This page will give step-by-step instructions on how to set up Microsoft Multi-Factor Authentication (Microsoft MFA) for your Fredonia account.

In order to have your SUNY Fredonia account migrated to Microsoft MFA, please fill out the Microsoft MFA Early Adoption Request Form.

Important: It is very important to add multiple sign in methods for Microsoft MFA. Adding multiple sign in methods ensures that you will never get locked out of your Fredonia account, even if you don’t have access to one of your sign-in methods, for example, the Authenticator App.

After you have completed this guide, it is very important to add at least two, but certainly as many sign in methods as you can, to Microsoft MFA. To do this, follow this guide on Adding Multiple Sign-in Methods to Microsoft MFA.

Check out this Step-by-Step Video Guide that follows along with this article.

How to Setup the Microsoft Authenticator app for Microsoft MFA

  1. Once your account is switched over to Microsoft MFA, the next time you log into your Fredonia account with your username and password, you will see the screen below. Select Next.

More information required screen

  1. Once you sign in, you will be redirected to the Microsoft Authenticator setup screen.

Microsoft Authenticator Setup Screen

  1. On your phone, install the Microsoft Authenticator app by searching Microsoft Authenticator on the App Store or Play Store.

Note: Using the Microsoft Authenticator app is the recommended method for Multi-Factor Authentication, but there are many ways to authenticate using Microsoft MFA. If you would not like to use the Microsoft Authenticator App for verification, click “I want to set up a different method” on your computer. You can receive a call on your phone or office landline for verification.

Note: There is no privacy infringement by installing the Microsoft Authenticator app. The app’s sole purpose is for multi-factor authentication.

Microsoft Authenticator App Download Screen

Important: When opening the Microsoft Authenticator app for the first time. It will prompt you to allow notifications. Select Allow. If you do not select allow, then you will not receive a notification when you need to use MFA to login to your SUNY Fredonia account.

Authenticator permission message to send notifications

  1. Once you have installed the Microsoft Authenticator app on your phone, and have allowed notifications, click Next on your computer.

  2. You will now see this screen.

Authenticator setup screen with option named Next

  1. On your phone, open the Microsoft Authenticator app.

    1. Again, make sure to allow the app to send notifications so you get notified when needing to use MFA to login.

Note: If you have already denied notifications for the Authenticator app, follow these steps to turn them back on:

If you are using an iPhone:

  1. Open your Settings app

  2. Click on Notifications

  3. Find the app named Authenticator and select it

  4. Toggle on Show Notifications

If you are using an Android Phone:

  1. Open your Settings app

  2. Click on Apps

  3. Find the app named Authenticator and select it

  4. Click on Notifications

  5. Toggle on Show Notifications

  1. Then, when prompted to add an account, select Work or School. If you already have a personal account tied to the Microsoft Authenticator app, click the plus button + on the top of the screen, and then select work or school account.

  2. Then, on your computer, select Next. You will now see a QR code.

    Authenticator setup QR Code

  3. In the Authenticator app on your phone, select scan a QR code. Scan the QR code with your phone, and your account will be added.

  4. Once you have scanned the QR code, on your computer, select Next.

  5. You will now see numbers on your computer. Typing these numbers into your phone is the way Microsoft Authenticator verifies that it is you who is logging in. On your phone, open the Microsoft Authenticator app. A window will pop up with a place to enter the numbers that are shown on your computer. Enter the numbers, and then select Yes. Then, on your computer, select Next.

Authentication numbers

  1. You will then be greeted by a success screen, and you have successfully set up your account to use Microsoft Authentication. Select Done to continue.

Success screen

  1. You will then be redirected to a login screen. After logging in, your computer will show another set of numbers for you to enter into the Microsoft Authenticator app. Enter them as you did before. There also is an option called Don’t ask again for 14 days. This option will allow you to log in without using Microsoft Authentication for 14 days.

Note: If you log into your account on a different browser, or on a different device within those 14 days, you will still be prompted for Microsoft MFA. Checking this option only applies to your current browser and device that you are logging into.

Important: Your browser may cause the 14 days option to not work properly. This is an issue with your browser’s settings, not with Microsoft MFA. Please follow this article to change your browser settings so your browser will not interfere with the 14 days option.

Multi Factor Authentication Prompt Screen

After entering the numbers and selecting Yes, you will be logged in. You have now successfully set up Microsoft Multi-Factor Authentication.

Important: As stated at the beginning of this article, it is vital to add multiple sign in methods for Microsoft MFA, so that you do not get locked out of your account. To do this, follow this guide on Adding Multiple Sign-in Methods to Microsoft MFA.