Page tree

University of Tartu IT wiki

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

In this guide, you will find instructions about activating two-factor authentication on your account.

HTML Wrap
classbutton button1

(info) Eesti keeles


Two-factor authentication (commonly referred to as 2FA, MFA, multi-factor authentication)

Note
iconfalse

Kaheastmelise autentimise aktiveerimine Microsoft 365-s  Eestikeelse juhendi leiad siit: Kaheastmelise autentimise aktiveerimine Microsoft 365-s.

Table of Contents

Introduction

What is two-factor authentication (2FA and MFA) and why is it useful?
It

adds another layer of protection for your

school

UT account and protects it from being used for malicious purposes even if your password has leaked. You can check how it works here.

Info

The requirement to setup two-factor authentication is enabledfor all universitystaff and students starting June 13, 2023.Duringyournext login to Microsoft-associatedapplications (Outlook, Teams, Moodle), youwillbepromptedforadditionalinformation and thesetup of two-stepauthentication. 

NB! We recommend the Microsoft Authenticator and Google Authenticator apps.

In addition, we recommend adding an SMS method in case something happens to the smart device where the applications are installed.

Both a smart device and a computer are required for setup.

Warning

If you do not have access to the phone number or device set as your authentication method, contact IT helpdesk.

Setup

Expand
titleFirst-time setup
  1. When first logging in to Microsoft services, you will be prompted with a More information required window. Click Next.
    Image Added
  2. Select I want to use a different method.
    Image Added
  3. From the drop-down menu, select Phone and click Confirm.
    Image Added
  4. Select area code Estonia (+372) and enter your phone number. Then click Next.
    Image Added
  5. A message will be sent to your phone number, the sender is Microsoft and the content is a 6 digit code.
    Image Added
  6. Enter the code on your browser and click Next.
    Image Added
  7. Your phone was registered successfully. Click Next.
    Image Added
  8. To finish the setup, click Done.
    Image Added
  9. The next time you log in to Office365, in addition to the password, you will also be asked for the code that came with the message.
    If you are at your home or work computer, you can let the computer remember it, i.e. within 90 days, you will no longer be asked for the second-level code at a specific computer.
    NB! Do not trust a device you are not sure about.
    After typing in the code, click Verify.
    Image Added


Expand
titleTwo-factor authentication using Microsoft Authenticator
  1. Install the Microsoft
Authenticator
  1. Authenticator application on your smart device via Google Play or App Store.
  2. On your computer, go to 365.ut.ee orkiri.ut
.ee, click
  1. .ee 
    Image Added
  2. Log in using the format username@ut.ee (login with username and password).
    Image Added
  3. Click on your profile → select View Account
→ select
  1. .
    Image Added
  2. Select Update info.
Image Removed
Image Removed
  1. Image Modified
  2. Select Add sign-in method.

Image Removed

  1. Image Added
  2. From the menu, select Authenticator app and click Add.
    Image Added
  3. In the next window click Next.
    Image Modified

    Info

    NB! If you accidentally chose the wrong authentication method, or if you want to set up the Google Authenticator app or SMS authentication instead, select I want to use a different authentication app.

    Image Added

    Anchor
    qr_code_mfa
    qr_code_mfa

  4. To start your account set up, click Next.
    Image Modified
  5. Leave the next window open on your computer and pick up your smart device.
    Image Modified
  6. In the Microsoft Authenticator application select Add account.
    Image Modified

  7. Select Work or school account.
    Image Modified
  8. Select Scan QR code and scan the QR code in section
6
  1. 10 (the window you left open on your computer). 
    Image Modified
After scanning the QR code, move back to your computer view. A new window will be displayed.
Image Removed
  1. The number 72 is displayed to test the application.
    Image Added
  2. Once again, pick up your smart device
and Approve sign-in
  1. , enter the number 72 and click Yes.
Image Removed
  1. Image Added
  2. A confirmation that everything is working is displayed in the computer view.
    Image Modified
After setup, the given application (Microsoft Authenticator) and the smart device it is associated with (iPhone XR) are displayed.
Peale seadistamist kuvatakse antud rakendus ja nutiseade, millega see on seotud.
Image Removed
  1. Microsoft Authenticator setup was successful.
    Image Added
  2. The next time you log in to the UT Microsoft 365 account, in addition to the password, you will prompted to insert the code displayed into the Microsoft Authenticator mobile application.
    When logging in from a web browser, it is possible to remember the device for
90
  1. 180 days, so that you do not have to re-enter the second level of verification every time.
    NB! Use it only for a personal or work computer.
Image Removed
  1. Image Added
    Image Added


