MFA INITIAL ENROLLMENT: Enrolling the Microsoft Authenticator App on Mobile Device

Use the following instructions to initially enroll in Microsoft Multi-Factor authentication using the Microsoft Authenticator App on a mobile device. NOTE: These instructions are for enrolling your FIRST/initial authentication method. If you are trying to enroll a secondary method, please follow the links at the bottom of this page.

  1. Go to accounts.psu.edu/mfa
  2. Scroll down and click the BLUE Enroll in MFA button
  3. If prompted, log in with your PSU Email address and password (NOTE: You may get the Duo prompt at this point, that is normal since you have not yet enrolled in MFA)
  4. Click the I am ready to enroll button
  5. Click Submit

YOU MUST NOW WAIT FOR 1 MINUTE...THIS IS REQUIRED FOR THE SYSTEM TO APPROPRIATELY PREPARE YOUR ACCOUNT FOR THE NEXT STEP.

  1. IGNORE the message on the screen, open a SECOND browser tab and go to the following URL: https://mysignins.microsoft.com/security-info
  2. Click Next, if you see a screen indicating you need to provide more information
  3. If prompted, log in with your PSU Email address and password
  4. On your mobile device, Download and open the Microsoft Authenticator App


    IMPORTANT     NOTES:
    Be sure you are downloading the app that has MICROSOFT in the name (see icon below). It may be the second option in the list.

    MSauthenticator.png

    It is important that you follow these instructions and do not click ahead in the app. It is VERY easy to miss one of these steps if you do not follow the steps closely.

  5. On your mobile device, click Accept (if prompted)
  6. On your mobile device, click Continue on the Help us improve Microsoft Authenticator screen. NOTE: It is optional to enable this feature.
  7. Click the Scan a QR code button
  8. Click OK to allow the app to access your camera
  9. Click OK, if prompted with a message regarding App lock
  10. On your computer screen and click Next
  11. Click Next again
  12. On your mobile device, scan the QR code
  13. Click Allow to receive notifications from the app
  14. On your computer screen. click Next and you will see a code
  15. On your mobile device, enter the code from the computer screen
  16. Click Yes
  17. On your computer screen, click Next
  18. Click Done

Once enrolled, you may want to disable the "App Lock" feature in the Microsoft Authenticator app. To do so:

  1. Open the Microsoft Authenticator App on your mobile device.
  2. On an iphone, touch the three white lines in the upper left corner and touch the settings option.
  3. On an Android device, touch the three dots in the upper right corner and touch the settings option.
  4. Tap the slider to turn off the App Lock feature.

ENROLLING A SECONDARY AUTHENTICATION METHOD

After you have enrolled an initial device, it is STRONGLY recommended that you enroll a secondary method. Here are links to instructions for enrolling secondary authentication methods.