Managing Your MFA Sign-In Methods in Microsoft Authenticator

Overview

Microsoft Authenticator helps protect your DSU account by requiring multifactor authentication (MFA) when signing in.

You can use Microsoft's Security info page to add Microsoft Authenticator to a new phone, add another sign-in method allowed by DSU, or remove an old sign-in method.

Applies To

Users: DSU students, faculty, and staff

Devices: iPhone and Android phones

Service / Application: Microsoft Authenticator and Microsoft Security info

Before You Begin

To manage your MFA sign-in methods, you will need:

  • Your DSU account credentials
  • A computer with internet access
  • Your new iPhone or Android phone, if replacing a device
  • Access to an existing MFA sign-in method

Replacing your phone? Keep your old phone available until Microsoft Authenticator has been added to your new phone and successfully tested. Do not delete your old Authenticator entry before verifying that the new one works.

Instructions

Add Microsoft Authenticator to a New Phone

  1. On a computer, open the Microsoft Security info page.
  2. Sign in using your DSU account.
  3. Select Add sign-in method.
  4. Select Microsoft Authenticator.

    Note: Do not select Passkey in Microsoft Authenticator when setting up normal push MFA.

    Microsoft Security info Add a sign-in method dialog showing Microsoft Authenticator as an available method.

    Select Microsoft Authenticator from the available sign-in methods.

  5. If needed, install Microsoft Authenticator on your new phone from the Apple App Store or Google Play Store.
  6. On your computer, select Next.
    Microsoft Authenticator setup screen showing the app installation instructions and Next button.

    Install Microsoft Authenticator on your new phone.

  7. Open Microsoft Authenticator on your new phone.
  8. Allow notifications if prompted.
  9. On your computer, select Next.
  10. When the QR code appears on your computer, use the blue QR scanner button in the bottom-right corner of Microsoft Authenticator on your phone.
  11. Scan the QR code displayed on your computer.
    Microsoft Authenticator setup screen displaying the QR code used to connect the app to a Microsoft account.

    Scan the QR code displayed on your computer using Microsoft Authenticator.

  12. On your computer, select Next.
  13. Complete any verification prompt to finish setup.
  14. Return to the Security info page and confirm that Microsoft Authenticator appears as Push multi-factor authentication (MFA).
    Microsoft Security info page showing Microsoft Authenticator configured for push multifactor authentication.

    Confirm that Microsoft Authenticator appears under your sign-in methods.

  15. Sign out of your DSU account.
  16. Sign in again to test Microsoft Authenticator on your new phone.

Important: Only remove the old phone's Microsoft Authenticator entry after you have successfully tested the new phone.

Add or Remove Another Sign-In Method

You can manage additional MFA methods from the Microsoft Security info page.

  1. Open the Microsoft Security info page.
  2. Sign in using your DSU account.
  3. To add a method, select Add sign-in method to view the methods currently allowed by DSU.
  4. To remove an old method, select Delete next to the method you no longer use.

Important: Always make sure you have at least one working sign-in method before deleting an old method.

Lost Your Old Phone?

If your old phone is lost or unavailable, your next steps depend on whether you can still complete MFA using another sign-in method.

If you can still sign in: Use the Microsoft Security info page to add Microsoft Authenticator to your replacement phone.

If you cannot complete MFA: Contact the DSU Support Desk for help restoring access to your account.

Still Need Help?

If you cannot add a new MFA method, complete verification, or access your Security info page, contact the DSU Support Desk.

If these instructions do not resolve the issue, contact the DSU Support Desk or submit a support request.