Body
Overview
Multi-Factor Authentication (MFA) protects your FAU account by requiring a second form of verification such as the Microsoft Authenticator app.
This guide explains:
- How to set up Microsoft Authenticator
- How to add backup MFA methods
- What to do before getting a new phone
- How to recover or reset MFA access if you cannot approve MFA
- How to use a Temporary Access Pass (TAP)
This article is written to help both users and support tools answer common MFA questions.
1. How to Set Up Microsoft Authenticator
If you’ve never used Microsoft Authenticator or MFA before, follow these steps to set up your first authentication method. This setup is required to access your FAU account securely.
Step 1: Install the Microsoft Authenticator App
Install the app on the device you want to use for MFA:
- iPhone / iPad: App Store → Search Microsoft Authenticator
- Android: Google Play Store → Search Microsoft Authenticator
Open the app once it’s installed, but do not add an account yet — the pairing happens during sign‑in.
Step 2: Sign In to Your FAU Account
- On a computer, go to https://aka.ms/mfasetup or sign in to any FAU Microsoft service.
- After entering your FAU credentials, you will be prompted to set up MFA.
- Select Next when asked to set up the Microsoft Authenticator app.
Step 3: Connect the App to Your Account
You will be shown a QR code on your computer screen.
On your mobile device:
- Open the Microsoft Authenticator app
- Tap Add account
- Choose Work or school account
- Allow the app to access your camera
- Scan the QR code shown on your computer
Once scanned, your FAU account will appear inside the app.
Step 4: Approve Your First Sign-In
Microsoft will send a test notification:
- Tap Approve on your phone
- You may also be asked to enter a matching number displayed on your computer
After approval, your first MFA method is officially set up.
What Happens After Setup?
You will now use Microsoft Authenticator for:
- Sign-in approvals
- Verifying your identity on new devices
You can now add additional methods to prevent lockouts — see the next section.
2. Adding Additional Authentication Methods
Adding at least one backup method ensures you don’t get locked out if your phone is replaced, lost, or resets unexpectedly.
How to Add a Second MFA Method
- Go to https://account.microsoft.com and sign in.
- Select Security Info.
- Click Add sign-in method.
- Choose:
- Microsoft Authenticator on another device, or
- Phone (SMS) --> Phone calls are not supported at this time.
- Follow the on-screen steps.
You can remove methods anytime by selecting the “X” next to them.
3. Before You Get a New Phone
If you’re switching devices soon:
- Add Authenticator to a second device, or
- Add an SMS phone number
This makes moving to a new phone much easier and prevents being locked out.
4. Setting Up Authenticator on a New Phone
If you still have a MFA method available (SMS or another device):
- Go to https://account.microsoft.com.
- Open Security Info → Add sign‑in method → Microsoft Authenticator.
- Install Microsoft Authenticator on the new phone.
- Scan the QR code to register the new device.
5. Recovering Access Using a Temporary Access Pass (TAP)
If you cannot approve MFA and need to reset MFA, use a Temporary Access Pass (TAP) to sign-in and setup a new device using the following steps:
- Go to https://tap.iam.fau.edu and click the Microsoft Entra MFA Recovery tile.
- Enter your FAU credentials, check the confirmation box, and click Continue.
- If you have recovery options configured, you will receive a TAP code via email and/or SMS (delivery depends on the recovery methods you previously set).
- Click Register Your Device.
- Enter the TAP code you received and select Sign in.
- Important: After you’re signed in, you will land on the Manage your MFA devices page. Click Add sign‑in method and add a new device.
If you do not receive a TAP, contact the Help Desk.
Need Further Help?
Contact the OIT Help Desk:
- Submit a ticket at helpdesk.fau.edu
- Phone: (561)297-3999