What does it look like?

Depending on your preferred set-up option, you will receive a login prompt like the one below.

When you receive an MFA push notification in the Authenticator app, enter the number shown on your sign-in screen into the app to complete the process. This adds an extra layer of security to confirm it's you.

The added security feature shows where the login attempt is occurring on a map, along with information about the specific application requesting authorization and the email address associated with the sign in attempt.  

There are certain processes at USF using MFA that will not currently be affected by this change, such as the new requirement to use MFA as part of the sign in process for the Virtual Private Network (VPN) and Remote Desktop Gateway (RDG). In these situations, the Authenticator app and sign in process will default to the current tap approval without number matching as a requirement. 

The phone call method of authentication will not be affected by these changes and will continue to work the same as it does now.

WHAT DO I NEED TO DO? 

This number matching process using the Authenticator app is the safest and most secure way to authenticate your identity and protect your data and credentials at USF. To prepare for these changes, you should make sure your Authenticator app is updated by February 27. If the app has not been updated, the sign in process for USF systems using MFA will generate a failed authentication attempt, preventing you from signing into your USF accounts. 

Additionally, Microsoft has stated Apple Watches will no longer be able to use the Authenticator app for MFA and push notification approvals. Microsoft recommends that you delete the app from your Apple Watch

First Time Set-Up

Setting up MFA is self-service - meaning that you can set this up on your own. To begin, view the topics below or visit https://aka.ms/mfasetup 

How do I perform first time set up?

Visit https://aka.ms/mfasetup and login if prompted with your USF credentials. If asked, choose 'Work or school account'.  The program will walk you through first-time set-up. We strongly recommend setting up multiple methods in case you lose your device.

For instructions, visit https://support.office.com/en-us/article/set-up-multi-factor-authentication-for-microsoft-365-ace1d096-61e5-449b-a875-58eb3d74de14

How do I set up the authenticator app?

Once you have the app downloaded from your app store (click here), you can head over to https://aka.ms/mfasetup and select the "authenticator" checkbox.

For a detailed walkthrough, visit Setting up Microsoft Authenticator (MFA)

How do I change my default sign in method?

Visit https://aka.ms/mfasetup. Under Security Info, click on Change. 

Select the method you wish to use from the drop down. (Select Phone - call or Microsoft Authenticator - notification if you will be using the USF VPN)

Will I be prompted every time to login?

No, but you will be required to validate your credentials with multifactor at least once per device, per 60 days. So, if you are prompted on your computer (which will happen the first time) you will not be prompted again on that same computer for 60 days. If you log into USF email or Teams from a kiosk at the airport, you will be prompted at that point in time.

I can't sync my email on my mobile phone.

Make sure you are using a supported client from the table below. 

If you are using a supported client, please remove and re-add your Office 365 account to your mobile device.

Approved Email Applications