Office 365 - Two-factor authentication

This service will be activated for all UiT employees’ Office 365 services on 13 June 2018. Note that this includes accessing your UiT email.


 

Two-factor authentication is when you log in to a service with a username and password (something you know) in addition to being called, receiving an SMS, or confirming the login in an authentication app (something you have). In Norway the most common kinds of two-factor authentication are BankID and MinID. Two-factor authentication increases security dramatically. Even if a hacker gets your password they will not be able to access your account without your smart phone.

This is one of the steps UiT is taking to protect your privacy and information security.


Did you forget your phone at home? You should add your work phone number as an altenate authentication method. This will enable you to choose to be called from Microsoft to authenticate yourself if you forgot your phone at home. See bullet 2 and 3 below

 


1A. 

Get started with two-factor authentication via Outlook

 

Recommended if you meet two factor authentication for the first time when you start Outlook on your work computer

User guideGet started with two-factor authentication via Outlook

1B.

Get started with two-factor authentication via Outlook Web App (SMS)

 

Recommended if you have Macintosh, Linux, Dont have Outlook or are at home

User guideStart using two-factor authentication via Outlook Web App

1C.

Get started with two-factor authentication via Outlook Web App (Microsoft Authenticator)

 

Recomended if you do not wish to receieve notifications on SMS

User guide: Get started with two-factor authentication via Outlook Web App with Microsoft Authenticator

 

2. Log in after you have activated two-factor authentication

The two-factor service will automatically notify you based  on your chosen primary method for receieving notifications when you log inn. If you have chosen to be notified on SMS to a designated phone number, the SMS will be sent automaticly after you logged on with your user name and password. All you have to do is to type inn the code and proceed. 

You can also choose alternate ways to receieve your access code. If you normaly use SMS, but forgot your phone at home, you can choose "Sign in another way" and choose to be called up on your work phone number (This requires you to set up an alternate phone number on the two-factor setup page. See bullet 3. below).

Software on your computer will normally remember that you have gone through the two-factor authentication process with them. However, there might be situations where e.g. Outlook asks for authentication again.

If you use a different computer or mobile phone, you will be asked for two-factor authentication the first time you want to use email or Office 365 on that device.

3. Change the settings for two-factor authentication

There are multiple ways to set up two-factor authentication. In addition to getting an SMS, you can be called, or use an app on your smart phone to approve the login. If you want to change how your two-factor authentication is set up, use: 

https://aka.ms/mfasetup



3.a. Change authentication method to "Microsoft Authenticator"

This guide shows you how to change authentication method to "Microsoft Authenticator" if your previously choose something else.

Microsoft Authenticator is an app you can install on your smartphone that lets you log in with two-factor authentication. It lets you use a code or directly approve the login.

User Guide: Install and configure Microsoft Authenticator

3.b. Approve login via Skype for Business or your office phone

If you input your work phone number (either office phone or a mobile phone number that UiT pays for), Microsoft can call you to approve a two-factor authentication.

This tutorial assumes that you have set up two-factor authentication with SMS as described above.

  1. Go to the webpage https://aka.ms/mfasetup
  2. Choose if your want your work phone as Primary or Alternate authentication phone
    1. Primary authentication phone: Type inn your work number in the field "Authentication phone". (Optional:  If you also choose "Call my authentication phone number" as preferred option, Microsoft will call your work phone every time you need the two-factor authentication to log inn).
    2. Alternative authentication phone: Insert your work phone number in the field: Alternative authentication phone
  3. Press "Save".

When you log , depending on your choice above, you will either be called by microsoft automaticly or you can choose «Sign in another way» when it asks for two-factor authentication. (The call from Microsoft is an automatic robot that asks you to press # on the Skype for business dial keyboard for the approval.)

 

4. Mail for iPhone

4a. Microsoft Outlook on iPhone

In this user guide you will learn how to install the Outlook app with two-factor authentication activated.

User guideMicrosoft Outlook for iOS

4b. Mail (Standard mail client) on iPhone

This app will not be affected by the two-factor authentication at this time. You can therefore log in to this mail client as before 

Follow this guide to set up the standard mail client for iPhone

User guide: Mail for iOS

5. Mail for Android

5a. Microsoft Outlook for Android phones

In this user guide you will learn how to install the Outlook app with two-factor authentication activated.

User Guide: Translation pending

5b. Native mail client for Android phones

These apps will not be affected by the two-factor authentication at this time. You can therefore log in to these mail clients as before 

In this user guide you will learn how to set up the native Android mail client

User Guide: Configuration settings for Android devices


 

Which services are protected with two-factor authentication? 

All Office 365 services, including email. A full list of these services can be found on the Office 365 webpage.


Skip to main content