Microsoft 365 MFA: Set Up Microsoft Authenticator Before SMS and Phone Verification Retirement

Summary

Microsoft is retiring SMS (text message) and voice call authentication for Microsoft 365 on February 1, 2027.

To prepare for this change, Winona State University is asking all Microsoft 365 users who currently rely on text messages or phone calls for MFA to set up the Microsoft Authenticator app on their mobile device by November 20, 2026.

Winona State University recommends using the Microsoft Authenticator app, but other phishing-resistant methods, such as FIDO2 security keys, may also be used.

Information Applies To

Faculty, Staff, Current Students, New Students, Alumni, Retirees

Who Needs to Take Action?

You need to take action if your current Microsoft 365 multi-factor authentication (MFA) method is:

• A text message (SMS)
• A phone call (voice verification)

To continue accessing your Microsoft 365 account without interruption, add the Microsoft Authenticator app and set it as your default sign-in method by November 20, 2026.

No action is required if you already use the Microsoft Authenticator app and can successfully approve sign-in requests using the app.

Key Dates

Beginning October 1, 2026, users who are not using a supported authentication method may be prompted to update their MFA settings. Initially, you will be able to select "Skip for now," but we encourage you to make the change at your convenience rather than waiting until it becomes required.

Beginning January 19, 2027, the number of times you can select "Skip for now" will be limited.

By February 1, 2027, affected users must have transitioned to a supported authentication method.

Update Your Security Information

To review or update your MFA settings:

1. Open the Microsoft Security Info page.

2. Sign in to Microsoft online using your Minnesota State Microsoft account.

Username 

• Students: StarID@go.minnstate.edu
• Employees: StarID@minnstate.edu

Password

• Your StarID password

3. Verify your identity using your current MFA method (text message or phone call).

Add Microsoft Authenticator

You will need both a computer and your mobile device to complete the setup.

Depending on your device and operating system version, the steps may vary slightly.

Notifications must be enabled for Microsoft Authenticator so you can approve sign-in requests and enter the two-digit number shown during setup.

On Your Computer:

1. Select + Add sign-in method.

2. Select Microsoft Authenticator from the list.

3. If Microsoft Authenticator is not already installed on your mobile device, download it from one of the following app stores, then select Next on your computer.

• Apple App Store
• Google Play Store

4. Select the Next button on your computer. 

On Your Mobile Device:

1. Open the Microsoft Authenticator app. If prompted, select Set up your account and allow notifications.

2. If prompted to Sign in with Microsoft, select Skip in the upper-right corner.

3. At the Authenticator home screen, select "Add Account" at the bottom or the "+" symbol at the top right.

4. Select Work or school account, then choose Scan QR code (Apple) or Scan a QR code (Android).

5. Select Allow if prompted with "Authenticator Would Like to Access the Camera."

6. Scan the QR code on the screen with your mobile device.

• Note: The QR code shown in the screenshot below has been obscured for security purposes.

On Your Computer:

1. After scanning the QR code, select Next.

2. The next page, titled Let's try it out, displays a two-digit number.

3. A notification will be sent to the Microsoft Authenticator app on your mobile device.

On Your Mobile Device:

1. Enter the two-digit number displayed on your computer and select Yes.

2. You will be prompted to verify your identity using Face ID, fingerprint authentication, or your device passcode.

3. You have successfully added the Microsoft Authenticator app as a sign-in method. On your computer, select the Done button.

Change Your Default Sign-In Method

To change your default sign-in method:

1. Select Change next to Default sign-in method.

2. Select App based authentication - notification from the list, then select Confirm.

3. Microsoft Authenticator will now be your default sign-in method.

Trouble Signed In To Microsoft 365?

If you are unable to access your Microsoft 365 account because you cannot complete MFA verification, contact WSU Tech Support for assistance resetting your authentication methods.

Visit

• Somsen Hall 207 (Winona Campus)
• Coffman Center 122 (Rochester Campus)

Call

• 507.457.5240, Option 1

Learn More

• Contact WSU Tech Support for additional assistance or questions.