prompts to enroll will occur once a week until enrolled. |
2 – Download Microsoft Authenticator to a Personal Device
The next screen will ask that the account holder downloads the Microsoft Authenticator on the device they wish to use MFA with (most frequently a smart phone).
One may download the Microsoft Authenticator app from Google Play or from the Apple App Store. Once downloaded please select the “Next” button.
|
UCF ISO strongly recommends the Microsoft Authenticator app for MFA. If however one does not wish to use the app, they may still configure MFA for their account. Please select the “I want to set up a different method” link in the bottom left corner of the page.
This option will allow one to use a cellular phone number or FIDO2 key as their MFA method. Please note it is highly recommended that one sets up a second MFA option at https://aka.ms/mfasetup. |
3 – Authenticator Configuration
The account holder will now be presented with the page below which will ask them to open the Microsoft Authenticator app on their personal device.
On the device please open the Microsoft Authenticator app.
- Please select the “+” sign at the top of the app
- Select the option for “Work or School Account”
- Select the option to “Scan a QR Code”
|
If the account holder does not wish to use a QR code, they may also register their NID by selecting the option to “Sign In”. They will be taken to a Federated UCF sign-in page where they will be able to register using their NID@ucf.edu. |
Click “Next” once ready to scan the bar code.
4 – Scan QR Code
Please scan the QR code presented on the page. The page will look similar to the following:
Once the personal device has successfully scanned the QR code please select the “Next” button.
5 – Confirm Registration
The next page will ask to test the registration. The reader will be presented with a page like the one below which will show a number. Enter this number into the Microsoft Authenticator app. In this example, the number is 30.
6 – Complete Registration Test
Once the Microsoft Authenticator app recognizes the number input, the “Next” button will become available.
|
IMPORTANT: Please do not delete the Microsoft Authenticator app after completing the MFA registration. Account holders will continue to use Microsoft MFA when accessing UCF applications for the full duration of their UCF affiliation. |
Please select the “Next” button.
7 – Register Second MFA Option
It is very important to have a second MFA option. If one's Authenticator app's configuration becomes corrupted, or if they need to install Authenticator on a new device they will need a different method of MFA to recover it.
This registration campaign will automatically ask you to enter a cell phone number as a backup MFA option.
Please enter a cell phone number and then select “Next” when ready.
8 – Test Second MFA Option
Microsoft will send a 6 digit code via SMS text to the cell phone number previously entered.
Please enter the code and then select “Next”
9 – Confirm Second MFA Test
A confirmation of the successful test will be displayed on a page like the one below:
Please select “Next” again.
10 – Success!
A page noting a successful conclusion of the MFA registration campaign will appear.
Select “Done” and the reader will then be routed to the application they were initially logging into.
MFA Knowledge Base Articles
There are several Knowledge Base articles available for additional resources on Microsoft MFA.
Read more on how to update your MFA selections or add new ones:
https://ucf.service-now.com/ucfit?id=kb_article&sys_id=a87596421bdb2d907046a753604bcb01
UCF's MFA FAQ
https://ucf.service-now.com/ucfit?id=kb_article&sys_id=56b64943871b25109e222f49cebb351d&spa=1
Passwordless Sign-on Setup
https://ucf.service-now.com/ucfit?id=kb_article&sys_id=7ae648e51b136d900193a821604bcb2b