Multifactor Authentication (MFA)

This procedure configures Microsoft Authenticator on an iOS or Android cell phone using a laptop computer. If you do not have access to a laptop, please follow the steps indicated in Configuring Microsoft Authenticator at the first login (mobile only).

If you have already configured MFA for your account, follow the steps indicated in Adding another validation method with Microsoft Authenticator.

1. Install the Microsoft Authenticator app on your mobile device.
   IMPORTANT – Click on the link for your mobile device model:
   • Apple iOS: Microsoft Authenticator on the App Store (apple.com)
   • Android: Microsoft Authenticator ‒ Applications on Google Play
2. Once installed, launch Microsoft Authenticator and agree to the terms of use.
   Use facial recognition, your fingerprint or enter your phone’s PIN, if any of these methods have been configured on your device.
3. If you are asked to add an account, click on Scan a QR code.
   Otherwise, click on + and then on Work or school account.
4. Then, click on Scan a QR code. Your mobile device is ready to scan the QR code.
   NOTE – The use of a computer is required to complete the following steps.
5. In the Web browser of your choice, go to the Office 365 portal: portal.office.com
6. Sign in:
   1. Username: IDUL@ulaval.ca
   2. Password: PIN
      The Let’s keep your account secure window appears
7. Click on Next
8. The next window suggests installing the Microsoft Authenticator app
9. Click on Next
10. Click on Next a second time to start the configuration
    On the following page, a unique QR code for your account appears
11. In Microsoft Authenticator on your mobile device, scan the QR code displayed on the web page
    NOTE – You may have to allow Microsoft Authenticator to access your mobile device’s camera. Your ULaval account should be added in Microsoft Authenticator
12. Back on the QR code web page in your web browser, click on Next
    You should receive an identity validation request in Microsoft Authenticator on your mobile device
13. Enter the number that appears on the web page to approve the connection, then click on Yes
    After completing these steps, Microsoft Authenticator is configured and ready to use
14. Click on Done

This procedure configures Microsoft Authenticator using only an iOS or Android cell phone.

If you have already configured MFA for your account, follow the steps indicated in Adding another validation method with Microsoft Authenticator.

1. Install the Microsoft Authenticator app on your mobile device
   IMPORTANT – Click on the link for your mobile device model:
   • Apple iOS: Microsoft Authenticator on the App Store (apple.com)
   • Android: Microsoft Authenticator ‒ Applications on Google Play
2. In Chrome or Edge, go to portal.office.com
3. Sign in:
   • Username: IDUL@ulaval.ca
   • Password: PIN
     The Let’s keep your account secure window appears
4. Click on Next
   The next window suggests installing the Microsoft Authenticator app
5. Click on Next
6. Click on Pair your account to the app by clicking this link
   IMPORTANT – Do not click on Next in this step
   The Microsoft Authenticator app will open
7. Authorize the notifications and agree to the terms of use
   Use facial recognition, your fingerprint or enter your phone’s PIN, if any of these methods have been configured on your device
8. Wait for your ULaval account to be added
   Once the operation has been completed, it will appear on the Microsoft Authenticator home page
9. Back on the QR code webpage in your Web browser, click on Next
   You should receive an identity validation request in Microsoft Authenticator on your mobile device
10. Write the number appearing on the Web page to approve the connection, then click on Yes 
11. Once the login has been approved, click on Next
12. Click on Done
    After completing these steps, Microsoft Authenticator is configured and ready to use

If you have not configured any validation methods, follow the steps presented in Configuring Microsoft Authenticator at the first login.

1. Install the Microsoft Authenticator app on your mobile device.
   IMPORTANT – Click on the link for your mobile device model:
   1. Apple iOS: Microsoft Authenticator on the App Store (apple.com)
   2. Android: Microsoft Authenticator ‒ Applications on Google Play
2. Once installed, launch Microsoft Authenticator and agree to the terms of use.
   Use facial recognition, your fingerprint or enter your phone’s PIN, if any of these methods have been configured on your device.
3. If you are asked to add an account, click on Work or school account
   Otherwise, click on Scan a QR code
4. Click on Log in.
5. Sign in:
   • Username: IDUL@ulaval.ca
   • Password: PIN
6. Validate your identity for MFA.
7. Click on Next
8. Once these steps have been completed, Microsoft Authenticator is configured and ready to use
9. Click on Done

If you have configured more than one validation method, follow the steps indicated in How to set or change your default validation method.

