= Register for MFA =

Registering does not have any immediate effect, except that the options are stored.
1.    Go to https://aka.ms/mfasetup
1.    Log in with your email login

 [[Image(public/register_mfa_en:1_Securityinfos.png)]]

 You should only see “Password” listed as a login method
3.    Click “Add sign-in method”

 [[Image(public/register_mfa_en:2_Selection.png)]]
 

== Option 1 “Microsoft Authenticator” == #mfa_option1_en
1. Start with the general steps above and select “Microsoft Authenticator.”
2. If you haven't already done so, install Microsoft Authenticator from the respective store.
3. Add an account to Authenticator.

  [[Image(public/register_mfa_en:3_ms_authenticator_steps.png)]]
4.    In the app, select Add (icon at the bottom right) and scan the QR code
5.    Your smartphone may ask for additional permissions to use the camera or push notifications. These must be approved.
6.    Once you have scanned the QR code, click “Next.”
 
  [[Image(public/register_mfa_en:4_ms_authenticator_confirm.png)]]
7.    A pop-up will appear in the app asking you if you just tried to log in and what number is displayed. Enter the number displayed and tap “Yes.”
8.    Close the confirmation page.

#mfa_option2_en
#mfa_option3_en
== Options 2 and 3 “Other app on smartphone or laptop” ==
1.    If you haven't already done so, install any TOTP-enabled authenticator. For example:
 -    KeePassXC (pre-installed on all MBS laptops; for Windows, macOS, and Linux, [wiki:public/KeyPassXC Handout available])
-    Google Authenticator (iPhone and Android)
-    Ente Auth 2FA (open-source project; all platforms)
-    macOS Passwords (standard app on macOS)
1. Start with the general steps above and select “Microsoft Authenticator” (yes, that's right, Microsoft Authenticator).
1. Select “Set up another app for authentication.”
  [[Image(public/register_mfa_en:5_other_authenticator_steps.png,1080px)]]

==== Only for smartphones ====
4.    Tap “Add” in the Authenticator app and scan the QR code
5.    “Next”

==== Only for laptops ====
4.    Select “Can't scan the QR code?”

  [[Image(public/register_mfa_en:6_Cant_scan_qr.png,700px)]]
5.    Click “Copy key” and paste it into the app.
6.    “Next.”

==== Both ====
6.    A new account with a six-digit code will be displayed in the app. Type in the code.

  [[Image(public/register_mfa_en:7_other_authenticator_confirm.png)]]
7.    Close the confirmation page.