Multifactor authentication (MFA) helps prevent unauthorised access to university IT systems, including Microsoft 365, the VPN, Virtual Desktop and Remote Desktop. It helps keep you safe online and also offers some security for the university network. Below are some upcoming changes and advice that you need to be aware of.

Microsoft introduces number matching

If you currently use the Microsoft Authenticator app, from Monday 27 February, you will begin to see a number on screen when entering your username into a system that uses MFA. Simply enter that number into the Microsoft Authenticator app to log in. If you have configured your device to opt-in to phone sign-in (see below) you’ll no longer need to enter your password.

This will remove the risk of accidental approval should your account be targeted by criminals.

Enabling phone sign-in

This allows you to authenticate MFA requests using your smartphone – no password or username is required. Follow the steps below to start using phone sign-in:

1. Open the Microsoft Authenticator app on your phone
2. Click on your email address
3. Select ‘Set up phone sign-in'
4. Follow the instructions to finish registering your account for phone sign-in

If you use multiple phones, you’ll need to set this up on each.

Once you have set up phone sign-in, the next time you log into a system that requires MFA, you’ll be prompted to enter your password as usual. You’ll then see an option saying, ‘Use app instead’. You must click this to start using phone sign-in.

If you use Microsoft Authenticator and do not enable phone sign-in, you’ll need to enter your email address, password and the number matching element into the app.

If you have any questions, please contact the IT Service Desk.