Setting up the web browser extension on Google Chrome

If you cannot use a mobile device to set up multi-factor authentication (MFA), you can install the Authenticator web browser extension for Google Chrome as an alternative solution.

Instructions

1. Use your computer's Google Chrome web browser to navigate to the Authenticator extension's home page and click on the Add to Chrome button.

2. You will be taken to the Google Chrome web store website, where the Authenticator is already selected and ready to install. Click Add to Chrome.

3. Google Chrome will prompt you to confirm that you want to add the Authenticator extension. Click Add extension.

4. Once the extension has been installed successfully, you will be notified that Authenticator has been added to Google Chrome. Click the “X” button on the popup to dismiss it.

5. Now, use Google Chrome web browser to navigate to https://aka.ms/mfasetup.
6. You may be asked to log in to Office 365 (if not, you will move straight to step 7). If you are asked to log in to Office 365, enter your Cardiff University email address and click Next. You will then be redirected to Cardiff University's familiar login screen. Enter your Cardiff University email address and password, and click Log in.
   • Those without a Cardiff University email address (and only a username) must enter the username followed by ‘@cardiff.ac.uk’.
7. If you have not previously set up any MFA methods, then after successfully logging in, you will be prompted that more information is required. Click Next and skip to step 9.
   • Otherwise, you will be taken to the My Sign-ins page, where you can review the MFA methods you have already set up. Click on the Add method.

8. In the popup dialogue, select Authenticator app from the drop-down list, then click Add.

9. You will be presented with a Microsoft Authenticator dialogue, which says to start by getting the app. Click I want to use a different authenticator app.

10. The next screen prompts you to Set up your account. Click Next.

11. The next screen provides a QR code. Click on Can’t scan image?

12. A Secret key will be displayed. To the right of the secret key, click on the icon of two overlapping files. That will copy the secret key text, ready for pasting.

13. Click the jigsaw button on the right side of the address bar at the top of the browser to see a list of installed extensions. Click on the Authenticator extension.

14. Within the Authenticator add-on, click on the pencil icon and then click on the plus icon to add an account.
15. Click on Manual Entry.

16. Enter Cardiff University into the Issuer textbox, or alternatively, enter another identifier of your choosing that will help you to remember that this entry relates to Cardiff University Office 365 MFA.
17. Paste the “secret key” you copied in step 12 into the text box labelled Secret.
18. Click on Ok.

19. The Authenticator add-on will show a new entry for Cardiff University with a 6-digit code that refreshes every 30 seconds. Click on the pencil icon.

20. Enter your Cardiff University email address into the Username textbox within the Cardiff University entry.
21. Click on the tick icon.

22. The Authenticator add-on will update the new entry to include your email address. Click on the 6-digit code.

23. You will be asked whether to give the Authenticator add-on the ability to copy the 6-digit code into your computer clipboard. Click Allow.

24. Click on the 6-digit code to copy it into your computer's clipboard.
25. On the webpage with the QR code and secret key, click Next. Microsoft will prompt you to enter the six-digit code from within Authenticator. Enter it and click Next. The Authenticator extension has been linked to your account. You can now use the application to complete MFA for your account.

26. Click Change default sign-in method, and in the popup list, select your preferred method for completing MFA. Your chosen default sign-in method will now be displayed.

We highly recommend that you add additional methods of authentication. If you cannot use the telephone number you have entered for some reason, you could use your additional methods to still gain access to your account.