This page provides guidance for externals such as Governors, UNICAT Staff, Contractors & RLF when using MFA, how you can set up MFA, and a FAQ (frequently asked questions).
You will be prompted to set up MFA when you first sign-in to your University network account.
The video below provided by Microsoft explains the steps to get MFA set up on your account:
Logging on with MFA: #
- Open a browser window
- Visit the following link https://mysignins.microsoft.com/security-info
- Input the email address of your account e.g. joe.bloggs@chi.ac.uk
- Authenticate with the username and password of the account e.g. joebloggs
- Click ‘Add sign-in method’
- Choose from the available MFA methods
e.g. Authenticator App, or Phone (for authentication by SMS or Phone Call) - Follow on-screen instructions for your chosen MFA method
Please note, specific guidance for your chosen method is available below. For example, enrolling with the Microsoft Authenticator App, or Enrolling with a telephone number
Enrolling with the Microsoft Authenticator App
This page contains guidance on using an Authenticator App as a method for MFA.
There are various Authenticator Apps available on both the Apple App Store and Google Play Store. The University recommends using the Microsoft Authenticator App.
You may wish to use an Authenticator App which you already have set up on your device, which you are already familiar with. Whilst this should work, the University is unable to support all Authenticator Apps available, and therefore guidance and help may be limited.
The University would also advise against using an Authenticator App which has not been published by a reputable company (eg Microsoft, Google, etc)
- Download and install the Microsoft Authenticator App from the Google Play Store or Apple App Store.
- Open a new browser window. If you are signed in with a Microsoft account already, open an Incognito browser window.
- Enrol with MFA by visiting https://mysignins.microsoft.com/security-info. This is best to do from a web browser on a computer, but can also be done from your personal device.
You will be asked for your email address, followed by your password. At the next screen, click ‘Next’: - You may also be prompted to authenticate with the username and password of the account
- You will be presented a choice of how to enrol. Choose ‘Mobile App’:
If you do not want to receive notifications when signing in, select ‘Use Verification Code’ Now select ‘Set Up’. - Follow the instructions on the screen that follows, it will look similar to this:
Once you have completed the steps in your Authenticator App, click ‘Next’. - The browser where you started the enrolment process should now look like below:
Select ‘Next’ - You will then be asked to authenticate using the app. Open this on your device, and select ‘Approve’ when prompted to authenticate.
- You are now set up. When activated, you will be asked to authenticate using your authenticator app.
Removing the Authenticator App
There may be a time where you need to remove the Authenticator App and your information from MFA.
1. Navigate to https://mysignins.microsoft.com/security-info and authenticate with your account information.
2. Your security information will be shown like below:
Choose ‘Delete’ next to the device you no longer wish to use. Review the guidance when prompted and select ‘Ok’.
3. Now you can navigate to your Authenticator app on your device, and remove your account.
Enrolling with a telephone number
This page contains guidance on using a telephone number as a method for MFA.
We recommend using an Authenticator app for MFA, however we would also recommend registering a telephone number as a backup method, in case your Authenticator app becomes unavailable.
- Open an incognito browser window
- Visit https://mysignins.microsoft.com/security-info. This is best to do from a web browser on a computer but can also be done from your personal device.
You will be asked for your email address, followed by your password.
If you have not yet registered, at the next screen, click ‘Next’
Otherwise, if you see the following screen, click ‘Add sign-in method’ - You may also be prompted to authenticate with the username and password of the account
- Choose ‘Phone’ from the ‘Add a method’ drop down list
- From the next screen select an appropriate area code for where the number is located, enter your telephone number, followed by the way in which you would like to receive your code (or One Time Passcode). Click ‘Next’ when ready.
- You will be sent a 6 digit code to your phone number by either SMS or Phone call. Enter this code into your web browser like below
Click ‘Next’ can you should receive a message to say that your phone has been registered. - You can now repeat the process to register a backup telephone number.
When will I be prompted to authenticate with MFA?
Most online threats come from external sources. When a University network account is accessed it is often difficult to determine if the authentication attempt is genuine.
You will be prompted to complete MFA when accessing your University provided Office 365 email account, after you have authenticated with your password.
This will include access through a web browser or using Microsoft apps for iOS or Android.
Once I have set up MFA, how do I manage my enrolments?
Open an incognito browser window, navigate to https://mysignins.microsoft.com/security-info and sign in using your University provided account information and password, and complete MFA.
From here you will be able to view your enrolled methods:
How do I register an alternative, backup method?
Open an incognito browser window, navigate to https://mysignins.microsoft.com/security-info and sign in using your University account information, and complete MFA.
From the Security Info screen, select ‘Add sign-in method’ and follow the prompts to add a new sign-in method.
FAQ
This section provides guidance for External University network account holders when using MFA, how you can set up MFA, and an FAQ (frequently asked questions).
Should I enrol?
Yes. MFA will significantly improve the security of your University network account, and you will be required to enrol when you log in to you account if you have not already.
I have lost my enrolled methods, and cannot access my account to re-enrol
A member of our support staff will be able to reset your MFA which will allow you to re-enrol. Please get in touch with the SIZ by telephone (+44 1243 816000) or email (help@chi.ac.uk).
Can I use SMS or a Telephone Call as an enrolment method with MFA?
Yes, you can register a mobile number for SMS and Telephone Call, or alternatively a landline number for the Telephone Call method.
I have enrolled, when will I start to be asked for MFA?
Once MFA has been activated for your account, you will be asked to sign in with MFA each time you log in to your University provided email account.