Set up the Microsoft Authenticator app

1. Download and install the Microsoft Authenticator app onto your smartphone device as you would with any other smartphone app. You might need to Accept or Agree to any prompts to complete this successfully.
2. To use the Microsoft Authenticator app, you will need to tap I agree on the Your privacy matters screen. Then tap Skip in the top right corner of the Peace of mind for your digital life screen, and you will end up on the Ready to add your first account? Screen. If you have used the app previously, you can miss out this step.
3. Now use a web browser on your computer to navigate to https://aka.ms/mfasetup.
4. You may be asked to log in to Office 365 (if not, you will move straight to step 5). If you are asked to log in to Office 365, enter your Cardiff University email address and click Next. You will then be redirected to Cardiff University’s familiar login screen. Please enter your Cardiff University email address and password as normal and click Log in.
   • Those without a Cardiff University email address (and only a username) will need to enter the username followed by ‘@cardiff.ac.uk’.
5. If you have not previously set up any MFA methods then After after successfully logging in, you will be prompted that more information is required. Click Next and skip to step 7. Otherwise you will be taken to the My Sign-ins page where you can review the MFA methods you have already set up so far. Click on Add method.
6. In the popup dialogue that appears, select Authenticator app from the drop down list, and then click Add.
7. You will be presented with a Microsoft Authenticator dialogue which says to start by getting the app. Click Next.
8. The next screen prompts you to Set up your account. Click Next.
9. The next screen provides a QR code. Leave the QR code on the screen, and perform the next steps on your smartphone.
10. On your Android/Apple smartphone, open the Microsoft Authenticator app that you downloaded and installed. (If you are asked if you want to allow Notifications, please tap Allow. If you are asked about gathering non-personally identifiable usage data, please tap OK). If Microsoft Authenticator’s “app lock” feature is already active, you will need to enter your smartphone unlock code, or biometric (such as fingerprint or face recognition) at this point, before you can access the app.
11. In the Microsoft Authenticator app, on the Ready to add your first account? screen, tap the Add account button in the middle of the screen. If you already have other accounts set up in the app you will see these listed and will not see an Add Account button – tap the plus icon in the top right of the screen instead. In the list that appears tap Work or school account, and then tap Scan QR code.
12. The Microsoft Authenticator app will then attempt to use your smartphone camera to enable it to scan the QR code. If you are asked if you want to allow Notifications, please tap Allow.
13. Use the smartphone camera to scan the QR code on the web page on your computer – see step 9.
14. After successfully scanning the QR code, the Microsoft Authenticator app will display a new entry within Accounts of Cardiff University with your email address.
15. Switch back to the web browser on your computer, and on the web page with the QR code click Next. Microsoft now want to test that you can use the Microsoft Authenticator app successfully by showing you a two digit code.
16. A notification should appear on your smartphone asking you to enter the number shown on your web browser to sign in. Enter the two digit code and select Yes.
17. If the Microsoft Authenticator “app lock” is active, you will need to enter your smartphone unlock code, or biometric (such as fingerprint or face recognition) before you can approve the request. Ensure that you tap Approve to complete the test-run
18. The web page on your computer should have already updated to show Notification approved. Click Next.
19. The set-up process is complete – the Microsoft Authenticator app is installed and connected to your account. You can now use the app to complete MFA verifications for your account. Click Done to finish. Remember not to uninstall the Microsoft Authenticator app.
20. You will be taken to the My Sign-ins page where you can see the MFA methods you have in place.

We highly recommend that you add additional methods of authentication. If you cannot use your smartphone for some reason, you could then use your additional methods, and still gain access to your account.