When you are asked to validate your identity with Microsoft Authenticator:

1. A notification will appear in Microsoft Authenticator on your mobile device.
2. Open Microsoft Authenticator or click on the app notification.
   Use facial recognition, your fingerprint or enter your phone’s PIN, if any of these methods have been configured on your device.
3. Write the number appearing on the Web page to approve the connection, then click on Yes
   Use facial recognition, your fingerprint or enter your phone’s PIN, if any of these methods have been configured on your device.
4. The connection will be authorized

IMPORTANT — If you have uninstalled Microsoft Authenticator or deleted your ULaval account from the app, your Microsoft Authenticator verification method will no longer work, and the instructions below do not apply.

1. During the validation, select I can’t use my Microsoft Authenticator app right now
2. Select Use a verification code
3. On your phone, select the Microsoft Authenticator appUse facial recognition, your fingerprint or enter your phone’s PIN, if any of these methods have been configured on your device.
4. In the app, select your ULaval account
   A 6-digit code will appear
5. On your computer’s web page, enter the 6-digit code indicated in the Microsoft Authenticator app and click on Verify
   IMPORTANT – This code is valid for 30 seconds. If the code changes before you have entered it into the web page, enter the new code.

This procedure lets you configure the phone validation method using a laptop computer. If you do not have access to a laptop computer, ask someone for help.

If you have already set up MFA for your account, follow the steps presented in Adding another validation method by phone.

1. In the Web browser of your choice, go to the Office 365 portal: portal.office.com.
2. Sign in:
   • Username: IDUL@ulaval.ca
   • Password: PIN
3. The Let’s keep your account secure window will appear. Click on Next.
4. Click on Other options.
5. Select Phone from the list.
6. Indicate the country with the area code and the phone number and click on Next.
7. Enter the 6-digit code you will receive by text message in the validation window.
8. Click on Next.
9. Once everything has been validated, click on Done.

You have configured your phone to validate your identity. If you want to add another phone number, follow the steps to add another phone validation method.
NOTE – This option is not available to all users.

If you have configured multiple validation methods, follow the steps presented in How to set or change your validation method.

This procedure lets you configure the phone validation method using a laptop computer. If you do not have access to a laptop computer, ask someone for help.

If you have not configured any validation methods, follow the steps presented in Configuring a phone number at the first login.

1. In your preferred Web browser, navigate to the Office 365 portal at portal.office.com
2. Sign in:
   1. Username: IDUL@ulaval.ca
   1. Password: PIN
3. Validate your identity for MFA.
4. When the Stay signed in? window appears, select Yes or No according to your preference.
5. Once the connection has been established, click on your name at the bottom left and click on View account.
   A new tab will open.
6. In the left-hand column, click on the My Account, tab, then select Security Info.
7. Click on + Add sign-in method.
8. Select Phone from the list.
9. Indicate the country with the area code and the phone number and click on Next.
10. Enter the 6-digit code you will receive by text message in the validation window on your computer and click on Next.
11. Once everything has been validated, click on Done.

You have configured your phone to validate your identity. If you want to add another phone number, repeat these steps.

NOTE – This option is not available to all users.

If you have configured multiple validation methods, follow the steps presented in How to set or change your validation method.

When you are asked to validate your identity by phone:

1. Read the notification that appears on your mobile phone.
2. Enter the 6-digit code you will receive by text message in the validation window.
3. Click on Verify.

Under Windows

1. From the Microsoft Store, download OTP Manager.
   IMPORTANT – Be sure to select the app offered by Aftnet.
2. Install the app.

Under macOS

1. From the Apple Store, download ‎App OTP Manager – App Store.
   IMPORTANT – Be sure to select the app from Carlos de Boer Ver Voorn.
2. Install the app.

