Body
Summary
In 2018 Winona State and Minnesota State, started moving users to multi-factor authentication (MFA) for their Microsoft 365 (M365) accounts. Before that time, users only had a password to protect their account. If someone got hold of their password (an authentication factor), this person could use their StarID and password to impersonate them. If the system would request a second unique factor, taking over an account is a lot harder. There are 3 factors of authentication:
- Something you know: Like a password.
- Something you have: Like a smartphone, or a secure USB key.
- Something you are: Like a fingerprint, or facial recognition.
As you can see, with MFA just stealing a users password will not be enough to take control of their account.
Information Applies to
Faculty, Staff, Current Students, New Students, Alumnus, Retirees
MFA Setup Process
All new accounts are automatically enrolled in multi-factor authentication (MFA). A user will be prompted to complete the MFA setup when they sign in to their Microsoft 365 (M365) for the first time.
To prepare for setup, a user will need to have a computer to sign in to their M365 account (StarID@minnstate.edu for employees and StarID@go.minnstate.edu for students) and a mobile device with the Microsoft Authenticator app installed.
If a user is a student and employee (at the same or different institutions) their student MFA will be different than their employee MFA and need to be setup separately. The Microsoft Authenticator app supports multiple MFA accounts. If a user is a student at multiple institutions or employee at multiple institutions, they only need to setup MFA once for the student accounts or once for the employee accounts.
Should a user encounter "Allow my organization to manage my device" it is recommended not to select this option.
None of a users personal information is stored in or accessed by the Microsoft Authenticator app. It's design and purpose is solely as an authentication utility.
Authenticating into Microsoft 365 using the Microsoft Authenticator app with number matching
Those using the Microsoft Authenticator app with Minnesota State Microsoft 365 services and connected applications use number matching for all MFA requests. Number matching helps ensure that the person requesting access into an account is the same person approving the sign in on a device.
- Sign into Microsoft 365 with your StarID username and password
- Students: StarID@go.minnstate.edu
- Employee: StarID@minnstate.edu
- The "Approve sign in request" window will appear with a 2-digit number.
- Open your Microsoft Authenticator app and enter the 2-digit number and press Yes
Important notes related to Microsoft Authenticator app with number matching:
- Number matching requires the latest version of the Microsoft Authenticator app. Check the Google Play Store or Apple App Store for the latest update.
- Number matching is not supported by Apple Watches.
- Never approve sign in requests that you did not request or expect.
Microsoft Authenticator App
If you have a smart phone, we recommend using the Microsoft Authenticator App. It makes using Microsoft 365 MFA quick and easy. Install it ahead of time from the:
Also, when you use your fingerprint or facial recognition to unlock the smart phone, you are truly using 3-factor authentication.
Troubleshooting & Tips
If you can not get logged in to your Microsoft 365 account because you can't verify your identity and authenticate with MFA, please visit WSU Tech Support in Somsen 207 on the Winona campus or Coffman Center 122 on the Rochester campus, email, or call 507.457.5240, option 1 for assistance.
Related Articles
What is: Multifactor Authentication
Set up Microsoft Authenticator App - Android Device
Set up Microsoft Authenticator App - Apple/iOS Devices
Set up Multi-factor Authentication (MFA) with a Phone Number
Updating Multi-Factor Authentication Settings for Microsoft 365
Learn More
Need additional information or assistance? Contact WSU Tech Support by email or call 507.457.5240, option 1.
Need additional information or assistance? Contact WSU TLT by email, phone (507.457.5240, option 3), or Zoom.
Need additional information or assistance? Visit the Digital Learning Commons in Library 105.