Office 365 Multi-Factor Authentication (MFA)


To improve email security, Microsoft provides multi-factor authentication feature to add an extra layer of security to your Microsoft 365 account sign-in.

User Guide :  PDF version 

Frequently Asked Questions :

Q1. Can I turn off MFA?

No, to better protect your email account, the MFA cannot be turned off, this extra verification aims at keeping your account safe.

Q2. Can I change the default MFA sign-in method for O365?

Yes,

1. Visit the website : myprofile.microsoft.com.

2. Login with the present MFA verification method.

3. Click “UPDATE INFO”.

4. Click “Change”.


5. Select desired sign-in method.

6. Click “Confirm”.

Q3. How many ways to verify my identity?

Microsoft Office 365 the following 4 different ways to verify your identity during login, you can enable one or more different ways:

  1. Approve a request on Microsoft Authenticator app
  2. User a verification code from Microsoft Authenticator app
  3. SMS
  4. Telephone call
Q4. Can I sign in with another MFA verification method for one time?

1.  Click “Sign in another way” .


2. Select the desired MFA verification method.

Q5. Can I set up multiple devices for MFA login to the same Webmail account?

Yes,

1. Visit the website : myprofile.microsoft.com on computer or primary mobile device.

2. Login with the present MFA verification method.

3. Click “UPDATE INFO”.

4. Click “Add method”.

5. Select the method you like to add, e.g. Authenticator app .

6. Click “Add”.

7. Make sure you have installed Microsoft Authenticator App on another mobile Device.

8. Click “Next”.

9. Click “Show QR code”.

10. Click to open Microsoft Authenticator App on your another mobile Device.

11. Click “Add account”.

12. Click “Work or school account”.

13. Click “Scan a QR code”.

14. Scan the QR code with this secondary mobile device.

15. Click “Next” on your primary mobile device.

16. Notification will be sent to your secondary mobile device.

17. Click “APPROVE” on your secondary mobile device.

18. You will see “Notification approved” on your primary mobile device.

19. Click “Next”.

Q6. If I have a new phone and a new phone number ,what should I do to setup MFA?

1. Visit the website: myprofile.microsoft.com using your old phone.

2. Login with the present MFA verification method.

3. Click “UPDATE INFO”.

4. Click “Change”.

5. Enter the new phone number.

6. Click “Next”.

7. Check the SMS verification code on the new phone.

8. Enter the 6-digit code on the old phone.

9. Click “Next”.

10. Click “Done”.

Q7. If I lost my smart phone and need have it replaced, what should I do to setup MFA?

Contact CSC via website https://servicedesk.hksyu.edu/ to reset your MFA settings.

After resetting your MFA setting, you may follow the user guide to set up MFA on your new smart phone.

Q8. If I deleted the account on Microsoft Authenticator, how can I add it back?

1. Visit the website : myprofile.microsoft.com.

2. Clicking “Sign in another way” to change to login with SMS verification code or call to phone method.

3. Click “UPDATE INFO”.

4. Click “Add method”.

5. Select “Authenticator app”.

6. Click “Add”.

7. Click “Next”.

8. Click “Pair your account to the app by clicking this link”.

9. You will see the account is added on Microsoft Authenticator.

10. Change the MFA default sign-in method to either “Authenticator app or hardware token”, or “Microsoft Authenticator – notification”.

Q9. Can I use Microsoft Authenticator for multiple accounts?

Yes,

1. Follow the MFA user guide to set up MFA for another email account on computer (using Authenticator Verification Code method) until you see the QR code.

2. Click to open Microsoft Authenticator App on mobile phone.

3. Click the “3-dot” button.

4. Click “Add account”.

5. Click “Work or school account”.

6. Scan the QR code.

7. We will see additional account is added.

Q10. What can I do if I did not receive the verification code via text message?

The below are possible solutions:

1. Restart your mobile device.

2. Make sure that you have set the correct phone number.

3. Make sure that your phone receiving strong signal that can receive call or text.

4. Make sure that alert Notifications of your mobile device are turned on.

5. Turn off “Do not disturb” feature.

6. Turn off battery optimization for authenticator app or message app.

7. Disable third-party security apps.

Q11. How can I add SYU email account to third party email client to work under MFA?

1. Visit the website: myprofile.microsoft.com on computer or mobile device.

2. Login with the present MFA verification method.

3. Click “UPDATE INFO”.

4. Click “Add method”.

5. Select “App password”.

6. Click “Add”.

7. Enter the name for app password, e.g. “GmailAppPassword”.

8. Click “Next”.

9. Jot down the App Password, e.g. sqvtyvxphbqsjcsz.

10. Click “Done”.

11. On your PC, you may use the App Password e.g. sqvtyvxphbqsjcsz to authenticate the SYU email account at third party email client, such as Gmail or Thunderbird.

For Gmail POP setting :

12. Click “Leave a copy of retrieved message on the server.”

For Gmail SMTP setting : 

13. Enter SMTP Server: smtp.office365.com.

14. Select Port: 587.

15. Enter full SYU email address, e.g. 996999@hksyu.edu.hk as Username.

16. Enter App Password, e.g. sqvtyvxphbqsjcsz as Password.

17. Select the option “Secured connection using TLS”.

18. Click “Add Account”.

19. Continues the steps to complete the account setup.

 

Contact Support :
Email : support@hksyu.edu
Hotline: 2806-5143