AST Activate 2FA (2-Factor Authentication) with SMS
SMS Two-Factor Authentication (2FA) is now enabled to allow you to setup your phone number to receive text messages of one-time passcode when asked to authenticate your AST O365 Account.
Why You Should Opt-In for MFA Instead of SMS 2FA
If you're travelling and not connected to your carrier, you won't receive SMS text messages to authenticate your login and access your account.
It's important to note that 2FA such as SMS does not provide additional layers of security as MFA does when using the authenticator mobile app. While basic 2FA, such as receiving codes via SMS, provides a level of security, it is more susceptible to certain vulnerabilities, such as SIM card swapping or interception. Authenticator apps generate unique, time-based codes that are not dependent on the network, making them more secure.
The Microsoft Authenticator app (MFA) is the preferred method as it offers the benefits such as Passwordless Authentication and security. MFA methods such as the Authenticator app is more secure than 2FA because it provides an additional layer of protection through a passcode or biometric verification, such as fingerprint or facial recognition.
Setting up MFA on your personal device may seem like an inconvenience, but the benefits far outweigh any potential drawbacks as it’s best to ensure that data is safe from unauthorized access. If you'd like to setup MFA with the MS Authenticator app, click HERE. If you're unable to download the Microsoft Authenticator app from Play Store or App Store, the alternative is to use the Google Authenticator app. The Google Authenticator app provides higher security than 2FA.
Follow the instructions below to set up 2FA with SMS as your authentication method.
Sign in to portal.office.com with your AST email first then follow the instructions bellow:
Note: If you were met by the screen stating "More information required", hit Next then select I want to set up a different method and follow from step 4 until you get to the success! screen. If you're not met with the screen below, start from step 1.
Step 1: Click on your profile with your initials on the top right -> then click on 'View account'
Step 2: On the left, select 'Security info'
Step 3: Select '+Add sign-in method'
Step 4: Click the drop-down menu where it says 'Choose a method' -> then select Phone
Note: If you don't see Phone as an option, contact AST IT Helpdesk ithelpdesk@astheology.ns.ca
Step 5: Click 'Add'
Step 6: Click on the drop-down menu to select the country of your phone number carrier location -> enter your phone number -> hit Next
Step 7: You have received a text message on your phone. Enter the 6-digit code that you've received on your phone text messages app -> hit Next
Step 8: Hit Done to complete the registration
Congrats! You've setup 2FA SMS method. What's next? review the details below on what to expect.
What to Expect/How Many Times Do I Need To Authenticate
It will ask you to authenticate once a week when using installed apps such as Word/Excel/PowerPoint on the same device. It will ask you to authenticate on other devices you use or to a new device you never used before.
-Teams/OneDrive app and Outlook app can be separate authentications once a week also.
Therefore, it can be up to three authentications once a week. You would know that Outlook or Word apps need to be authenticated when you see an exclamation mark next to your name on the top-right of the app.
-For office365 activity in a web browser, it will ask you to authenticate every time you sign in to a web browser because browsers don't hold token keys. If you login to the browser often, checking the following on the login screen may help. (ensure the box is ticked and click yes. It doesn't work in incognito)
-If Teams need to be authenticated, it may miss calls unless it is authenticated only once a week on the same device for the locally installed teams app.