Azure MFA (How To) Set up Microsoft Authenticator App – Currently Enrolled in Microsoft MFA

This article is intended for users who are already enrolled in Microsoft MFA with either a phone call, text message, or hardware token (fob) for their authentication method. This article provides instructions on how to set up the Microsoft Authenticator App as an authentication method for an account.

Classification: Multi-Factor Authentication > Azure AD Multi-Factor Authentication > Azure MFA Enrollment


As of February 21, 2023, the Microsoft Authenticator App has been updated to include number matching and location mapping for the Push Notification authentication methods.

Begin by installing the Microsoft Authenticator App on the Android or iOS device you wish to use.


1. Log in to Microsoft 365 and click on your Person Icon in the top right corner of your working screen and then choose View account from the drop-down menu.

Microsoft 365 View Account


2. Click UPDATE INFO on the Security info tab. 

Update Security Info


3. Click Add method.

Security info - add method


4. From the drop-down menu that appears, select Authenticator app and click Add.

Add a method, authenticator app


5. When prompted to get the app click Next.

Get the app prompt


6. When prompted to set up your account click Next.

Set up your account


7. This will bring up a QR code for you to scan using the Microsoft Authenticator App on your Android/iOS device.

Can the QR code prompt - browser.


8. On your Android/iOS device, open the app and tap Add account.

Add account - Microsoft Authenticator app


9. If prompted tap Continue.

Do you have a backup prompt - mobile


10. Tap Work or school account.

Add work or school account - mobile app


11. When prompted tap Scan QR code.

Scan QR code prompt - mobile app

12. Use your Android/iOS device to scan the QR code from the prompt on your web browser.

Scan QR Code with Mobile Device


13. Once it registers your account, you will see your UWM email address (ePantherID@uwm.edu) listed in the Microsoft Authenticator app on your Android/iOS device.

 Successfully added account to Microsoft Authenticator app


14. In your web browser you will be prompted to run a test to ensure MFA is working. On your screen you will see a number displayed in the prompt. On your mobile device you will receive a push notification. When you open the push notification, you will see the location map of the IP address where you are attempting to sign in, and a prompt with a text box and number pad to match the number on screen. Enter the number from the sign-in prompt on screen, and tap Yes to approve the sign in.

Please Note: If the location map presented in the prompt does not match your physical location, this could be for reasons such as IP Address location, VPN use, and cell phone tower location. If you receive a prompt that you did not initiate, do not approve the prompt. 

Microsoft Authenticator Number MatchingMicrosoft Authenticator App Number Matching Location Mapping


15. If the test is successful, you will see Notification approved in your web browser. Click Next.


16. You will now see Microsoft Authenticator listed in your Security info sign-in methods.

Microsoft Authenticator app successfully registered 


17. If you are done making changes to your Security info, click on your person icon in the top right corner of your working screen and Sign out.

My account - sign out


18. When asked which account you want to sign out of select your account.

Sign out confirmation


19. After you are signed out, close your browser.


 

Note: 

  • To utilize the push notification option in with the Microsoft Authenticator app, you will need to have an internet connection. Data rates and charges may apply.
  • You do not need an internet connection to utilize the code option. This is why we recommend this method for international use.
  • If you do happen to run into issues with the push notification option, please see the KnowledgeBase article Microsoft MFA (How To) Sign in another way
  • If you continue to have issues authenticating, or if you have other barriers that prevent you from accessing a second device please reach out to the UWM Help Desk for assistance.
  • Any student who feels they do not have the technology to successfully enroll in the Microsoft Authenticator app, should call the UWM Help Desk at 414-229-4040 or visit Getting Help - Technology Resources.