Important Note: When setting up the Microsoft Authenticator app you must turn on "Notifications". Also there is a confirmation notification at the end of the set up process. If this is not approved (by pressing "Done") when the app is being set up for the first time, the app will become non-usable. This will result in you being unable to access your account. If this happens, you will need to remove your authenticator app from your phone and go through the process again.
1. Download the Microsoft Authenticator app from your smartphone's app store. If prompted, allow notifications.
Scan the QR codes below with your smart phone. They will take to the correct application to install for the model of phone you are using. The icon below is the one you are looking for. There are copy-cat version. Use the QR codes below to be certain you are getting the correct version.
Android Requirements: Android Version 6.0 or above.
Microsoft Authenticator on the Google Play Store
iPhone Requirements: iOS 15 or later. Compatible with iPhone, iPad, and iPod touch. watchOS is no longer supported.
Microsoft Authenticator on the Apple App Store
2. On a separate device, visit Microsoft’s MFA setup page, preferably: https://aka.ms/mfasetup
3. Sign in with your CWU account (e.g. username@cwu.edu). You may also be asked to sign in to the CWU sign in page.
Important Note: This message will only show up if there are no current MFA methods listed on this account. If the website asks to authenticate your account after signing in, please call the CWU Service Desk at 509-963-2001. We are open from 7am to 5pm, Monday - Friday. We are closed on federal holidays.
4. Once signed in, you will be prompted to provide more information. Click Next.
5. If you've already downloaded the authenticator app, click the Next button on your computer. If you have not installed the app please move on to step 6 with your smart phone before continuing on your computer.
Important Note: The authenticator app will not work if notifications are not enabled. If you accidentally press the "Don't allow" button, navigate to the authenticator app within your phone's settings, and enable notifications there.
6. Open the Authenticator app. There will be two set up question you need to answer. If prompted, allow notifications.
DO NOT sign-in with Microsoft. Select "Add Work or School Account" then, select "Scan QR code." You may need to allow the Microsoft Authenticator app to access your camera. If these options do not show up, press the white plus sign in the top right hand corner in the blue bar.
With your phones camera open and ready to scan a QR code, you can proceed on your computer by clicking "Next".
7. Hold your phone up to your computer screen and scan the QR code displayed on your computer. The account will be added to your Microsoft Authenticator app. Select Next on the computer. This will do a test to make sure the MFA connection is working properly.
8. You should see a message on your computer saying Let’s try it out and you should get an approval notification on your smartphone. Enter the number that appears on your computer screen into the notification on your phone and on your phone click "Yes".
Your computer will display a message saying Notification approved. From here, you are free to press done, and review your sign in methods.
9. After configuring the Authenticator app, you can add additional authentication methods. These will help to keep you from being locked out of your CWU account.
You can configure a phone number that can also be used for MFA, in case the Authenticator app stops working. Once again, on Microsoft’s MFA setup page click Add sign-in method, select Phone, then click Add.
- Enter a phone number that can be called by Microsoft for MFA. This can also verify your identity should you ever forget your password. This can be a cell phone, home phone, or office phone. Click Next after you enter a phone number.
- Microsoft will now call you to verify the phone number. Answer the call, open the number pad inside the call, and press the # key on your phone. You should see a confirmation on your computer screen.
You can also add a personal email address that will assist you with self-service password resets. Please remember the CWU Service Desk has limited hours to assist you!
- To add an email address, click the + symbol beside Add Method, select Email, and click Add. Enter a personal email address, or one other than your CWU email.
- You can also add security questions and answers. Click the + symbol beside Add Method, select Security Questions, and set your questions and answers. You will have to add all five options before it will add them.
10. You have now successfully configured MFA to work with the Microsoft Authenticator app and a smart phone, and you have configured self-service password reset. The next time you login to an MFA protected system, you will be sent an MFA request immediately after entering your password and clicking the Sign In button. MFA will prompt you to authenticate once every 8 days for most CWU systems on each device you sign in with. You may be prompted more frequently if you use VPN, if you use more than one computer, or if you frequently clear your browser cache. Additionally, any open login or unsaved sessions you have will be logged out and unsaved at 7am the following morning. Make sure your work is saved so you do not lose anything.
If you currently use an Apple iPhone to read your work email with Apple Mail:
Before setting up MFA for the first time, please be sure to remove your mailbox and re-add it after setting up MFA. While in Settings, navigate to Passwords & Accounts or Mail settings, select your CWU email account and select "Delete Account" at the bottom to remove the account. (This will not delete your data it will just remove the account from your phone.)
After setting up your MFA, linked below are instructions on how to add your CWU email account back.
Adding Your CWU Email Account to iPhone