Multi-Factor Authentication (MFA) also referred to as two-factor authentication; MFA is a security enhancement that will allow you to provide an additional piece of evidence (not just your password) in order log in to your account. It does this by requiring at least TWO methods of authentication – your password and another piece of information (Microsoft Authenticator App, SMS Text message code, or a phone call). Think of it this way – you need TWO – things to log in to MySUNYOrange.
“Something you know” + “Something you get” = Successful Login!
“Something you know” (your password)
AND
“Something you get” (app approval, verification code, text, or automated phone call)
This guide will help you register for MFA (or confirm you are registered).
***** Please make sure you have your computer AND mobile device with you before you start *****
Am I Registered for MFA?
On your computer, visit https://aka.ms/setupsecurityinfo. Log in with your email address and password.
YES: If you are already registered with MFA, you will likely be prompted to verify your account to proceed using one of the methods you have set up (verification code, MS auth app, or phone call. Once verified, you will see the methods you have set up listed under Security Info. Here you can edit, add, or change the methods you have set up if necessary. You can stop here you are all set up!

NO: If you are NOT registered for MFA, you will see a notice “No Items to Display”. You should proceed with the registration using this guide as a reference. You will only need to do this initial setup once. Once registered, your account will use those method options for MFA (two-factor authentication) going forward.

Set up Microsoft Authenticator App
1.) On the computer, click on “+ Add sign-in method”
2.) Choose “Authentication app” from the drop down. Then Click “Add”

3.) On your mobile device, download and install the Microsoft Authenticator APP from your AppStore. Then Click Next on the computer.

4.) Click Next on the computer.

A QR Code is displayed on the computer to be scanned.

5.) On your mobile device open the MS Authenticator app and click ‘Add account.’ If prompted to send notifications and access contacts, Click ‘Allow’. Click “Continue” if prompted about backup.

6.) When prompted to choose what kind of account are you adding – select ‘Work or School’ account.

If prompted ‘click allow access to the camera’
7.) Select “Scan QR Code” when prompted.

8.) Using your mobile device scan the QR code on the computer screen and then Click Next on the computer.

Note: If you are unable to scan the image a code is also available on the screen. To enter the manual code, you will need to click on Can’t scan image? On the computer

9.) Click Next on the computer.
On your mobile device, you should then see a 6-digit code appear in the app.
The account is now added to your MS Authenticator APP on your mobile device.
An approval request will be now sent to your mobile device.
10.) Click ‘Approve’

You should now see ‘Notification approved’ on the computer.
11.) Click Next on the computer to finalize the registration of MFA using the MS Authenticator App. You should see this App listed as one of your sign-in methods.

Now, you could add your mobile phone or landline number to receive a text or phone call as a backup authentication method.
12.) On the computer, click on “+ Add sign-in method”, Choose “Phone” from the drop-down. Then Click “Add”

13.) Select the country code of your mobile
Enter a valid phone number, Choose “Text me a code” or “Call me”, Click Next.

If you chose “Text me” - you will get a text with a code sent to the mobile phone to enter the computer and click
Next
If you chose “Call me” – the phone will ring, and you will need to press the # sign to verify.
You will see a message on the computer that your phone was successful registered.

The phone number is now linked to your account and registered for MFA.
14.) Setup of MFA is now complete Click Done
On the computer, your security information will now list the methods of authentication you just set up.
IMPORTANT: If you change your mobile phone, please update your MFA
Browse to https://aka.ms/setupsecurityinfo to add/change a phone number, add another Authenticator phone/tablet device, or alternate phone Note: email can NOT be used for authentication.
Using Multifactor Authentication for Login
1.) Upon logging into My.SUNYOrange.edu you will be first asked for your password, as usual, then be asked to verify your identity by selecting one of your registered sign-in methods.

2.) If you select the Microsoft Authenticator App, you should get a notification for verification on your mobile device, Click on Approve on your mobile device, and the computer will let you into MySUNYOrange.
3.) If you select the text method, you will receive and enter a code sent to your mobile device into the computer browser prompt.
- OR -
If you select Call, you will receive a phone call where you would press the # sign to verify your identity.
ONLY approve notifications you know you have initiated.
If you have not initiated it, ignore the request/text or click on deny.
SUNY Orange Technical Services 845-341-4749