MFA Enrollment with Microsoft Authenticator
MFA is now being required for all staff.
Recommend download the Microsoft Authenticator first:
It may be helpful to cover the QR code that is NOT for your device with your hand while pointing your phone’s camera at the QR code.
|
iOS Don't scan this QR code to enroll, only to quickly find the app in the App store |
Android Don't scan this QR code to enroll, only to quickly find the app in the Play store |
 |
The Microsoft Authenticator app is FREE. Its icon has a white background with a blue padlock in it, with a little person inside the padlock. It should look like the app circled in this screenshot.
Note: If you search for Microsoft Authenticator in your phone's App store instead of scanning the QR code above, we've seen different "Authenticator" apps promoted to the top of the App store search results as paid advertisements. Some of these apps require a paid subscription to function properly. The Microsoft Authenticator App doesn't require any kind of subscription, payment, or any more information than what's required to sign in to your District 65 account. |
It is strongly encouraged that you open the app on your phone before signing in on your computer. Be sure to choose “work account” and then choose “Scan QR Code” - you may be asked to allow camera access, so allow the app that access. Then on your computer start the sign-in process by going to Gmail or “accounts.google.com”
If you are automatically still signed in, click on your user icon in the top right corner and sign out
MFA NORMAL START:
 |
After entering your password, you’ll be taken to this screen. Click Next again to continue with enrollment. |
 |
Since we’ve already downloaded the Microsoft Authenticator app, click Next.
You will then see the QR code that Microsoft Authenticator can use to set up the ‘token’ needed for MFA. Point your phone at the code and once the scanner closes, click on Next
|
MFA KICKSTART (Mac/PC):
 |
Go to a Chrome tab where you’re logged into Gmail, Google Drive, or another Google app and sign out. Here’s how:
Once you’re signed out, go to Chrome’s address bar and enter “drive.google.com” and press return. Sign into your D65 account as you normally would. |
MFA KICKSTART (Chromebook):
 |
At the bottom right corner, click on the time then click “Sign Out”.
Once you’re signed out, sign into your D65 account as you normally would and follow the on screen prompts to download the proper Authenticator app for your phone. |
|
Once the app is on your phone, go back to your computer and click Next.
|
| What if I already have another authenticator? If you already have another authenticator app installed on your phone (such as Twilio’s “Authy”) and prefer to use that instead, you may! Just choose “I want to use a different authenticator app.” Please be aware, however, that other apps likely won’t be able to send you convenient Approve/Deny notifications and you’ll have to enter 6-digit codes instead. |
- From this point forward, the process is time-sensitive. Once you scan the QR code in the step below, you have 60 seconds to approve the test notification sent to your phone.
 |
Having completed the steps (above) on your phone with the Authenticator app, scan the QR code presented to you in your browser (not the one in these instructions!) using your phone’s camera. Your District 65 account will appear in the app. Go back to your computer. Click the blue Next button as soon as you’ve scanned the code. |
 |
Microsoft will send a test notification to your mobile device. Click the blue Next button on your computer, pictured to the left. You will then receive a message on your phone with a two digit code.
Enter the two digit code in the space provided on the web page on the computer. |
 |
When you approve the sign-in from your mobile device, Microsoft will verify that it was indeed you attempting to log in, and the screen will update as you see here. Click Next on your computer. |
| What if I don’t want the app to use my camera? Allowing the app to “access your camera” (iOS) or “to take pictures and record video” (Android) is required for the authenticator app to scan the QR code in the next step. If you choose not to allow this, you can still set up the authenticator app, but you'll need to add the code information manually. For information about how to add the code manually, see Manually add an account to the app. |
 |
You’ve set up MFA! Click Done. It is important that you click done to fully complete the MFA confirmation. |
 |
You’re welcome to choose “Stay signed in” or “Remember me” on devices you own or on district systems assigned to you. To do this, tick the box for “Don’t show this again” and then click the Yes button. Please note that this does not mean you will never be prompted for MFA on that device ever again. Instead, this will store your preference – for staying logged in for the maximum allowed duration – in that browser’s cookie store (which should persist right up until you’re forced to clear your browser’s cookies to troubleshoot some website that isn’t working properly.) After all staff groups have been enrolled in MFA and everyone’s gotten accustomed to it, the maximum allowed duration will increase from 24 hours to 7 days. |
 |
In subsequent logins, you will see this slightly different prompt to check your mobile device. We recommend checking the box next to “Don’t ask again for X days” to reduce the number of times you’re prompted to use MFA. (Again, this will be set to allow up to a week between MFA prompts later.) |
Comments
0 comments
Article is closed for comments.