What is it?
Microsoft Authenticator is required as Multi-Factor Authentication for MTech accounts. This article will go through the process of setting up Microsoft Authenticator on your mobile device.
IMPORTANT:
If you are already being prompted for a code, then it has already been set up. If you can't find the code it is prompting you for, the IT Help Desk will need to reset your authentication method. This is most easily done if you can bring a photo ID to the IT Help Desk office at MG 110, M-F, 8-4pm. We can also set up a Teams call to verify your ID if you can't come in person.
Please submit this ticket if you need your MFA reset:
Reset/Remove/Add MFA Authentication Contact Info
Who Can Use It?
Required for all Montana Tech accounts.
Contents
Set Up Microsoft Authenticator on Your Phone
These are the steps for a first-time setup of Microsoft Authenticator using your cell phone and a computer.
Step 1:
Download the Microsoft Authenticator app onto your phone.
Step 2:
Open a browser and navigate to the MTech homepage and click on either "Email" or "MyMTech" on the top-right. You'll be prompted to enter your MTech email and your password.
NOTE:
Entering just your username will return an error. Please enter your full MTech email.
Step 3:
After entering your password, you'll be greeted with a page that says "Let's keep your account secure."
Click "Next" until you see a QR Code. Open Microsoft Authenticator and scan the QR code, then click "Next" in the browser.
Step 4:
On the computer, you should receive a page with with a two-digit code and then you should receive a notification on your phone. If not, make sure that Microsoft Authenticator has Notifications turned "On."
On your phone, enter the two-digit code in Microsoft Authenticator and tap "Yes, it's me." In the browser, you should get a page that confirms setup was successful.
If you had MFA previously set up to send a text or phone call, then you'll be prompted to Set Up a Passkey.
Set Up a Passkey on Your Phone
Microsoft is phasing out receiving a call or SMS text as authentication methods. If you have one of these methods set up, then you may have been prompted to set up a Passkey as an authentication method instead.
What is a Passkey?
A Passkey is a code that is stored on a device that is provided during authentication in place of a password. Where a password is something that you know, a Passkey is something that you have.
Step 1:
After installing Microsoft Authenticator, open the app, then tap on your account. Under "Other ways to sign in," you'll see "Create a passkey >".
Tap on the link and tap "Sign In".
Step 2:
When prompted to authenticate choose Microsoft Authenticator and sign in by providing the two digit code.
Step 3:
The Authenticator app will need permission to use Passkeys. Enable this in your Settings. Once the app has permission, tap "Create Passkey", then click "Done."
To sign-in using your Passkey, select Face, fingerprint, or PIN.
Set Up a Hardware Token
What is a Hardware Token?
A Hardware Token is a separate device that generates a Time-Based One Time Password (TOTP) which is then entered when authenticating.
Step 1:
After installing the Microsoft Authenticator app, tap on your MTech account in the app, then click on "Update security info." This will open a new tab in your default browser and you will be prompted to authenticate.
Step 2:
After authenticating, you will land on your MySignIns page. Click on "Add sign-in method" and select "Hardware token". Click "Next" and then "Enter serial number" for your hardware token.
Step 3:
Press the power button on the hardware token to generate a code, then enter it on the screen to add the hardware token as an authentication device.
Add an Authentication Method
Step 1:
Either log in to your email for the first time without the authentication method set up, or go to "Security Info" in your account settings and press "Add a new sign-in method".
To locate "Security Info", navigate to the circle in the top right-hand corner of your Montana Tech email inbox, and click "View account".
Step 2:
On the left-hand side of the screen, select "Security Info". Select "Add sign-in method" and choose "Authenticator App".
Note: If you are prompted to enter or receive a code to proceed, you may have registered for the MFA through a different authentication app or email or phone number and if you are unable to retrieve it, you may need a Multi-Factor Authentication (MFA) reset. Please contact the IT Help Desk at 406-496-4244 or click this link to submit a ticket: Reset/Remove/Add MFA Authentication Contact Info.
Step 3:
Select from the list of authentication methods and follow the instructions. If you have any issues, please contact the IT Help Desk (406) 496-4244, or submit a Reset/Remove/Add MFA Authentication Contact Info ticket.