Microsoft Authenticator | Information Security | SIU

1. In your browser, go to the Microsoft Security Info webpage. (If prompted, sign in with your SIU credentials). 
2. Click on Add Sign-in Method.

3. Click on the Choose a Method drop-down menu and select Authenticator app

4. Click Add.

5. You will be prompted to download/install the Microsoft Authenticator app on your mobile device. Click the blue, hyperlinked words: Download Now. 

Note: If you have Microsoft Authenticator already installed, you can skip Steps 5-6.

6. A new window will appear with two seperate QR codes (one for Apple/iOS devices and one for Androids). Scan the QR code that matches your device.

Note: If you are unable to scan the QR code, click the corresponding "Get the app" button beneath the QR code that matches your device. 

7. Once installed, open the Microsoft Authenticator app on your mobile device.

8. In the top right corner of the screen, tap the "+" icon to add a new account. 

9. Select the Work or School Account option.

10. Select the Scan a QR Code option.

Note: You may need to choose "Allow" to grant Microsoft Authenticator access to use your camera (in order to scan the QR code). 

11. In your browser, click Next to begin your account setup. 

12. A QR code that is specific to your SIU account will appear on screen. Using the Microsoft Authenticator app, scan the QR code. 

13. A notification will briefly appear on your phone that says "Account added successfully." Once you have received this notification, the words Southern Illinois University and your SIU email address will be listed in the Microsoft Authenticator app. 

After you have successfully completed these steps, your SIU account is prepared for the transition to Microsoft Authenticator. Once it is pushed out across campus, you will be able to start using the Microsoft Authenticator app without needing to complete these initial setup steps; you will automatically be ready.

If you decide that you want to get even more of a head start and begin using the app now, follow the instructions under the "Switch Today" section whenever you are ready (between now and the scheduled transition dates)! 

Frequently Asked Questions

Why is this change being made?
To reduce overall costs to the university and minimize complexity in the logon experience, SIU is moving to Microsoft MFA. Duo has been a great partner with SIU for almost a decade, but since the addition of faculty and staff in 2020/2021, Microsoft has been the mechanism behind the scenes that prompts most users for Duo MFA.

Why do we use Multi-Factor authentication?
SIU, like many other academies and organizations, is under constant cyber threat. Adding MFA to active faculty, staff, and students in 2020/2021 has helped reduce account compromise immensely. We will continue to follow industry standards and best practices to protect the SIU community.

During setup, I'm prompted for a phone number or device I no longer have access to. What do I need to do? 
Please contact SalukiTech at 618-453-5155 or start a live chat with us on the SalukiTech website (during business hours). We are able to remove this phone number or device from your account so that you can complete the MFA setup.

How often will I need to do this?
Adding your device should be a one-time occurrence, or when you need to change phones.

I’m being prompted for Duo once per week – will that continue?
Our current settings prompted for MFA once per week in Duo. In this change we will be reducing this to every 28 days instead.

Can I still use SMS texting or a phone call?
For security purposes, we have removed the phone call options and heavily discourage the use of SMS texting for the second factor.  We encourage you to try the Microsoft Authenticator application as that is easy to use and convenient since most people carry a mobile device nearly all the time. We have other hardware options (see below) that can be used if you do not want to use your mobile device.

What is the recommended alternative if I cannot, or wish to not, use a mobile application like Microsoft Authenticator?  
A hardware token like a Yubikey which easily plugs into your USB port on a computer or phone (NFC) can be used. You can buy/bring your own FIDO2 token and connect it to your account following these instructions:

• Windows Instructions
• Mac Instructions
• Linux Instructions

I already have a Yubikey or Duo token from SIU: can I still use this?
Unfortunately, the technology is not the same and you will need a new token or FIDO2 capable Yubikey. SIU-issued devices can be exchanged at SalukiTech in Morris Library on the 1st floor. Please call SalukiTech at 618-453-5155 or use the live chat option on this webpage (available during our business hours) so we can be sure a token is ready for you to pick up. 

Has this been done before?
Yes. During Fall 2023 all alumni and retirees began using Microsoft Authenticator for services in which they needed extra verification.