Two-factor authentication

This guide shows you the method that the IT department recommends to set up two-factor authentication.

Guide

This guide shows you how to register the two-factor method "Authenticator-app" for using two-factor authentication.

You need an app on your phone called "Microsoft Authenticator". If you do not have this app installed, you can find it in the App Store (for iOS) or Google Play (for Android).

(If the images are a bit small, you can click on them to open a larger version.)

  1. Open a web browser and go to https://aka.ms/SetupSecurityInfo
  2. Log in using your USN username and password
  3. You will then see a page that looks like this. Click "Add a method"
    MFA security info
     
  4. The default method is "Authenticator-app". Click "Add"
    MFA - Add a method
     
  5. If you don't have the Microsoft Authenticator app on your phone, install it and then click "Next".
    MFA - info about the Microsoft Authenticator app
     
  6. On your phone, allow notifications from the Microsoft Authenticator app if asked. Add a new account in the app and select the account type "Work or school account". The phone will then open up a QR scanner. Click "Next" on the web page.
    MFA - Add an account in the app
     
  7. A QR code will now be generated and shown on the web page. Hold your phone up in front of the screen so that the QR code comes into view in the QR code area on the phone. When the phone has scanned the code it will automatically be added in the app. Then click "Next".
    MFA - scan the QR code
     
  8. Now, a test needs to be performed to ensure that authentication via the app is working. This image is shown on the screen, and a notification should appear on your phone. Click "Approve" on the notification on the phone.
    MFA - scan the QR code
     
  9. When you have approved the notification, the web page should immediately change to this (click Next):
    MFA - Approval test in the app
     
  10. You are now back in the "security info" page, and should see that a to-factor method "Microsoft Authenticator" has been added.
    MFA security info

P.S. If this is the first time you have registered a two-factor method, it can take up to 15 minutes before this change is activated. After it is activated you will have to use the two-factor method when logging on to an Office 365 service or pc.usn.no.

Video guide

Skjermkutt av MFA guide på YouTube

 

What is two-factor authentication?

Two-factor authentication is an extra layer of login security. It means that you log in using an extra factor; meaning that you log in with something you know (username and password) and also something you have (your mobile phone).

Adding other two-factor methods

You can configure your two-factor methods on https://mysignins.microsoft.com/security-info. For example, you can add your phone number and thus use SMS as your two-factor method.

 

Reset two-factor authentication

Lost access to the device with your two-factor methods? You can reset two-factor authentication on mfa.usn.no by signing in with ID-porten. More information