Forced Enrollment in Microsoft Authenticator

To be able to use Microsoft Authenticator for multi-factor authentication (MFA), you must first enroll with the Microsoft Authenticator app or register a phone number in your Office 365 account's Security Info settings.

  • If you have already done either or both of these tasks, you are prepared for MFA and no further action is required. 
  • If you have not enrolled by the go-live date, you will be forced to enroll the next time you log in to any system that requires MFA. 

If forced to enroll, you need to follow these steps. 

Start these steps using your computer. Where indicated, you will also use your phone in conjunction with your computer or a secondary device (tablet, etc.):


  1. When you access a system that requires MFA, you will be presented with the following screen on your computer's web browser. Click Next to proceed.

  2. Choose a verification method from the pulldown menu. We highly recommend the Authenticator App (listed as "Mobile app" in the menu) for ease of use and one-touch verification.

  3. If you choose 'Authentication phone' or 'Office phone' instead, you will be prompted to input your phone number. After clicking Next, the phone number will receive a verification call that must be answered to complete the registration process. Once this is completed, skip to step 7.

  4. If you choose Authenticator App, you will see this page instead. Simply click Set up to continue.

  5. You will see a page informing you to download and configure the Authenticator app. Once the app is installed on your phone, open it and scan the QR code displayed on your computer's screen:

  6. You will then be prompted to enter a backup phone number in case you ever lose access to Microsoft Authenticator or your smartphone. Do so and click Done:

  7. You will be redirected to the login page and prompted to verify your identity using your default method. If you wish to change your default method, please consult the "Related Articles" sidebar. If you wish to simply choose one of your alternative methods, click Sign in Another Way.