Setting up the web browser extension on Google Chrome

If you cannot use a mobile device to set up multi-factor authentication (MFA), you can install the Authenticator web browser extension for Google Chrome as an alternative solution.

To print this document go to File and select Print (Ctrl+P in Windows or Cmd+P in Mac). You can also choose to save as PDF file from there. Note: Scroll to the bottom of this page to ensure all images are printed.

Instructions

1. Use the Google Chrome web browser on your computer to navigate to the Authenticator extension home page – and click on the Add to Chrome button.

2. You will be taken to the Google Chrome web store website, where the Authenticator is already selected and ready to install. Click Add to Chrome.

3. Google Chrome will prompt you to confirm that you want to add the Authenticator extension. Click Add extension.

4. Once the extension has been installed successfully, you will be notified that Authenticator has been added to Google Chrome. Click the “X” button on the popup to dismiss it.

5. Now use Google Chrome web browser to navigate to https://aka.ms/mfasetup.
6. You may be asked to log in to Office 365 (if not, you will move straight to step 7). If you are asked to log in to Office 365, enter your Cardiff University email address and click Next. You will then be redirected to Cardiff University's familiar login screen. Enter your Cardiff University email address and password, and click Log in.
   • Those without a Cardiff University email address (and only a username) will need to enter the username followed by ‘@cardiff.ac.uk’.
7. If you have not previously set up any MFA methods then after successfully logging in, you will be prompted that more information is required. Click Next and skip to step 9.
   • Otherwise you will be taken to the My Sign-ins page where you can review the MFA methods you have already set up so far. Click on Add method.

8. In the popup dialogue, select Authenticator app from the drop-down list, then click Add.

9. You will be presented with a Microsoft Authenticator dialogue which says to start by getting the app. Click I want to use a different authenticator app.

10. The next screen prompts you to Set up your account. Click Next.

11. The next screen provides a QR code. Click on Can’t scan image?

12. A Secret key will be displayed. Click on the icon of two overlapping files to the right of the Secret key. This will copy the secret key text, ready for pasting.

13. Click on the Extensions button (the jigsaw icon to the right of the address bar) to access the list of installed extensions. Click on the Authenticator extension.

14. Within the Authenticator extension, click on the pencil icon, and then click on the plus icon to add an account.
15. Click on Manual Entry.

16. Enter Cardiff University into the Issuer textbox, or alternatively enter another identifier of your choosing that will help you to remember that this entry relates to Cardiff University Office 365 MFA.
17. Paste the secret key text you copied in step 12 into the text box labelled Secret and click on Ok.

18. The Authenticator extension will show a new entry Cardiff University with a 6-digit code that refreshes every 30 seconds. Click on the pencil icon.

19. Enter your Cardiff University email address into the Username textbox within the Cardiff University entry. Click on the tick icon.
    • Those without a Cardiff University email address (and only a username) will need to enter the username followed by ‘@cardiff.ac.uk’.

20. The Authenticator extension will now update the new entry to include your email address. Click on the 6-digit code.

21. You will be asked whether to give the Authenticator extension the permission to copy the 6-digit code into your computer clipboard. Click Allow.

22. Click on the 6-digit code to copy it into your computer's clipboard.
23. On the webpage with the QR code and the secret key text, click Next. Microsoft will prompt you to enter the 6-digit code from within Authenticator. Enter it and click Next.

The Authenticator extension has been linked to your account. You can now use the application to complete MFA for your account.

24. Select your preferred method for completing MFA by clicking Change next to your Default sign-in method on the My Sign-ins page.

We highly recommend that you add additional methods of authentication. If you cannot use the telephone number you have entered for some reason, you could use your additional methods to still gain access to your account.