Important: If you use Microsoft or Azure for any other logins, such as for another University or workplace, make sure you sign out of those accounts first!  Otherwise, you may receive an error message that your account is not associated with those tenants.

These initial steps MUST be done on a desktop or laptop computer.  It will not be possible to complete these steps using only a mobile device.

Open a browser on your desktop or laptop computer and go to https://aka.ms/mfasetup

Login with your CNU email address and password.

You may be prompted to stay signed in.  If you're using your personal or office computer, you can click Yes.  If you're using a shared, lab, or public computer you should click No.

On your first login, you will be prompted to setup additional information.  Click Next to continue.

You will be prompted to setup an additional security verification method (Multi-factor Authentication or MFA) for your account.   You must set up at least one of the following methods for your account.  Click the links below to continue the instructions for your preferred method.

• Push notifications through the Microsoft Authenticator app on your mobile device ← This is the recommended method
• One-Time Passwords (OTP) through any compatible app on your mobile device
• One-Time Passwords through text messaging (SMS) on your mobile device
• Phone calls to your mobile device
• Phone calls to your office phone
• Physical Security Keys (YubiKeys)

These instructions continue directly from the initial setup above and should be started from a desktop or laptop computer.

Select the first drop-down menu and change it from "Authentication Phone" to "Mobile App".  Then, select "Receive notifications for verification" and click the "Set up" button.

You will be presented with a QR code that can be scanned using the Microsoft Authenticator app on your mobile device.  Leave this code on your computer screen for now and switch to your mobile device.

Install the Microsoft Authenticator app on your device.  You can scan the QR codes below to quickly find the app.

Launch the Microsoft Authenticator App, and accept their privacy agreement by tapping the "I agree" button.

Tap the option to "Scan a QR code".

You may be prompted to allow the Microsoft Authenticator app access to your mobile device's camera.  You will need to accept/approve this request in order to take a picture of the QR code.

Use the app to take a picture of the QR code that is on your computer screen.

Once the code has been scanned successfully, your account will appear on the home screen of the Microsoft Authenticator app.

Back on your desktop or laptop computer, click the Next button.

You will see messages that your activation status is being checked.  Once the check completes, click on the Next button.

A push notification will be sent to your mobile device for approval.  Approve the sign-in when you receive the prompt.

Finally, you will be prompted to enter your phone number, in case you lose access to the mobile app.  Enter in your mobile phone number, then click Next to finish!

Your account is now protected by multi-factor authentication, using your mobile device and push notifications!

These instructions continue directly from the initial setup above and should be started from a desktop or laptop computer.

Select the first drop-down menu and change it from "Authentication Phone" to "Mobile App".  Then, select "Use verification code" and click the "Set up" button.

In the first screen that pops up, click on the link that reads, "Configure app without notifications".  This link will change the QR code.  Scan the new QR code with your preferred Authenticator app and click the Next button.

Back on your desktop or laptop computer, click the Next button.

Enter the 6-digit code displayed in your app into the webpage on your computer and click the Verify button.

Finally, you will be prompted to enter your phone number, in case you lose access to the mobile app.   Enter in your mobile phone number, then click Next to finish!

Your account is now protected by multi-factor authentication, using your mobile device and one-time passwords!

These instructions continue directly from the initial setup above and should be started from a desktop or laptop computer.

Make sure that the first drop-down menu is set to "Authentication Phone", then select the "United States (+1)" as the Country code and enter your mobile phone number.  Then, make sure the method is set to "Send me a code by text message" and click the Next button.

Check your mobile device for a text message from Microsoft with your one-time password.  Enter the 6 digit code you receive into the webpage on your computer.

You will see messages that your verification settings is being saved.  Once completed, click on the Done button to finish!

Your account is now protected by multi-factor authentication, using your mobile device and one-time passwords!

These instructions continue directly from the initial setup above and should be started from a desktop or laptop computer.

Make sure that the first drop-down menu is set to "Authentication phone", then select the "United States (+1)" as the Country code and enter your mobile phone number.  Then, make sure the method is set to "Call me" and click the Next button.

Check your mobile device for an automated phone call from Microsoft.  You will be prompted to press the pound (#) key to approve the login.  You will not be prompted for or provided with any codes during this call.  Once completed, click on the Done button to finish!

Your account is now protected by multi-factor authentication, using your mobile device and phone calls!

These instructions continue directly from the initial setup above and should be started from a desktop or laptop computer.

Make sure that the first drop-down menu is set to "Office phone", then select the "United States (+1)" as the Country code and enter your office phone number.  Then click the Next button.

Check your office phone for an automated phone call from Microsoft.  You will be prompted to press the pound (#) key to approve the login.  You will not be prompted for or provided with any codes during this call.  Once completed, click on the Done button to finish!

Your account is now protected by multi-factor authentication, using your office phone and phone calls!

These instructions continue directly from the initial setup above and should be started from a desktop or laptop computer.

Select the first drop-down menu and change it to "Security Key."  Click Next.

You'll be asked what type of security key you'd like to set up.  For setting up a key with a computer, choose USB.

You'll then see a box that tells you that you'll need to insert a security key. Click Next, but DO NOT insert your security key yet.

Your computer will then walk you through the process to associate your security key with your University account.  If this is the first time you've used the security key, you'll have a more detailed setup process that's described in another article. DO NOT insert your security key until prompted.

 When prompted, insert your security key into your computer.

If this is your first time using this security key, you'll be prompted to set a PIN.  This PIN is stored on your key and will be used any time that you use it.  You must remember this PIN; ITS cannot recover your PIN.

Otherwise, you'll be prompted to enter your PIN.

After you do, you'll be asked to give it a name. You'll then be able to use your YubiKey to sign in.

Your account is now protected by multi-factor authentication using a hardware security key.