Jim's Group MFA Guide
What is Multi-Factor Authentication?
Multi-Factor Authentication (otherwise known as MFA, 2FA or ‘two-step verification’) is a security feature included with Office 365 that protects your Office 365 account. MFA effectively makes it far more difficult for hackers to access your account, thus providing a further layer of protection for your data. MFA differs from using only a traditional username and password in that it also requires confirmation of the device that you are accessing your account from.
The two methods that are commonly used to prove your identity are your username and password along with a unique item that you have (e.g mobile phone). When logging in with MFA, you must supply your username/password AND additionally prove that you are in possession of a trusted device (i.e. phone.)
Due to the ongoing threat of internet-based data breaches, it is a requirement at Jim’s Group that MFA is enabled when accessing Office 365 enabled applications. This means that you will be required to set up MFA if you are accessing Office 365 Applications such as Outlook (Webmail).
Set Up Multi-Factor Authentication
It is always recommended that a Mobile Phone or Android/Apple tablet device is used as your primary method of Multi Factor authentication.
Set up Multi Factor Authentication on a mobile device
To set up Multi Factor Authentication for your Office 365 account:
Please install the Microsoft Authenticator app from your supported AppStore on your mobile phone or mobile device. Below are direct links or QR Codes for the various supported platforms:
For Android
Android: https://go.microsoft.com/fwlink/p/?LinkId=722778
For iOS / iPhone
iOS: https://go.microsoft.com/fwlink/p/?LinkId=722779
Open your web browser on your workstation/laptop/surface and go to https://aka.ms/MFASetup. Click ‘Sign In’
Enter your Jim’s Group email address and click ‘Next’
Please enter your assigned login password and click ‘Sign In’:
You will be redirected to the following page. Click Next:
On this page it will inform you to download the Microsoft Authenticator. This should have already been completed in step 1. Click Next:
Will get to the following screen that will ask to Setup your Account.
Open the Microsoft Authenticator app on your phone.
Tap + icon in the top right of the app > Will take you to a screen with a few options.
10. Select Work or school account. Note: On first run, you may be asked if you would like to add an account. Please skip this. It is important that you choose ‘Work or school account’ if presented with the option and that you do not select any other account type.
11. Upon clicking Work or school account, it should give you the option to Scan QR Code. You phone may ask to allow the camera while using the app. If the camera doesn’t come up, you may need to go into your phone’s settings (normally a Gear Icon) and enable access for the camera for the Microsoft Authenticator app.
12. Back on the computer screen, select the Next option to bring up the QR Code to Scan.
13. Use your phone to scan the QR square that is displayed on your computer screen.
14. Once this process is complete your account will be added automatically to the app and will display a six-digit code.
15. For verification the computer will display a two-digit code. This code needs to be entered in on the Phone to approve the connection.
16. Once the Authentication app has been added, a secondary form of Authentication also needs to be.
17. Change and enter the relevant fields for your number and select whether to receive a code via text or call. Select Next to receive that code.
18. Enter the code received from Microsoft and select Next.
19. With these steps completed your account should fully have 2FA enabled with two different methods of verification.
With 2FA now setup, your account is more secure. Accessing or signing into the account on http://www.outlook.com, or adding to your phone should prompt for verification on new devices, or if it hasn’t been verified for a while.
Changing/Modifying Multi Factor Authentication on a mobile device
If you need to change your 2FA details or modify access, you just need to sign into https://aka.ms/MFASetup again.
Once signed into that account, on the left you should see a security info tab. When under that option you will be able to add alternative sign-in methods, or change the ones currently being used.
If you have any issues setting up MFA please contact the Jim’s Group IT Support on 1300 130 490.