Step-by-Step MFA Setup Instructions

This page will give step-by-step instructions on how to set up Microsoft Multi-Factor Authentication (Microsoft MFA) for your Fredonia account.

Note: You need to add your Fredonia account to the Microsoft Authenticator app even if you are already using the app for multifactor authentication with other accounts. Please follow the instructions below to add your Fredonia account.

Important: It is very important to add multiple sign in methods for Microsoft MFA. Adding multiple sign in methods ensures that you will never get locked out of your Fredonia account, even if you don’t have access to one of your sign-in methods, for example, the Authenticator App.

After you have completed this guide, it is very important to add at least two, but certainly as many sign in methods as you can, to Microsoft MFA. To do this, follow this guide on Adding Multiple Sign-in Methods to Microsoft MFA.

Check out this Step-by-Step Video Guide that follows along with this article.

How to Setup the Microsoft Authenticator app for Microsoft MFA

Once your account is provisioned, the next time you log into your Fredonia account with your username and password, you will see the screen below. Select Next.
Once you sign in, you will be redirected to the Microsoft Authenticator setup screen.
On your phone, install the Microsoft Authenticator app by searching Microsoft Authenticator on the App Store or Play Store.
1. Note: Using the Microsoft Authenticator app is the recommended method for Multi-Factor Authentication, but there are many ways to authenticate using Microsoft MFA. If you would not like to use the Microsoft Authenticator App for verification, click “I want to set up a different method” on your computer. You can receive a call on your phone or office landline for verification.
2. Note: There is no privacy infringement by installing the Microsoft Authenticator app. The app’s sole purpose is for multi-factor authentication.
3. Important: When opening the Microsoft Authenticator app for the first time. It will prompt you to allow notifications. Select Allow. If you do not select allow, then you will not receive a notification when you need to use MFA to login to your SUNY Fredonia account.
Once you have installed the Microsoft Authenticator app on your phone, and have allowed notifications, click Next on your computer.
You will now see the “Keep your account secure” screen.
On your phone, open the Microsoft Authenticator app.
1. Again, make sure to allow the app to send notifications so you get notified when needing to use MFA to login.
2. Note: If you have already denied notifications for the Authenticator app, follow these steps to turn them back on:
  If you are using an iPhone:
  1. Open your Settings app
  2. Click on Notifications
  3. Find the app named Authenticator and select it
  4. Toggle on Show Notifications
  If you are using an Android Phone:
  1. Open your Settings app
  2. Click on Apps
  3. Find the app named Authenticator and select it
  4. Click on Notifications
  5. Toggle on Show Notifications
Then, when prompted to add an account, select Work or School. If you already have a personal account tied to the Microsoft Authenticator app, click the plus button + on the top of the screen, and then select work or school account.
Then, on your computer, select Next. You will now see a QR code.
In the Authenticator app on your phone, select scan a QR code. Scan the QR code with your phone, and your account will be added.
Once you have scanned the QR code, on your computer, select Next.
You will now see numbers on your computer. Typing these numbers into your phone is the way Microsoft Authenticator verifies that it is you who is logging in. On your phone, open the Microsoft Authenticator app. A window will pop up with a place to enter the numbers that are shown on your computer. Enter the numbers, and then select Yes. Then, on your computer, select Next.
You will then be greeted by a success screen, and you have successfully set up your account to use Microsoft Authentication. Select Done to continue.
You will then be redirected to a login screen. After logging in, your computer will show another set of numbers for you to enter into the Microsoft Authenticator app. Enter them as you did before. There also is an option called Don’t ask again for 14 days. This option will allow you to log in without using Microsoft Authentication for 14 days.

Note: If you log into your account on a different browser, or on a different device within those 14 days, you will still be prompted for Microsoft MFA. Checking this option only applies to your current browser and device that you are logging into.

After entering the numbers and selecting Yes, you will be logged in. You have now successfully set up Microsoft Multi-Factor Authentication.