Microsoft MFA (How To) Enroll Authenticator App From a Sign In Prompt

As of February 21, 2023, the Microsoft Authenticator App has been updated to include number matching and location mapping for the Push Notification authentication methods.  

When you log into Microsoft 365 or any UWM service (PAWS, Canvas, etc.) you will be prompted to verify your account and confirm your identity (e.g. register Authenticator app or phone number, enter an alternate email, or create security questions). 

This update will enable you to reset your UWM account password anywhere and anytime without the need to contact our Help Desk services. This can be done when you have forgotten your password, your password has expired, or you want to change your current password. 

For additional information on this change, please visit our Digital Identity page at the following link: UWM Digital Identity Page.

Enrollment from an MFA Prompt

Begin by installing the Microsoft Authenticator App on the Android or iOS device you wish to use.

If you are viewing this article on a computer, you can securely install the Microsoft Authenticator App by using your Android or iOS device to scan the respective QR codes directly from Microsoft's website.

If you are viewing this article on your mobile device, you can click the link to securely install it for Android from the Google Play Store, or for iOS from the App Store.

Step-By-Step Instructions

1. Sign in with your UWM email address and password.

2.  On the next page, you will be prompted to keep your account secure, and will see a prompt to get the Microsoft Authenticator app. Click Next. 

3.Another window will open to Install Microsoft Authenticator App. Install the app on your mobile device by choosing your play store, then come back to this screen and click Next

5. Setup your account in app by following the directions on screen and click Next

Note: If "other options" is selected the following screen will show. Choose your sign-in method.
         

6. From the options, tap to select Work or school account, and then select Scan QR Code. Do not select sign-in, as multiple issues have been reported using that method.  

7. Follow the prompt on your mobile device to scan the QR code or Add account Manually. If you are prompted to allow the Microsoft Authenticator app to access your camera, tap Allow. 

Note: If you cannot scan the QR Code, click "Can't scan image?" under the QR code in the prompt. Follow the prompts within the Authenticator app to add your account and then you can move on to the next step.

8. Click Next. The system will run a test. On your screen you will see a number, and on your mobile device you will receive a push notification. When you open the push notification, you will see the location map of the IP address where you are attempting to sign in, and a prompt with a text box and number pad to match the number on screen. Enter the number from the sign-in prompt on screen, and tap Yes to approve the sign in.

Note: If the location map presented in the prompt does not match your physical location, this could be for reasons such as IP Address location, VPN use, and cell phone tower location. If you receive a prompt that you did not initiate, do not approve the prompt.

9. Now you will see your UWM account listed in your Microsoft Authenticator App. 

10. After you receive the Notification approved message, click Next.

For more information about the Microsoft MFA sign in prompt please see Microsoft's article, Set up your Security info from a sign-in prompt.

For further UWM-specific information regarding MFA, please access: UWM Digital Identity Page