Multi-Factor Authentication (MFA) Using/Requesting Hardware Token

Summary

An article about MFA using a hardware token

Body

Multi-Factor Authentication Using The hardware Token

If you would like to setup your account with the hardware token, please fill out the Request For MFA Hardware Token form. Once filled out, you will be notified by email for updates.

Once you get the hardware token, follow the step-by-step instructions on how to use your SMU email account with the token

Step 1

On your computer, visit portal.office.com and login with your SMU email. Click Next when you arrive at the screen below.

sign in

Step 2

You will be redirected to the SMU homepage login. Type in your username and password.

SMU organization sign in

Step 3

You will be prompted to enter a 6-digit code as a second factor after entering your SMU email address and password.

enter code

Step 4

Press the hardware token's power button, and a 6-digit code will be generated.

Image

Step 5

In the dialogue box, type the code. Please be aware that the code will only be available for about a minute before being replaced with a new one.

center and verify code

Congratulations you have signed in using MFA with your hardware token

What to Expect/How Many Times Do I Need To Authenticate

-On each device, MFA will prompt you to authenticate once a week when using installed apps such as Word, Excel, PowerPoint, and Outlook (they don't ask you to authenticate on each of those apps)
-The Teams and OneDrive will also require separate authentications once a week on the same device.
This means you could potentially encounter up to two or possibly three authentication prompts per week on the same device.

To identify if Outlook or Office apps need authentication, simply look for an exclamation mark next to your name on the top-right of the app.

Additionally, if you access these apps on different devices or a new device, you'll be asked to authenticate again as listed above.

For Office 365 activity in a web browser, you will be asked to authenticate every time you sign in. This is because web browsers don't store token keys. If you frequently use the browser for login, you'll usually met with the message "Stay signed in?", check the box that states Don't show this again then click Yes to streamline the process. Note that this option does not work in incognito/private mode of the browser.
stay signed in
-If Teams needs to be authenticated, it must be authenticated once a week on the same device for the locally installed Teams app; otherwise, it may miss calls.

Details

Details

Article ID: 744
Created
Wed 11/9/22 12:02 PM
Modified
Thu 7/20/23 9:15 AM