| | 1 | = Register for MFA = |
| | 2 | |
| | 3 | Registering does not have any immediate effect, except that the options are stored. |
| | 4 | 1. Go to https://aka.ms/mfasetup |
| | 5 | 1. Log in with your email login |
| | 6 | |
| | 7 | [[Image(public/register_mfa_en:1_Securityinfos.png)]] |
| | 8 | |
| | 9 | You should only see “Password” listed as a login method |
| | 10 | 3. Click “Add sign-in method” |
| | 11 | |
| | 12 | [[Image(public/register_mfa_en:2_Selection.png)]] |
| | 13 | |
| | 14 | |
| | 15 | == Option 1 “Microsoft Authenticator” == #mfa_option1_en |
| | 16 | 1. Start with the general steps above and select “Microsoft Authenticator.” |
| | 17 | 2. If you haven't already done so, install Microsoft Authenticator from the respective store. |
| | 18 | 3. Add an account to Authenticator. |
| | 19 | |
| | 20 | [[Image(public/register_mfa_en:3_ms_authenticator_steps.png)]] |
| | 21 | 4. In the app, select Add (icon at the bottom right) and scan the QR code |
| | 22 | 5. Your smartphone may ask for additional permissions to use the camera or push notifications. These must be approved. |
| | 23 | 6. Once you have scanned the QR code, click “Next.” |
| | 24 | |
| | 25 | [[Image(public/register_mfa_en:4_ms_authenticator_confirm.png)]] |
| | 26 | 7. A pop-up will appear in the app asking you if you just tried to log in and what number is displayed. Enter the number displayed and tap “Yes.” |
| | 27 | 8. Close the confirmation page. |
| | 28 | |
| | 29 | #mfa_option2_en |
| | 30 | #mfa_option3_en |
| | 31 | == Options 2 and 3 “Other app on smartphone or laptop” == |
| | 32 | 1. If you haven't already done so, install any TOTP-enabled authenticator. For example: |
| | 33 | - KeePassXC (pre-installed on all MBS laptops; for Windows, macOS, and Linux, [wiki:public/KeyPassXC Handout available]) |
| | 34 | - Google Authenticator (iPhone and Android) |
| | 35 | - Ente Auth 2FA (open-source project; all platforms) |
| | 36 | - macOS Passwords (standard app on macOS) |
| | 37 | 1. Start with the general steps above and select “Microsoft Authenticator” (yes, that's right, Microsoft Authenticator). |
| | 38 | 1. Select “Set up another app for authentication.” |
| | 39 | [[Image(public/register_mfa_en:5_other_authenticator_steps.png,1080px)]] |
| | 40 | |
| | 41 | ==== Only for smartphones ==== |
| | 42 | 4. Tap “Add” in the Authenticator app and scan the QR code |
| | 43 | 5. “Next” |
| | 44 | |
| | 45 | ==== Only for laptops ==== |
| | 46 | 4. Select “Can't scan the QR code?” |
| | 47 | |
| | 48 | [[Image(public/register_mfa_en:6_Cant_scan_qr.png,700px)]] |
| | 49 | 5. Click “Copy key” and paste it into the app. |
| | 50 | 6. “Next.” |
| | 51 | |
| | 52 | ==== Both ==== |
| | 53 | 6. A new account with a six-digit code will be displayed in the app. Type in the code. |
| | 54 | |
| | 55 | [[Image(public/register_mfa_en:7_other_authenticator_confirm.png)]] |
| | 56 | 7. Close the confirmation page. |
| | 57 | |