Microsoft 365: Registering for MFA using an Android Phone

Introduction

This article describes the steps to register your account for Microsoft 365 Multi-Factor Authentication (MFA) using an Android phone.  These instructions expect you have read  Microsoft 365: Setting up Multi-Factor Authentication and Password Reset

Note: you will register two (2) authentication methods that can be used as part of MFA.

For instructions using an Apple iOS mobile device read Microsoft 365: Registering for MFA using an iPhone (Apple iOS)

Before You Begin...

You must first install the Microsoft Authenticator app on your mobile phone.

1. On your Android device, open the Google Play Store.
2. In the Play Store, tap the Search bar
3. Type Microsoft Authenticator into the search bar
4. Tap Install to install the App

Login to your RIC Microsoft 365

To begin registering your RIC account for Microsoft 365 MFA follow these instructions:

1. From your desktop or laptop, go to https://mysignins.microsoft.com/
2. Log in with your Microsoft 365 (email) account
3. Once logged in, a dialog window will prompts you with More information required to keep your account secure
4. Choose an option:
   1. Click Skip for now to skip the MFA registration
   2. Click Next to begin the MFA registration

IMPORTANT: You can skip the MFA registration for no more than 14 days. After 14 days, you are required to register your account for MFA.

Authentication Method 1: Authenticator App

The Authenticator default verification uses  "Push Notification" (see screenshot top). After you complete the MFA registration, you have option changing it to "Verification Code" (see screenshot bottom).
Instructions to change the option can be found Office 365: Change the Authenticator Verification method

IMPORTANT: These set of instructions must be completed in a timely manner or the session will expire, forcing you to restart the registration.

1. You will be prompted to install the Microsoft Authenticator app onto your mobile device.
   NOTE: Please see Before You Begin… to install the app ahead of time to simplify the registration process.
2. Once the app is installed, click Next in the browser window.
3. Open the Microsoft Authenticator app.
4. Upon initial start, the app prompts you to send notifications to your phone. Tap Allow.
5. Skip each option until it prompts you to add a work account. Tap Add work account.
6. You are prompted to allow the Authenticator app to use the camera. Tap OK.
7. In the computer browser window, click Next.
8. Do in the following in order:
   1. Using your mobile phone’s camera, scan the QR code in the computer browser.
      NOTE: Once the QR code is within your camera’s frame, your Authenticator app will recognize the code.
      After QR code is recognized, click on the account to view its associated 6-digit code.
   2. On the computer, click Next. A notification will now be sent to your mobile phone to link your account with the app.
9. On your mobile phone, tap Approve.
10. Once you approved the notification, click Next in the computer browser.

Congratulations! You have set up the first authentication method for your account! Click Next in the computer browser to set up method 2.

NOTE: Do NOT stop here and complete Authentication Method 2. If you do not register a second authentication method you will not be able to reset your password with SSPR.

Authentication Method 2: Register Your Mobile Phone

The second method of authentication to secure your account is through your mobile phone number. This will connect your mobile number to your RIC Microsoft 365 account.

To verify that you have ownership of the mobile number, do the following in the browser window (named "Method 2 of 2: Phone"):

1. Enter your mobile phone number (for example: 4011234567).
2. Choose either Text me a code or Call me
3. Click Next.

Option 1: Text me a code

A text message with a (random) 6-digit code is sent to your mobile number.

1. On your phone, check for a message with a 6-digit code with the text "Use this code for Microsoft verification".
2. In your browser window, enter the code into the "Enter code" field and click Next.
3. Your phone is now registered as a method of authentication! Click Next.

 
Option 2: Call me

A call is placed to your mobile number.

1. Answer the phone call on your mobile phone.
2. The recorded voice message will instruct you to press the pound (#) symbol on your phone's touchpad.
3. After pressing the pound sign, your mobile number is successfully registered. Click Next.

 
Congratulations! You have successfully completed both methods of authentication to secure your account.

To close the completed registration, click Done.

Back up your Microsoft Authenticator App

Eventually you will replace, break, or loose your Android phone. Unless you did backup the app, you will be locked out of your Microsoft 365 account.

Follow the instructions in this Microsoft article on how to Back up and recover account credentials using the Microsoft Authenticator app.