Change to Microsoft Authenticator mobile application
On February 27, a change will be made to the Microsoft Authenticator mobile application. The Microsoft Authenticator mobile application can be used to verify your identity when accessing Minnesota State’s Microsoft Office 365. We want to ensure you are aware of a change to the Microsoft Authenticator verification process.
What is changing?
Effective February 27, several online services, including Microsoft Office 365, will have enhanced security through the addition of “number matching” to the multi-factor authentication process for those using the Microsoft Authenticator application. This change will not impact those using a different authentication method to verify their identity, such as entering a code received by text message or phone call.
Current Microsoft Authenticator verification process (before February 27): When logging into Minnesota State’s Microsoft Office 365 or certain other online services, you may be prompted to verify your identity. If this occurs, and you opt to verify your identity through the Microsoft Authenticator application, you receive an Authenticator application notification on your cellular device to approve the request. Once you approve the login request, you are logged into your account.
Future Microsoft Authenticator verification process (as of February 27): When logging into Minnesota State’s Microsoft Office 365 or certain other online services, you may be prompted to verify your identity. If this occurs, and you opt to verify your identity through the Microsoft Authenticator application, a number will display on the online service’s login page and you will receive an Authenticator application notification on your cellular device. You will be required to enter the number shown on the login page into the Authenticator application to approve the login request. Once you enter the matching number and approve the request, you will be logged into your account. The screenshots below are an example of what this new process will look like on the Office 365 login screen and the Authentication application notification screen.
What else should you know about this change?
- Ensure you are using the latest version of the Authenticator application. Old versions of the Authenticator application do not support number matching, so the authentication would fail on an outdated application version.
- Number matching is not supported on Apple Watches at this time. It is recommended that Apple Watch users remove the Authenticator application from their watch because users will need to use their phone to approve sign in requests once number matching is enabled.
Why is this being done?
Number matching is being implemented to further enhance online security. Number matching helps ensure the person requesting access to an account is the same person approving the sign in on a device. Without number matching, a bad actor who has obtained someone’s login credentials could attempt to log in, sending a prompt to the victim’s device to approve the sign in request. If the victim inadvertently approves the request, the bad actor can gain access to the victim’s account.
Where can you get additional information and support?
You can learn more about this change on https://www.mnstate.edu/information-technology/services/office365. Please contact the MSUM IT Helpdesk if you have any questions about this change, or for any other technology assistance you need. We are here to help!
