Microsoft Authenticator

Configuring the Microsoft Authenticator

Microsoft has the most recent detailed steps with example images for configuring the authenticator app on their website. Below is a brief version of the steps outlined there.

You will need your mobile phone or tablet and a computer with access to the internet to configure the app. After configuring the app, you will be able to use the notification based verification when online or the one-time passcode (OTP) verification method when online or offline. 

Setting up the authenticator will require the Microsoft Authenticator app be installed on your mobile phone or tablet. It can be found in the Apple and Google Play app stores published by the Microsoft Corporation.  Microsoft has an app store portal that contains links to the app for both Android and iOS. 

After installing the app on your mobile phone or tablet, go to the My Account portal on your computer and sign in with your Western Universal account ( 

Select Security info on the left to access your existing authentication methods. The methods listed here will be used when you are prompted for MFA. Select + Add method then select Authenticator app then follow the prompts presented to finish setup on your mobile device or tablet. Following setup, you will want to set the authenticator app as your default sign-in method.

A video example from ATUS shows how to configure your account for MFA using the Microsoft Authenticator. 

After configuring the app, please complete this opt-in form to enable the policies that will enforce multifactor authentication using the additional methods configured on your account. Without completing the form, MFA will not be enabled on your account. 

If you need additional assistance with step by step instructions Microsoft has a support article with included screenshots here or you may reach out to the Help Desk


Using the Microsoft Authenticator with push notifications

If you have set up the Microsoft Authenticator app, you will see a notification pop up on your phone when signing into your universal account. In the notification you will be presented with a field to enter the number you see on your computer screen and the choices Yes or No, this isn't me. Enter the number displayed then Tap Yes to authenticate.

Please note that if your phone is in do not disturb mode, or if you have notifications for new apps silenced you may not receive the notification as expected.

Adding an Alternative Authentication Method

There are some situations where an alternative to the Microsoft Authenticator may be useful. The Alternative Authentication Methods knowledgebase article contains a list of additional methods that may be utilized as an authentication method. Some situations where these additional methods may be useful are for cases where using the Microsoft authenticator app online is not possible or practical or providing a backup means of authentication in the event your primary device is lost. 

NOTE: When You Receive a New Phone

When you receive a new phone through an upgrade or simply replacing your old phone you will need to re-register your device. While many device upgrade and migration programs will transfer your apps for you, the configuration of your Microsoft Authenticator will not be transferred. It is suggested to keep access to your old phone if possible until the Microsoft authenticator is registered on your new phone. 

Please sign into your My Account portal to re-register your new phone following the same methods above. Microsoft has a video on the process that is 2 minutes long.