Microsoft Multi-Factor Authentication (MFA) is now a requirement for Alumni Email Accounts and Retiree Email Accounts. This requirement enhances security on Auburn email and will affect Auburn Alumni who graduated beginning in 2010 as well as employees that have retired from Auburn University.
What is Multi-Factor Authentication (MFA)?
Multi-Factor Authentication is a process where a user is prompted during the sign-in process for an additional form of identification, such as entering a code texted to their cellphone or providing a fingerprint scan.
If you only use a password to authenticate a user, it leaves an insecure opening for attack. When you require a second form of authentication, security is increased as this additional factor isn't easy for an attacker to obtain or duplicate.
Multi-Factor Authentication works by requiring two or more of the following authentication methods:
- Something you know, typically a password.
- Something you have, such as a trusted device that is not easily duplicated, such as a cell phone.
- Something you are - biometrics like a fingerprint or face scan.
This article describes using MFA with your Auburn University Alumni Email account. Below you will find instructions on how to set up MFA initially and how to edit and delete your authentication methods. To access your email, the Outlook App (OWA) is recommended. The Outlook App can be downloaded from the App Store or the Google Play Store, depending on your device. You can also log into your email account using an internet browser to navigate to owa.auburn.edu
Please follow the below instructions or view this view this instructional video to set up your authentication method.
- Sign into your Auburn email account by visiting outlook.com/tigermail.auburn.edu.
- Once logged into your account, you will be brought to the below screen. Click “Next” to start the set-up process.
- This screen allows you to use the Microsoft Authenticator app. If you would like to receive a text message or a phone call to authenticate, please click on the link “I want to set up a different method” and go to the section titled "How to Set up Your Authentication Method Using Call or Text."
- To continue setting up MFA using Microsoft Authenticator, you must download the app. Click “Download now.” After you have installed the app on your device, or if you have already downloaded the app on your device, click “Next.”
- You may want to allow notifications on your device. These notifications will be necessary for you to authenticate. ” Click “Next.”
- To activate the account on your smartphone, you must scan the QR code.
- Open the Microsoft Authenticator app on your device.
- Tap “Add Account.”
- Tap “Work or school account.”
- Tap “Scan QR code.” This will connect the Microsoft Authenticator to your account.
- Use your smartphone’s camera to scan the QR code.
- If you set up your account on your smartphone, you will not have to scan a QR code. You will, instead, click the link “Pair your account to the app by clicking this link.”
- Once you have scanned the code (or paired your account), your account will display on your smartphone within the Authenticator app.
- Return to the setup screen. After you have scanned the code, click “Next.”
- Once Microsoft Authenticator is connected to your account, you will be sent a test notification.
- Approve the notification on your smartphone.
- You will see a confirmation on your computer (as well as your smartphone) that the notification has been approved. Click “Next.”
- Once the test notification has been approved, your setup for Microsoft Authenticator will be complete. Click “Done,” and you will be taken to your account.
- You have completed this process. Please contact the OIT Service Desk if you need assistance.
Follow the below instructions or view this instructional video to set up your authentication method.
- Sign into your Auburn email account by visiting outlook.com/tigermail.auburn.edu
- Once logged into your account, you will be brought to the below screen. Click “Next” to start the set-up process.
- If you prefer to authenticate via text or a phone call, click “I want to set up a different method.” This link is located at the bottom of the window. Click the following section titled "How to Set Up Your Authentication Method Using the Microsoft Authenticator App" for assistance with this method.
- A window will pop up, asking you to select a method.
- Select “phone” from the drop-down and click “Confirm.”
- You will now be on the “Phone” screen. Select the country your phone is set for and enter the telephone number to the right. Select either “Text me a code” or “Call me.” Click “Next.”
- A verification code will be sent to your phone. Enter this code in the field and click “Next.”
- You will receive a message that your SMS has been verified. Click “Next.”
- The last message will confirm that your account has been set up and verified. You will see your default sign-in method and the phone number it is associated with. Click “Done.”
- You have completed this process. Please contact the OIT Service Desk if you need more information or assistance with this process. (email, link)
- Once signed in, click on the icon with your initials (or photo) in the upper right corner.
