MFA: iPhone - Microsoft Authenticator App

Article Type: How To

MFA Automatic Enrollment Instructions: iPhone - Microsoft Authenticator app

Please Note:

  • Should you encounter “Allow my organization to manage my device” it is recommended Not to select this option.

  • None of your personal data is stored from any phone device you select for MFA set up and enrollment or by installing and using the Microsoft Authenticator app. MFA is not designed for data storage, it’s design and purpose is as an authentication utility. The Microsoft Authenticator app verifies authentication within the sign-in process in order to access Minnesota State O365 provided services.

What you will need before you begin MFA set up:

  1. Immediate access to the Phone Device you will select for your preferred verification option
  2. A Computer with Internet connectivity


  • Note: Illustrations and instructions may vary slightly.
  • Step 1) On your iPhone:
    • a)  Go to the App Store.
    • b)  Perform search for "Microsoft Authenticator". Select Get, then Open app.
      • (you may be prompted to enter your App Store login)

  • Step 2) Select Work or school account.
    • Select SKIP if prompted to Add Personal Account or Add Non-Microsoft Account

  • Step 3) You must tap Allow to, Allow Authenticator to take pictures and record video? prompt.
    • Your phone will be ready to scan or manually enter the QR code (displayed in step 7).
    • Set your phone down.
  • Important note:
    • Once you click on the Minnesota State button Enable Multi Factor Authentication outlined in the next step (Step 4), you will need to complete MFA set up before you will be able to access your email and other Minnesota State O365 connected services. If you cancel or do not complete the set up, you will not be able to access these services until MFA is successfully set up.
  • Step 4) Switch to your computer:
    • a)  Browse to the Additional security verification page.
    • b)  Sign in with your username and password:
    • c)  Click Next on the prompt More information required.
      • Please note, If you are both employee and student, you will need to set up MFA on both your employee and student accounts. The Microsoft Authenticator application can support multiple accounts.  
      • If you are employed or take classes at multiple Minnesota State University / Colleges you only need to do this once per employee/student account.
  • Step 5) Displayed on your computer, on the Additional security verification page:
    • a)  Under, How do you want to use the mobile app?:
      • Select Mobile app from the drop down selection
    • b)  Select a verification method:
      • Receive notifications for verification (recommended - one-tap approval)
      • Use verification code (this option continually generates a verification code sent to your phone which you will need to accurately enter for verification).
    • Note, before you click Set up, the next screen will display a QR code; this QR code is time-sensitive, so be ready to scan the QR code with your phone.
    • c)  Click Setup
  • Step 6) On your phone:
    • a)  Scan the QR code, displayed on your computer. Note: you must use the Authenticator App on your phone to scan the code displayed on your computer.


  • b)  After the QR code has been scanned, MNSCU and your account will display on your phone.

  • c) On your phone, select Go to Settings and ensure Allow Notifications is set to allow.

  • Step 7) On your computer, on the Additional security information window:
    • Click Next. Displayed will be Step 2: Let’s make sure that we can reach you on your Mobile App device
    • Note: If you have set up a PIN or biometric face/fingerprint to access your phone, you may be prompted for this to proceed.
  • Step 8) On your phone the Authenticator app will prompt you for approval or display a verification code:
    • If you selected Receive notification for verification:
      • Select Approve prompted on your phone
    • If you selected Use verification code:
      • On your computer, enter the verification code received on your phone, then click Verify
  • Step 9) On your computer, on the Additional security verification page:
    • a)  A prompt to "Secure your account by adding phone verification to your password" and "Step 2: In case you lose access to the mobile app" will be displayed.
    • b)  The phone number you enter should be a different number other than your mobile device; this is to help ensure you are not locked out of your account in the event you do not have immediate access to your primary phone, your battery is dead, your primary device is lost, stolen or damaged or you get a new phone or number.
      • Consider using a spouse or trusted family member’s phone as the added back-up phone number (i.e. the "added phone verification to your password").
      • Note: This added phone number will not be called for validation during this set up process.
    • c)  Select country and ensure you have entered the correct phone number before clicking Done.
    • Your account is now set with MFA protection!

If you need assistance with MFA please contact IT Service Desk.

Additional Resources:

Information Security:

What should I do when I get a verification request I don’t recognize?

If you receive approval requests for access to your Office 365 and you are not actively signing in to Minnesota State O365 connected applications (in other words you did not just attempt to log in to your O365 account using your Minnesota State O365 login credentials) then deny the access.

Stay Vigilant:

  • You will not be prompted by MFA without your attempt to log in. MFA verification will never prompt you first. Do not approve or take action on any prompts if you are not logging into your account.
  • No one, including IT Services, Metropolitan State University, Minnesota State Colleges or Universities, or other entities which may appear to be related, will ever contact or prompt you to ask you to “approve” an MFA notification or ask for a verification code.  
  • Do not press # key for verification or enter verification code if you receive a voice call on your mobile device, office, or alternate phone. Ensure your spouse or trusted family doesn’t automatically enter the key(s) without checking with you first.


Article ID: 132169
Thu 5/6/21 8:45 AM
Mon 1/23/23 1:29 PM

Related Articles (3)

View information on transitioning to a new phone and/or new phone number.
Instructions to view and select an alternate sign-in verification option. Instructions assume you have previously set up one or more alternate verification sign-in options for MFA.
Instructions to set up an alternate back-up sign in option(s) or add or make changes to MFA settings.