Forced Enrollment in Microsoft Authenticator

In order to be able to use Microsoft Authenticator for multi-factor authentication (MFA), you must first enroll with the Microsoft Authenticator app or register a phone number in your Office 365 account's Security Info settings.

If you have already done either or both of these tasks, you are prepared for MFA and no further action is required. If you have not enrolled by the go-live date, you will be forced to enroll the next time you log in to a system that requires MFA (i.e. Banner).

The following video gives a brief overview of the enrollment process. For more in-depth instructions, please scroll down.


  1. When you access a system that requires MFA, you will be presented with the following screen on your computer's web browser. Click Next to proceed.

  2. Choose a verification method from the pulldown menu. We highly recommend the Authenticator App for ease of use and one-touch verification.

  3. If you choose 'Authentication phone' or 'Office phone', you will be prompted to input your phone number. After clicking Next, the phone number will receive a verification call that must be answered to complete the registration process. Once this is completed, skip to step 7.

  4. If you choose Authenticator App, you will see this page instead. Simply click Set up to continue.

  5. You will see a page informing you to download and configure the Authenticator app. Once the app is installed on your phone, open it and scan the QR code displayed on your computer's screen:

  6. You will then be prompted to enter a backup phone number in case you ever lose access to Microsoft Authenticator or your smartphone. Do so and click Done:

  7. You will be redirected to the login page and prompted to verify your identity using your default method. If you wish to change your default method, please consult the "Related Articles" sidebar. If you wish to simply choose one of your alternative methods, click Sign in Another Way.