If you have already configured MFA for your account, follow the steps presented in Adding another validation method with OTP Manager.

1. In your preferred Web browser, navigate to the Office 365 portal at portal.office.com
2. Sign in:
   • Username: IDUL@ulaval.ca
   • Password: PIN
3. The Let’s keep your account secure window will appear.
   Click on Next.
4. The subsequent window offers you to install Microsoft Authenticator.
   Click on Set up a different authentication app.
5. Click on Next.
6. Click on Can’t scan the QR code?
   NOTE – The information obtained on this page will be used to configure OTP Manager.
7. Open OTP Manager.
   NOTE – Under macOS, if the app does not appear after being launched, click on the app icon in the menu bar.
8. In OTP Manager:
   • Under Windows, click on the pencil icon or Add Manually.
   • Under macOS, click on Add Token.
9. In the Label (Windows) or Username (macOS) field in the app, enter the Account name value received from the web page.
   Tip – You can copy the value by clicking on Copy name and pasting it in OTP Manager.
10. In the Secret field in the app, enter the Secret key value received from the web page.
    Tip – You can copy the value by clicking on Copy key and pasting it in OTP Manager.
11. Enter a name in the Transmitter (Windows) or Issuer (macOS) field.
    NOTE – You can enter Université Laval.
12. Click on Floppy disk (Windows) or the Add Token (macOS)button to finish adding the account in OTP Manager.
13. Go back to the authentication app web page and click on Next.
    You will be asked for a validation code.
14. Enter the 6-digit code that appears in OTP Manager.
    IMPORTANT – This code is valid for 30 seconds. If the code changes before you have entered it into the web page, enter the new code.
15. Click on Next.
16. Click on Done.
    After completing these steps, OTP Manager is configured and ready to use.

If you have not configured any validation methods, follow the steps presented in Configuring OTP Manager at the first login.

1. In the Web browser of your choice, go to the Office 365 portal: portal.office.com
2. Sign in:
   • Username: IDUL@ulaval.ca
   • Password: PIN
3. Validate your identity for MFA.
4. When the Stay signed in? window appears, select Yes or No according to your preference.
5. Once the connection has been established, click on your name at the bottom left and click on View Account.
   A new tab will open.
6. In the left-hand column, click on Security Info.
7. Click on + Add sign-in method.
8. Select Microsoft Authenticator from the list.
9. Click on Set up a different authentication app.
10. Click on Next.
11. Click on Can’t scan the QR code?
    NOTE – The information obtained on this page will be used to configure OTP manager.
12. Open OTP Manager.
    NOTE – Under macOS, if the app does not appear after being launched, click on the app icon in the menu bar.
13. In OTP Manager:
    • UnderWindows, click on the pencil icon orAdd Manually.
    • Under macOS, click on Add Token.
14. In the Label (Windows) or Username (macOS) field in the app, enter the  Account name value.
    Tip – You can copy the value by clicking on Copy name and pasting it in OTP Manager.
15. In the Secret field in the app, enter the Secret Key value.
    Tip – You can copy the value by clicking on Copy key and pasting it in OTP Manager.
16. Enter a name in the Transmitter (Windows) or Issuer (macOS) field.
    NOTE – You can enter Université Laval.
17. Click on Floppy disk (Windows) or the Add Token (macOS) button to finish adding the account in OTP Manager.
18. In the authentication app web page, click on Next.
    You will be asked for a validation code.
19. Enter the 6-digit code that appears in OTP Manager.
    IMPORTANT – This code is valid for 30 seconds. If the code changes before you have entered it into the web page, enter the new code.
20. Click on Next.
21. Click on Done.
    After completing these steps, OTP Manager is configured and ready to use.

If you have configured multiple validation methods, follow the steps presented in How to set or change your validation method.

IMPORTANT – You must enter the validation code within 30 seconds after receiving it, after which it will no longer be valid.

When you are asked to validate your identity with OTP Manager:

1. Open OTP Manager.
   NOTE – Under macOS, if the app does not appear after being launched, click on the app icon in the menu bar.
2. Enter the code that appears in the validation window.
3. Click on Next. The connection will be authorized.