Activate MFA for your account

On a daily basis, the university is exposed to phishing attempts where fraudsters try to obtain login credentials to our accounts, often via emails designed to trick the recipient into giving out their information.

Once an account has been hacked, the breach can cause a lot of damage. Malicious programs can spread viruses in your computer, encrypt information on your own and other people's storage areas or be spread to your contacts. One single user making one mistake might, in worst case, cause severe damage to the entire university. An example of such a consequence is the university email being banned by other actors.

By implementing multi-factor authentication, the university can to a larger extend prevent accounts from being hacked and minimize the damage that breaches may cause. MFA is therefore a necessary security measure to protect all the information within the university.

Several other universities and organizations also use MFA. 

To activate MFA, you need to start a Microsoft 365 login on your computer:

• Go to outlook.office.com/mail/ and enter your student email (gus•••••@student.gu.se) and the same password as your student account.
• A box will now appear with the text More information required.
• Click on "Next" to proceed with the activation. 

Next, you will be prompted to download and install the Microsoft Authenticator app on your phone:

• Download and install the app from the App Store if you have an Apple device, or from the Play Store if you have an Android device.
• When prompted, grant the app access to the camera (to scan QR codes), notifications (to alert you of login attempts), and location (to show the location of approvals).
• (If you have already installed the app on your mobile phone, proceed directly to Step 3.) 

Choose the correct app! Note that there are other apps with similar names and icons, so make sure you install Microsoft Authenticator by Microsoft Corporation.

After downloading and configuring the app, return to your computer to continue the login process:

• Click "Next."
• You will be prompted to set up your account. Click "Next" again.
• A QR code will appear on the screen, which you will need to scan using the Microsoft Authenticator app (sse step 4 below). 

Image

• Open the Microsoft Authenticator app.
• In the "Set up your account" dialog, click "Accept" followed by "Continue". 
• Select "Scan QR code" if this option is available. If the QR code option is not visible, click the + sign to add an account and choose "Work or school account" followed by "Scan QR code". 
• Point your phone's camera (via the app) at the QR code on your computer screen to scan it. Your Microsoft account will be added. Then, click "Next". 

• You will now see a new box on your computer with two numbers.
• Enter the numbers in the Microsoft Authenticator app. A box will automatically open for this with the text "Are you trying to sign in?". Click "Yes". 
• When the test has been successfully completed, click "Next". 

You have now activated the MFA for your account. Remember, only authorise logins that you know you have initiated yourself!

To be able to install the app Microsoft Authenticator, you need a compatible mobile phone: iPhone 6S with iOS 15 or later or an Android phone with Android 8 or later. 

In order for the app to work at its best, you need to allow access to:

• Camera (to scan QR codes)
• Notifications (to be able to approve the login) 
• Location (to identify the location of approvals)

The app can be installed on multiple phones. You can see all your registered units on the page See all registered units. 

If you have lost your phone and/or have a new one, you need to install and activate Microsoft Authenticator in your new phone.

The phone that you do no longer have access to also needs to be removed from Microsoft Authenticator. You do this by going to the link below and following the instructions.

Manage multi-factor authentication on your Microsoft account

Once your old phone has been removed, you register your new phone following the instructions further up on this page. 

Follow these instructions to register a new account in the app: 

• On your phone: Launch Microsoft Authenticator. 
• Tap the + sign in the top right corner of the app.
• Select "Work or school account". 
• Select "Scan QR Code" and scan the QR code displayed on your computer screen.

If you have already activated MFA and are still experiencing login issues, you can try removing the connection and then re-adding it through Manage multi-factor authentication on your Microsoft account.

If you have deleted your Microsoft Authenticator app, you must first remove your registered phone and then register it again through Manage multi-factor authentication on your Microsoft account.