MFA - Initial Multi-Factor Authentication Setup

If you currently use an Apple iPhone to read your work email with Apple Mail:

Before setting up MFA for the first time, please be sure to remove your mailbox and re-add after setting up MFA. While in Settings- Navigate to Passwords & Accounts or Mail settings, select your CWU email account and select "Delete Account" at the bottom to remove the account.

After setting up your MFA, linked below are instructions on how to add your CWU email account back. 
Adding Your CWU Email Account to iPhone 
  1. The first step in configuring multi-factor authentication (MFA) is to visit Microsoft’s MFA setup page here:

  1. Once you have logged in, you will see the Security info page. This is where you enroll in MFA and self-service password reset.


Information Services recommends configuring the Authenticator app and phone number for MFA, and using the Microsoft Authenticator as your default sign-in option. This will allow you to use the Microsoft Authenticator app on your smartphone to login and have voice phone call as a secondary option. 

  1. Click the + symbol beside Add Method, select Authenticator app, and click Add.

  1. After you click Add, you will be prompted to install the Microsoft Authenticator app on your mobile device. Go to the app store on your smartphone and download the Microsoft Authenticator app.
  2. Once the app is installed on your smartphone, click the Next button on your computer.


Android Requirements- Android Version 6.0 or above. 
iPhone Requirements- Requires iOS 11.0 and watchOS 4.0 or later. Compatible with iPhone, iPad, and iPod touch.

  1. The next screen is instructing you to start setting up your account in the Microsoft authenticator app. Before you click the Next button, make sure you have finished downloading and installing the Microsoft Authenticator app on your phone.
    • If you have never used the Microsoft Authenticator app, you will see options to Sign in with Microsoft or Scan a QR code.  Click the Scan a QR code button. The app may ask for permission to use your camera, tap the OK or Allow button.
  2. Click Next, then click Next again when you see the Set up your account window on your computer.


  1. Hold your phone up to your computer screen and allow the camera to scan the QR code being displayed, and click the Next button.


  1. Your CWU account should now appear in the Microsoft Authenticator app, and Microsoft will send a test notification to your phone. You should see a message on your computer saying Let’s try it out and you should get an approval notification on your smartphone. Tap the Approve button on your phone.


  1. Your computer will display a message saying Notification approved.  Click the Next button.

  1. You should now configure a phone number to also be used for MFA and self-service password resets. Once again click the + symbol beside Add Method, select Phone, then click Add.

  1. Enter a phone number that can be called by Microsoft for MFA and to verify your identity should you ever forget your password. This can be a cell phone, home phone, or office phone. Click Next after you enter a phone number.
    1. Microsoft will now call you to verify the phone number. Answer the call and press the # key on your phone.

  1. You can also configure an email address and security questions for self-service password reset. We recommend adding one or both of these methods to make password resets easier in the future.
    1. To add an email address, click the + symbol beside Add Method, select Email, and click Add. Enter a personal email address, or one other than your CWU email.
    2. To add security questions, click the + symbol beside Add Method, select Security Questions, and set your questions and answers.

  1. You have now successfully configured MFA to work with the Microsoft Authenticator app and a voice phone, and you have configured self-service password reset. Our systems will detect that you have enrolled and will enable MFA for you within 30-45 minutes after completing this setup process. The next time you login to an MFA protected system, you will be sent an MFA request immediately after entering your password and clicking the Sign In button. You should only be prompted with an MFA request once every 8 days per system (each computer or web browser you use to login will have its own 8 day timer).


Was this helpful?
64% helpful - 69 reviews


Article ID: 123476
Wed 12/30/20 10:55 AM
Thu 4/8/21 4:30 PM