Microsoft 365: Registering for MFA using an iPhone (Apple iOS)

Introduction

This article describes the steps to register your account for Microsoft 365 Multi-Factor Authentication (MFA) using an iPhone. These instructions expect you have read Microsoft 365: Setting up Multi-Factor Authentication and Password Reset

Note: you will register two (2) authentication methods that can be used as part of MFA.

For instructions using an Android mobile device read Microsoft 365: Registering for MFA using an Android Phone

Before You Begin...

You must first install the Microsoft Authenticator app on your mobile phone.

1. On your iOS device, open the Apple App Store.
2. In the App Store, search for Microsoft Authenticator.
3. Tap Get to install the App

IMPORTANT: Check that your iPhone is running  iOS version 12 or higher. Versions of iOS 11 or lower do not correctly support Microsoft 365 MFA

Login to your RIC Microsoft 365

To begin registering your RIC account for Microsoft 365 MFA follow these instructions:

1. From your desktop or laptop,
   go to https://mysignins.microsoft.com/
2. Log in with your Microsoft 365 (email) account
3. Once logged in, a dialog window will prompts you with More information required to keep your account secure (see screenshot)
4. Choose an option:
   1. Click Skip for now to skip the MFA registration (1)
   2. Click Next to begin the MFA registration (2)

IMPORTANT: You can skip the MFA registration for no more than 14 days. After 14 days, you are required to register your account for MFA.

Authentication Method 1: Authenticator App

The Authenticator default verification uses  "Push Notification" (see screenshot top). After you complete the MFA registration, you have option changing it to "Verification Code" (see screenshot bottom).
Instructions to change the option can be found Microsoft 365: Change the Authenticator Verification method

IMPORTANT: These set of instructions must be completed in a timely manner or the session will expire, forcing you to restart the registration.

1. You will be prompted to install the Microsoft Authenticator app onto your mobile device.
   NOTE: Please see Before You Begin… to install the app ahead of time to simplify the registration process.
2. Once the app is installed, click Next in the browser window.
3. Open the Microsoft Authenticator app.
4. Upon initial start, the app prompts you with "Authenticator Would Like to Send You Notifications. Tap Allow.
5. Skip each option until it prompts you to add a work account. Tap Add work account.
6. You are now prompted with "Authenticator Would Like to Access the Camera. Tap OK.
7. In the computer browser window, click Next.
8. Do in the following in order (see screenshot):
   1. Using your mobile phone’s camera, scan the QR code in the computer browser.
      NOTE: Once the QR code is within your camera’s frame, your Authenticator app will recognize the code.
      After QR code is recognized, click on the account to view its associated 6-digit code.
   2. On the computer, click Next. A notification will now be sent to your mobile phone to link your account with the app.
9. On your mobile phone, tap Approve.
10. Once you approved the notification, click Next in the computer browser.

Congratulations! You have set up the first authentication method for your account! Click Next in the computer browser to set up method 2.

NOTE: Do NOT stop here and complete Authentication Method 2. If you do not register a second authentication method you will not be able to reset your password with SSPR.

Authentication Method 2: Register Your Mobile Phone

The second method of authentication to secure your account is through your mobile phone number. This will connect your mobile number to your RIC Microsoft 365 account.

To verify that you have ownership of the mobile number, do the following in the browser window (see screenshot named "Method 2 of 2: Phone"):

1. Enter your mobile phone number (for example: 4011234567).
2. Choose either Text me a code or Call me
3. Click Next.

Option 1: Text me a code

A text message with a (random) 6-digit code is sent to your mobile number.

1. On your phone, check for a message with a 6-digit code with the text "Use this code for Microsoft verification".
2. In your browser window, enter the code into the "Enter code" field and click Next.
3. Your phone is now registered as a method of authentication! Click Next.

 
Option 2: Call me

A call is placed to your mobile number.

1. Answer the phone call on your mobile phone.
2. The recorded voice message will instruct you to press the pound (#) symbol on your phone's touchpad.
3. After pressing the pound sign, your mobile number is successfully registered. Click Next.

 
Congratulations! You have successfully completed both methods of authentication to secure your account.

To close the completed registration, click Done.

Back up your Microsoft Authenticator App

Eventually you will replace, break, or loose your iPhone. Unless you did backup the app, you will be locked out of your Microsoft 365 account.

Follow the instructions in this Microsoft article on how to Back up and recover account credentials using the Microsoft Authenticator app.