MFA Registration

Use MFA for extra security and password reset

This one-time enrollment will register your UFV account for MFA (Multi-factor Authentication Registration) will add an extra layer of security. You will also unlock self-service password reset to make it faster and easier to get back into your account if you ever forget your password.

Register for MFA + self service password reset

1. In a web browser, go to https://aka.ms/mfasetup and sign in with your UFV account. If you see the prompt Your organization needs more information, you can register by clicking Next. If you do not see this prompt, click +Add method.

2. Choose your multi-factor verification method:

• an authenticator app (we recommend using the Microsoft Authenticator),
• a passkey, or
• a physical security key (USB device - no phone required)

Follow the on-screen instructions to complete registration. Detailed instructions for each available method are included below.

Authenticator App

Microsoft Authenticator (recommended)

1. First, download the Microsoft Authenticator app for your mobile device.
   • For Android: Google Play store
   • For iOS: App store
2. Go to aka.ms/mfasetup and click +Add method
3. Select Microsoft Authenticator - Approve sign-in requests or use one-time codes

For detailed setup instructions and troubleshooting for the Microsoft Authenticator app, refer to the article - MFA: Setup Microsoft Authenticator App.

Other authenticator apps

IT Services does its best to support the many apps and configurations available. If you would like to use a different authenticator app, such as Duo, Google Auth, or Twilio Authy, you may do so. To install a different authenticator app:
 

1. Go to aka.ms/mfasetup and click +Add method
2. Select Microsoft Authenticator - Approve sign-in requests or use one-time codes
3. On the authenticator app configuration screen, click I want to use a different authenticator app.

Scan the presented QR code with your app. When you are done, click Next. Depending on the app, additional configuration options may appear.

Passkey

With passkeys, you can sign in with a PIN, facial recognition, or fingerprint.

1. Go to aka.ms/mfasetup and click +Add method
2. Select Security key or passkey - Sign in with your face, fingerprint, PIN or security key (or if you have the Microsoft Authenticator app, you can choose Passkey in Microsoft Authenticator)
   • To add a passkey, you must pass MFA. If you don't have any other MFA methods registered, contact the IT Service Desk for a temporary access pass.
3. Follow the on-screen prompts to set up your desired passkey.

By default, Windows devices offer to save the passkey locally using Windows Hello, but you can select the option Use another device to save the passkey in one of the following locations:

• This Windows device: the passkey is saved locally on your Windows device, using Windows Hello (biometrics or PIN)
• iPhone, iPad or Android device: the passkey is saved on a phone or tablet, protected by the device's biometrics (if offered by the device). This option requires you to scan a QR code with your phone or tablet, so you should have it close by.
• Security key: If you have a physical security key, you can save the passkey to it.

Security Key (USB)

A security key plugs into a USB port on your computer, and can be used to verify multi-factor authentication (MFA) or as passwordless sign in. They are recommended if you do not have a mobile device or do not want to use your mobile device.

1. Go to aka.ms/mfasetup and click +Add method
2. Select Security key - Sign in using a USB, Bluetooth, or NFC device
   • To add a security key, you must pass MFA. If you don't have any other MFA methods registered, contact the IT Service Desk for a temporary access pass.
3. Follow the on-screen prompts to set up your security key.

For more information on security keys, refer to Security Keys (FIDO2).