Skip to main content

Multi Factor Authentication - MFA - 2FA

Grace IT is rolling out and enforcing this MFA policy to all Staff in order to improve the security of our organization and help reduce potential headaches. If you are enrolled in MFA, you will need to have your phone as an additional method of authenticating yourself (on top of your password) to log in to your Office365/GraceOhio account. The easiest way to do this is by using the Microsoft Authenticator App on your phone; however, you can use a different method or authenticator if you prefer.

The benefits of being enrolled in MFA is that you do not have to worry about resetting your Office365/GraceOhio and work laptop password regularly, and you will not get any more password reset notifications/emails. MFA also makes it increasingly difficult for anyone else to access your account since they need your password and your approval from your phone in order to sign in, making this a critical technology in cybersecurity.

Standard 2FA Method: Microsoft Authenticator

icon_microsoft-authenticator[1].png  (This is the Microsoft Authenticator App. For more app related information from Microsoft, click on the icon.)

The default (and most straightforward, quickest) method that Grace IT sets up everyone with is the push notification through the Microsoft Authenticator App. When a sign in attempt is made to your account, a push notification is sent to your phone asking to Approve or Deny the login attempt. This method can be changed to another one, if you desire, through your Microsoft Account page. Instructions for setting up MFA using this method are listed below:

A passcode lock on your phone is required by our organization in order to use the Microsoft Authenticator App and the Outlook app together. You will need to setup a 4 or 6 digit passcode on your phone in order to properly use the Authenticator app. Please set this up before proceeding through the below instructions.

Setting up the method manually yourself

1) Install the latest version of the Microsoft Authenticator app, based on your phone:
2) Configure 365 account in Authenticator App
  • Sign into your Office365 at https://myaccount.microsoft.com/
  • Select Security info in the left menu or by using the link in the Security info pane. If you have already registered or been registered by IT, you'll be prompted for two-factor verification. Then, select Add method in the Security info pane.
  • On the Add a method page, select Authenticator app from the drop-down list, and then click Add.
  • On the Start by getting the app page, click Next.

  • Remain on the Set up your account page while you set up the Microsoft Authenticator app on your mobile device.

  • Open the Microsoft Authenticator app on your phone, select to allow notifications (when prompted), select Add account from the Customize and control icon on the upper-right, and then select Work or school account.

  • Return to the Set up your account page on your computer, and then select Next. The Scan the QR code page appears.

  • Scan the provided code with the Microsoft Authenticator app QR code reader, which appeared on your mobile device after you added your work or school account.

    • The authenticator app should successfully add your work or school account without requiring any additional information from you. However, if the QR code reader can't read the code, you can select the Can't scan the QR code link and manually enter the code and URL into the Microsoft Authenticator app. For more information about manually adding a code, see Manually add an account to the app.

  • Select Next on the Scan the QR code page on your computer. Pay attention to your phone afterwards.

    • A notification is sent to the Microsoft Authenticator app on your mobile device, in order to test that MFA works with your account.

    • You will need to tap on or open this notification to approve your sign in attempt. 
  • Approve the notification request in the Microsoft Authenticator app, and then select Next.
  • Congratulations, you have successfully added MFA to your GraceOhio account!

Setting up the method when required by your organization

Follow this instruction list if you see a "More information is required by your device" prompt when you try to use an Office 365 application. This means that we pushed the MFA policy onto your Office 365 account, which forces you to setup MFA in order to continue using your 365 applications.

1) Install the latest version of the Microsoft Authenticator app, based on your phone:
2) Configure 365 account in Authenticator App
  • Proceed to the next page following "More information is required by your device".
  • On the Start by getting the app page, click Next.

  • Remain on the Set up your account page while you set up the Microsoft Authenticator app on your mobile device.

  • Open the Microsoft Authenticator app on your phone, select to allow notifications (when prompted), select Add account from the Customize and control icon on the upper-right, and then select Work or school account.

  • Return to the Set up your account page on your computer, and then select Next. The Scan the QR code page appears.

  • Scan the provided code with the Microsoft Authenticator app QR code reader, which appeared on your mobile device after you added your work or school account.

    • The authenticator app should successfully add your work or school account without requiring any additional information from you. However, if the QR code reader can't read the code, you can select the Can't scan the QR code link and manually enter the code and URL into the Microsoft Authenticator app. For more information about manually adding a code, see Manually add an account to the app.

  • Select Next on the Scan the QR code page on your computer. Pay attention to your phone afterwards.

    • A notification is sent to the Microsoft Authenticator app on your mobile device, in order to test that MFA works with your account.

    • You will need to tap on or open this notification to approve your sign in attempt. 
  • Approve the notification request in the Microsoft Authenticator app, and then select Next.
  • Congratulations, you have successfully added MFA to your GraceOhio account!
  •  
  •  
  • Situtational: If you are an IOS user AND you use the built in Mail or Calendar App for work:

 

Change or Add method

You can access your Microsoft Account page here. The link takes you to the security section. Here you can remove and add methods (Phone text or call, Email, or another Authenticator App), as well as take a look at your default and current methods.

Back to top