Microsoft Authenticator FAQ

Microsoft Authenticator is used to log in to university common services that require multi-factor authentication. With Microsoft Authenticator, when logging in, in addition to your username and password, you also enter a code that you receive from an app or hardware token.

We recommend enabling multi-factor authentication on one device only. It is possible to activate on several devices while you are, for example, changing devices, but this is a temporary solution. The intention should be to use only one device.

The new device must be added as a new device before the old device is deleted. See the manual add an additional device.

Add multi-factor authentication on new device (MFA)

If you have lost/stolen your mobile device, it is possible to get a one-time password using BankID or Freja eID+ or by contacting ITS Servicedesk. The password works for one hour and allows you to add a new device.

Reset Microsoft MFA with one-time password

Absolutely, it’s entirely possible. There is no requirement that the unit be owned by Umeå University.
The advantage of using your personal mobile instead of a hardware token is that you don’t have to keep track of an extra device, you most likely have your personal phone with you everywhere. It is easier to restore MFA if you lose your phone and you can collect all logins with MFA on the same device.

Regardless of if you choose to activate your multi-factor authentication on a mobile phone or a hardware token, it is important to keep the device accessible when you work, both at home and in the office as well as when on business travel. Most people find it easier to use a mobile phone, which is an item you probably carry with you anyway.

To set up, you can activate a mobile device at any time, whereas the hardware token needs to be ordered and picked up from Servicedesk.

The hardware device is simple to use and shows numbers that change every so often. If you do not have time to enter all the digits before they change, you have to restart. Since the hardware token does not have a password, it is important to store it in a safe place.

Unfortunately, it is not possible to get round multi-factor authentication. If you do not have the device with your multi-factor authentication, you will not be able to access the systems that require it. Contact ITS Servicedesk if you need help to reset your multi-factor authentication.

We recommend that you only activate multi-factor authentication on one device. This means you should either have a mobile device or a hardware token, not both.

If you have found a hardware token that is not being used, and whose owner does not seem to be around, please hand it in to ITS Servicedesk.