- Click “View Account.”
- Under Security Info, Click “Update Info.”
- Once on the Security Info window, you have multiple options. You can change your Default Sign-In Method or modify or delete the phone number you have associated with the account. You can also “Sign Out of Everywhere” if you have lost the device.
- To delete the default sign-in method, click “Delete.”
- You will be prompted to confirm that you want to delete the phone. If you click “OK,” your phone or authentication method will be immediately deleted.
- If you have chosen to delete the method, under "Add method," you will see "No items to display."
- Once you have deleted the default method, you can add a new method.
- Click “Add Method.”
- Choose which method you would like to use. “Phone” is the recommended method.
- Select your method and click “Add.”
- Select the Country Code and enter the phone number. You will also need to choose between “text” or “call.” Remember, if you choose “text,” your phone must have texting capability (SMS).
- Click “Next.”
- You will receive a text message with a code. Enter the code and click “Next.”
- You will see the message that your phone was successfully registered. Click “Done.”
- You will now see your authentication method on the screen, with the option to change or delete it.
- If you have completed making changes to your authentication device, you should sign out of your account.
- Click the account icon in the upper right corner and click “Sign out.”
Do I have an Auburn Alumni Email Account?
- If you graduated from Auburn University after 2010, you are eligible to keep your email account. However, email accounts that are unused for one year are closed due to inactivity.
I am retired, but which authentication should I be using?
- Retired pre-Duo: Retirees who retired before any MFA implementations on campus AND are no longer employed with AU will use Microsoft MFA for their email and all O365 applications.
- Retired post-Duo: Retirees employed during the Duo implementation will use Duo for all other Duo-protected resources (ex., VPN) but will use Microsoft MFA for email.
- Retired, but still TES: Retirees employed through TES will notice no change. They will continue to use Duo for all Duo-protected resources. Once TES employment concludes, they will use Duo for all Duo-protected resources and transition to Microsoft MFA for email and all O365 applications.
I am signed into my Auburn email account, but I don't remember the password or how to sign in.
- Contact the OIT Service Desk for assistance. Your password can be reset.
What if I already signed up for MFA before Auburn required it? When I sign in, it says I am already registered.
- Contact the OIT Service Desk for assistance. Your MFA account can be reset, allowing you to re-register.
I signed up for MFA before this requirement, but I no longer have that authentication device.
- Contact the OIT Service Desk for assistance. Your MFA account can be reset, allowing you to re-register and enter a new device.
I have an iPhone and already have my email on the device. What do I do?
- The Outlook app is recommended. There is no charge for this app; it can be downloaded from the App Store. You will need to delete the account and re-add it.
- For instructions on re-adding your email account using the default mail app on the iPhone, please click this link.
I have an Android device and already have my email set up on the device. What do I do?
- The email client on some Android phones may not support MFA.
- The Outlook app is recommended. There is no charge for this app, and it can be downloaded from the Google Play Store.
- You will need to delete the account and re-add it. For instructions on how to re-add your email account using the default mail app on an Android, please click this link.
How do I use MFA and travel internationally?
- If you have purchased (or have) an international phone plan on your cellular device, you will not need to make any changes.
- If you do not have an international plan, you must download the MFA app.
- You can use this app on your phone with a wi-fi connection. With your phone connected to Wi-Fi, you will be able to receive push notifications when authenticating to your email.
I have an up-to-date Chromebook and can't locate the Outlook app.
- Chromebooks will no longer support the Outlook app starting November 1, 2021. Chromebook users are encouraged to view Auburn email from the web.
How often will I have to re-authenticate?
- Your device will remain authenticated for up to 90 days if used regularly on the email app and up to 7 days on your web browser before being prompted to re-authenticate.
Are you still experiencing issues with your Auburn email and MFA?
- Is your operating system up-to-date? Install any necessary updates for your operating system.
- Please view this Microsoft Support Article for Common Problems with Two-Step Verification for a Work or School Account.
- If you continue to experience issues, please contact the IT Service Desk. We offer various support options, including phone, email, chat, zoom, and walk-in. Click here for details on our hours and support options.