Microsoft 365 Initial Sign-In and 2FA Setup with Microsoft Authenticator

Prerequisites

  • Company Email (Log in using a work or school account)
  • Temporary Password Provided by Manager/IT
  • Microsoft Authenticator App on Mobile
  • Access to Private Network Internet
  • (If Bring Your Own Device) Must Be Local Administrator

Logging In to Your Company Email

The first thing that needs to be done to get your device fully set up with your company is to log in to your company email. This will give you access to your granted apps along with the ability to use SSO (Single Sign On) when accessing said apps.

  1. Go to office.com and login as shown above
  2. Type your company email in the email field.
  3. Enter your temporary password.
  4. You will be prompted to change your password. Change it to something memorable but secure.

You will be prompted with a message saying that your company needs a little more information. This is where you will set up your 2-factor authentication.

Microsoft Authenticator App

Your Microsoft email has 2-factor authentication policies enabled to keep your company secure. You will need to download the mobile app to be in compliance with these policies. Below are guides on how to download the app.

Download by Using QR Code - Scan on your phone:

Manual Method:

  1. Click your App store (iOS App Store or Google Play Store).
  2. Search 'Microsoft Authenticator'
  3. Install the app onto your mobile device.

Once you've done that, follow these steps.

Sign in to your work or school account

After you sign in to your work or school account, you'll see a prompt that asks you to provide more information before it lets you access your account.

Set up your security info using the wizard

Follow these steps to set up your security info for your work or school account from the prompt.

Step 1. After you select Next, a Keep your account secure wizard appears, showing the first method your administrator and organization require you to set up. For this example, it's the Microsoft Authenticator app.

Quick Tips - Notes: 

A. If you want to use an authenticator app other than the Microsoft Authenticator app, select I want to use a different authenticator app.

B. If your organization lets you choose a different method besides the authenticator app, you can select I want to set up a different method.

Step 2. Select Download now to download and install the Microsoft Authenticator app on your mobile device, and then select Next. For more information about how to download and install the app, see Download and install the Microsoft Authenticator app.

Step 3:

  • Remain on the Set up your account page while you set up the Microsoft Authenticator app on your mobile device.
  • Open the Microsoft Authenticator app, select to allow notifications (if prompted), select Add account from the Customize and control icon on the upper-right, and then select Work or school account.
    • Note: The first time you set up the Microsoft Authenticator app, you might receive a prompt asking whether to allow the app to access your camera (iOS) or to allow the app to take pictures and record video (Android). You must select Allow so the authenticator app can access your camera to take a picture of the QR code in the next step. If you don't allow the camera, you can still set up the authenticator app, but you'll need to add the code information manually. For information about how to add the code manually, see see Manually add an account to the app.
  • Return to the Set up your account page on your computer, and then select Next. The Scan the QR code page appears.

Step 4. Scan the provided code with the Microsoft Authenticator app QR code reader, which appeared on your mobile device after you created your work or school account in
the step above. If the QR code reader can't read the code, you can select the Can't scan the QR image and manually enter the code and URL into the Microsoft Authenticator app. For more information about manually adding a code, see Manually add an account to the app.

Step 5: Select Next on the Scan the QR code page on your computer. A notification is sent to the Microsoft Authenticator app on your mobile device, to test your account.

Step 6: Approve the notification in the Microsoft Authenticator app, and then select Next. Your security info is updated to use the Microsoft Authenticator app by default to verify your identity when using two-step verification or password reset.

Step 7: On the Phone set up page, choose whether you want to receive a text message or a phone call, and then select Next. In this example we're using text messages, so you must use a phone number for a device that can accept text messages. A text message is sent to your phone number. If would prefer to get a phone call, the process is similar.

Step 8: Enter the code provided by the text message sent to your mobile device, and then select Next.

Step 9: Review the success notification, and then select Done. 

Step 10: Review the Success page to verify that you've successfully set up both the Microsoft Authenticator app and a phone (either text message or phone call) method for your security info, and then select Done.

You Are Done with Basic Setup. 

We highly recommend connecting a personal Microsoft account so that these are backed up and BEFORE YOU GET A NEW PHONE, MAKE SURE TO CHANGE QR OVER TO THE NEW DEVICE BY FOLLOWING THE STEPS ABOVE BUT IT WILL ALLOW YOU TO USE OLD PHONE TO APPROVE. IF OLD PHONE IS LOST, CONTACT [email protected]

Was this article helpful?

Adding Your Personal Device to the Company Network
Microsoft Intune / Company Portal