How Do I Use Microsoft Authenticator for Two-Factor Authentication (2FA)?

Tags ms auth

Questions Answered in this Article

Setting Up & Managing Microsoft Authenticator

Logging In

Additional Support

Answers

All faculty, staff and students have the ability to use Microsoft Authenticator as their two-factor authentication (2fa) method. 
 

Phone or Tablet Setup 

*Please note: The Microsoft Authenticator app must be installed on a device such as a smartphone or tablet. It cannot be installed on a computer.

  1. Download the Microsoft Authenticator app from your device’s app store.
  2. Open the app on your device.
     
  3. When prompted about data privacy, we recommend that you do not "Share additional data" and then tap "Continue".

    Your data your privacy screen in Microsoft authenticator app, select do not share additional data.
     
  4. Select "add work or school account" from the Welcome screen.

    Microsoft Authenticator welcome screen, highlight work or school account.
     
  5. Sign in using your UNCW email and password, then approve two-factor authentication to complete the sign-in.

    Sign-in screen, showing that you need to use your UNCW email
     
  6. Select "Continue" after reviewing the sign-in and verification options that Microsoft Authenticator provides.

    Sign-in and verify options from Microsoft Authenticator
     
  7. Tap "Continue" and follow the on-screen instructions to turn on AutoFill, which is required to use Microsoft Authenticator's Passwordless features.

    Microsoft Authenticator Autofill prompt
     
  8. Register your device to enable passwordless sign-in features.

    TECH TIP: Registering associates your device’s operating system type (iOS or Android), version and phone number with your Microsoft 365 account. 

    register your device prompt
     
  9. If prompted about notifications, choose your preferred option.
     
  10. You should see your UNCW account listed. Please tap on your account to continue.
     
  11. Click "Create a passkey."

    UNCW account screen highlighting create a passkey button
     
  12. Once your passkey is created, tap "Done."

    Passkey Created prompt with a button that says done at the bottom
     
  13. We recommend testing Microsoft Authenticator by signing in to your UNCW account to ensure it is set up correctly.

    TECH TIP: By using a private browser, you can test the Microsoft Authenticator App without having to sign out.

 

Alternative Setup Instructions

*Please note: The above instructions are the preferred method for installing Microsoft Authenticator. You may also use either option below to set up Microsoft Authenticator.

Set Up Using Only Your Phone or Tablet+
Set Up Your Phone or Tablet with Help from Your Computer+


Set Up Passwordless Login

*Please note: Passwordless authentication lets you sign in without typing a password. Instead, it uses other two-factor methods such as biometrics, device-based authentication or hardware keys. Microsoft verifies your identity by combining something you have, like a registered device, with something you are or know, like a fingerprint, FaceID or PIN. This creates a secure login experience without ever entering a password. 

  1. Open the Microsoft Authenticator app on your device and select your UNCW account. 
     
  2. Select “Set up Passwordless sign-in requests” under the "Other ways to sign in" section.

    TECH TIP: If you do not see "Set Up Passwordless sign-in requests," check the "Ways to sign in or verify" section at the top. If "Passwordless sign-in requests" appears there, then you need to proceed to step 8.

  3. Click “Continue” to begin the process for setting up the Passwordless feature.
     
  4. Verify your identity.
     
  5. Register your device by clicking Register on the next prompt(s). This step is required to enable passwordless authentication and only collects basic device information for verification.
     
  6. Next, you will be asked to use your device’s screen lock, such as Face ID, Touch ID, or a PIN, to create your passwordless sign-in method.
     
  7. From the main Authenticator page, select your UNCW account.
     
  8. Select "Create a passkey".
     
  9. Sign in with your UNCW account.
     
  10. Tap "Continue" to turn on AutoFill and follow the on-screen prompts.
     
  11. Once your passkey is created, tap "Done."
     
  12. Wait approximately five minutes before signing in with passwordless to ensure the changes finish syncing.


Using Passwordless Log In
 

  1. On the sign-in page, select "Sign-in options".
     
  2. Select "Face, fingerprint, PIN or security key".
     
  3. You will be redirected to a screen prompting you to choose your device.  
     
  4. Select "iPhone, iPad, or Android device" and click "Next."

    TECH TIP: Alternatively, choose "security key" if you have registered a YubiKey with your UNCW Microsoft Authenticator account.

  5. A QR code will appear. Scan it with your device's camera.
     
  6. Follow the prompts on your device to "Use Passkey" to complete your sign-in. 

If you need further assistance, please submit a service request or CHAT with TAC.

Print Article