document iconmyCSUSM
cougar courses logoCOUGAR COURSES
email iconEMAIL
email iconMS OFFICE APPS
password iconPASSWORD
MANAGEMENT
Your  Account:
document iconmyCSUSM
cougar courses logoCOUGAR COURSES
email iconEMAIL
office iconMS OFFICE APPS
password iconPASSWORD
MANAGEMENT
Instructional and Information Technology Services (IITS)

MFA Provider Transition - Microsoft Authenticator

Microsoft MFA Transition 

We have been using Duo Mobile as our MFA provider since 2020. As part of our ongoing efforts to enhance security and streamline the user experience, we will transition to Microsoft Authenticator as our sole MFA provider.  

Why are we doing this?

Moving to Microsoft Authenticator will allow us to integrate Microsoft’s security capabilities while maintaining a familiar sign-in experience. Users will continue to verify their identities through push notifications and other secure methods.   

Additionally, Microsoft Authenticator supports password-less sign-in through mobile devices. By reducing reliance on passwords, this authentication method lessens the effectiveness of phishing or password theft while providing a faster and more convenient sign-in experience.  

What do you need to do?

Starting January 25th, users will be prompted to enroll in Microsoft Authenticator upon logging in. Users will have 2 options for Authenticator enrollment: Microsoft's Authenticator Mobile Application, or a CSUSM-provided Hardware Token.

Users can download the Microsoft Authenticator Mobile Application via the following sources:
Microsoft Authenticator - Apps on Google Play  
Microsoft Authenticator App - App Store   

Hardware tokens will be provided to users who do not have the capability to download the mobile application. They are available on request by emailing techsupport@csusm.edu

Instructions for activating Microsoft Authenticator or a Hardware Token can be found below:

Show All
  • Activate Microsoft Mobile Authenticator

    Microsoft Security Sign-In 
    Click on the link above and sign in with your campus credentials.
    Image depicting Microsoft Sign In Email Entry 

    Enter your email address password as shown below. 
     Image depicting entry of CSUSM password for Microsoft Sign In

    Satisfy the Duo multi-factor authentication request - select either option below. 
     Image depicting Duo Code delivery

     
    Click on "Add a Sign in Method" , and select "Microsoft Authenticator"
    Image depicting Microsoft Security Authentication Methods, selecting Microsoft Authenticator

    Download the Microsoft Authenticator App: 
    Microsoft Authenticator - Apps on Google Play  
    Microsoft Authenticator App - App Store   
    Once the app is installed, push the “Next” button through the setup page until you get to the “Scan QR code” page.
    Image depicting Microsoft Authenticator prompt for user to download the mobile applicationImage depicting Microsoft Authenticator prompt for user to set up their account in the mobile applicationImage depicting the Microsoft Authenticator Scan QR code prompt, to link their account with their mobile device

    Open the authenticator app and select the QR circle at the bottom right of your screen.  
    Image depicting the Microsoft Authenticator Mobile Application, with the Scan QR code option circled in the bottom right

    You’ll see a prompt for permission to use your camera. Please tap "Allow." Scan the QR code on your screen. Once scanned, it will confirm that your account has been added to the app. 

    After you scan the QR code, Microsoft Authenticator will provide you with a two-digit number to input on your mobile device. Input that number to complete the authenticator linking process.


    Image depicting the two-digit number provided by MicrosoftImage depicting the mobile prompt for the user to input the Microsoft-provided two digit codeImage depicting the confirmation prompt that the Authenticator has successfully linked and activated

    Congratulations, you have now activated Microsoft Authenticator!

  • Activate a Hardware Token

    Microsoft Security Sign-In 
    Click on the link above and sign in with your campus credentials.
    Image depicting Microsoft Sign In Email Entry 

    Enter your email address password as shown below. 
     Image depicting entry of CSUSM password for Microsoft Sign In

    Satisfy the Duo multi-factor authentication request - select either option below. 
     Image depicting Duo Code delivery

     
    Click on "Add a Sign in Method" , and select "Hardware Token"
    Image depicting MS Auth Options, with Hardware Token highlighted

    Check the back of the device for the serial number, enter it, and select next.
    Image depicting Hardware Token serial number entry field

    Create a name to help you choose this method when selecting multifactor authentication, and select next.
    Image depicting Hardware Token naming field

    Supply the random verification code that appears when you tap the button on the device. This token refreshes every 60 seconds, and you have two minutes to enter that code.
    Image depicting HWT verification code entry


    Congratulations, you have activated your Hardware Token!

    Please note that Hardware Tokens can take up to 24 hours to activate. If it has been more than 24 hours, and you are still unable to use it to authenticate, contact the CSUSM helpdesk.

     


 

Support

If you experience any issues activating Microsoft Authenticator or a Hardware Token, contact the CSUSM help desk at 760-750-4790 or techsupport@csusm.edu.