Expand
titleTwo-factor authentication using Google Authenticator
  1. Install Microsoft Authenticator on your smart device via Play store or App store.
  2. On your computer, go to 365.ut.ee or kiri.ut.ee
, click
  1. .
    Image Added
  2. Click on your profile → select View Account
→ select
  1. .
    Image Added
  2. Select Update info.
Image Removed
Image Removed
  1. Image Modified
  2. Select Add sign-in method.
    Image Modified
  3. Select I want to use a different authernticator app and click Next.
    Image Modified
  4. A QR code will be displayed. Keep this window open.
    Image Modified
  5. Pick up your smart device and scan the QR code by clicking Scan a QR code in Google Authenticator application.
    Image Modified
  6. After scanning the QR code, Google Authenticator two-factor authentication is
activaed
  1. activated.
Image Removed
  1. Image Added


Expand
titleTwo-factor authentication using SMS
  1. On your computer, go to 365.ut.ee or kiri.ut.ee
, click
  1. .
    Image Added
  2. Click on your profile → select View Account
→ select Update info.
Image Removed
Image Removed
Image Removed
  1. .
    Image Added
  2. Select Update info.
    Image Added
  3. Select Add sign-in method.
    Image Added
  4. From the drop-down menu, select Phone and click Add.
    Image Added
  5. Select area code Estonia (+372) and enter your phone number. Then click Next.
    Image Added
  6. A message will be sent to your phone number, the sender is Microsoft and the content is a 6 digit code.
    Image Added
  7. Enter the code on your browser and click Next.
    Image Added
  8. SMS authentication is activated. To finish, press Done.
    Image Added
  9. After setting up, the mobile phone number to which it is associated will be displayed.
  10. The next time you log in to Office365, in addition to the password, you will also be asked for the code that came with the message. If you are at your home or work computer, you can let the computer remember it, i.e. within 180 days, you will no longer be asked for the second-level code at a specific computer.
    NB! Do not trust a device you are not sure about.
    Image Added

Changing the authentication method

Select
Expand
titleChanging the phone number
  1. Open the website https://mysignins.microsoft.com/security-info.
  2. Log in using the format username@ut.ee.
  3. In the window that opens, all added devices and phone numbers will be shown. To remove a phone number, click the Delete button next to Phone.
    Image Added
  4. To confirm, click the OK button.
    Image Added
  5. After deleting your old phone number, select
  1. Add sign-in method.
    Image Modified
  2. From the drop-down menu, select Phone and click Add.
    Image Modified
  3. Select area code Estonia (+372) and enter your phone number. Then click Next.
Image Removed
  1. Image Added
  2. A message will be sent to your phone number, the sender is Microsoft and the content is a 6 digit code.
    Image Modified
  3. Enter the code on your browser and click Next.
Image Removed
  1. Image Added
  2. SMS authentication is activated. To finish, press Done.
    Image Modified
  3. After setting up, the mobile phone number to which it is associated will be displayed.

Image Removed
  1. The next time you log in to Office365, in addition to the password, you will also be asked for the code that came with the message. If you are at your home or work computer, you can let the computer remember it, i.e. within
90
  1. 180 days, you will no longer be asked for the second-level code at a specific computer.
    NB! Do not trust a device you are not sure about
.
Image Removed
  1. .
    Image Added


Expand
titleChanging the device
  1. Open the website https://mysignins.microsoft.com/security-info.
  2. Log in using the format username@ut.ee.
  3. In the window that opens, all added devices and phone numbers will be shown. To remove a device, click the Delete button next to the application you would like to remove.
    Image Added
  4. To confirm, click the OK button.
    Image Added
  5. To add a new device, follow the Microsoft Authenticator or Google Authenticator instructions.