Microsoft MFA (How To) Enroll a Hardware Token from a Sign-in Prompt
This article will describe the steps to enroll a pre-configured hardware token in Microsoft MFA from a sign-in prompt.
If you have not yet enrolled in Microsoft Multi-Factor Authentication (MFA) and have a pre-configured hardware token (FOB), follow the steps below to enroll in Microsoft MFA using the token and an additional method (Microsoft Authenticator App, phone number, alternate email address or security questions).
Note: You must have a pre-configured hardware token to complete these steps. Duo hardware tokens will not work with Microsoft MFA.
- Sign in with your UWM email address and password.
- The next screen will prompt you to authenticate; press the button on the left side of the hardware token and enter the 6-digit code from the token screen in the Code text box.
Note: You must have a pre-configured hardware token to complete this step. Duo hardware tokens will not work with Microsoft MFA.
- Once the code is entered, you can click the Don't ask again for 14 days checkbox so you do not have to authenticate on this computer and browser for 14 days.
- Click the Verify button to move on to the next step.
- You will see the More information required screen. Click the Next button to move on to the next step.
- The Keep your account secure screen appears. Notice the checkmark above the App option in the upper left corner of the screen, this indicates that the hardware token is configured and set up for your account. You will now need to add in an additional authentication method.
- If you would like to use a phone number, choose your country code, enter your 10-digit phone number including area code and then choose to either have Microsoft Text me a code or Call me. Follow the prompts on the screen to configure the method you choose.
Note: Do not use a Microsoft Teams phone number in this section; Microsoft Teams is authentication dependent.
- If you want to configure a different authentication option, click the I want to set up a different method link at the bottom of the screen.
Click the drop-down arrow in the Choose a different method box to see the additional options of Email and Security questions.
Note: The alternate email and security questions options will only work for password recovery and cannot be used for MFA authentication.
- If you choose email, enter a non-UWM email address in the box and follow the prompts on the screen to configure your alternate email address.
- If you choose Security questions, choose three security questions from the list and provide answers.
- When you have finished configuring your second factor, you will see the following screen displaying your two chosen methods:
- Click Done to complete the configuration process. You will now be taken to the app that you signed into.