Multifactor validation

You already know the multifactor principle from login to, for example, your online bank, borger.dk, etc., where you must enter a code from yourNEMID.

The reason for using multifactor validation is security. Your mobile phone becomes a physical key that cannot be stolen over the net. In practice, the solution works in such a way that, after you have entered a correct password, a validation is sent to your mobile phone (via the app).

For security reasons, AAU introduces continuous multifactor validation on several services using the Microsoft Authenticator app.

If you are externally connected and do not have an AAU account, click here.

The first time you sign up for the MicrosoftAuthenticator app, you must be physically on campus and logged in to AAU's network AAU-1x or Eduroam.

Complete the following steps: (click on instructions below)

Setting up multifactor validation on computer and telephone.
Add your mobile number so it will be possible to set up another device (eg, tablet, mobile phone) if you lose your phone or get a new one.

+
Setup Multifactor Validation

you must be physically located on campus

To set up multifactor validation via the Microsoft Authenticator app, you must be physically located on campus and connected to the AAU network EDURAOM or AAU-1x

Our guide below shows pictures from setting up via iPhone and Mac, if you have a Windows computer, Android mobilephone etc. pictures and text may look different.

1) Open a browser on your PC (preferably in private/incognito mode) and log in with your AAU username and password at https://aka.ms/mfasetup

NB: If you after log in is shown a Microsoft page with all apps, you must shut down the browser window and start over again. The issue appears in a few cases with the Internet Explorer and Firefox. We recommend that you use the browser Chrome.

Tap "Next".

2) Download Microsoft Authenticator by either following the "Download now" link or downloading the app from the App Store or Google Play via your mobile phone or other device (eg iPad). Once the app is downloaded and installed, open it on your mobile phone and click "Next" on your computer.

2a) If you do not get the image above but instead of the one below, just click "Add Method".

3) Click "Skip" on your telephone. NOTE: If you use an iPhone, you may need to complete step 4) before step 3)

4) Remember to accept all permissions that the app asks for during setup.
In the app, select "Add account".

5) Select "Work or school account" in the app.

6) On your computer

is suggested "Set up ypur account". Click "Next".

As you can see in the picture below, it is also possible to choose "I want to set up a different method". This is not recommended. We recommend that you only use the app, as different methods do not give access to essential services when working/studying from home, fx VPN.

7) Your computer now displays a QR code. Scan the code with your mobilephone.

8) when you scan the code with your mobile phone, it looks like this:

9) Once the code has been scanned and approved, you will see the following on your mobile phone:

10) On your computer you are now asked to test the setup:

11) Click "Approve" in the app.

12) When you have approved in the app, following is shown on your computer. Click "Next".

13) You now see the following on your compuer and mobilephone as an affirmation that the set up is correct.

You are now ready to use AAU's services with multifactor validation

You must not delete the app subsequently, because you need it to accept 2 factor in the future.

Please continue with step 2 and add your phone number as an extra methode in the app. (se the guidelines below)
+
add your phone number
To make it easier to switch Microsoft Autheticator to another device, we recommend that you add your phone number as an additional "method" in the app.
1. Log in to aka.ms/mfasetup and select "Security information" in the left column.
2. Click on "+ Add method".
3. Choose "Phone" and click "Add".
4. Write your telephone number and click "Next".
5. Enter the verification code sent to your phone number.
6. Your phone number is now registered.
+
New telephone or other device (tablet/ipad)
If you want to use Microsoft Authenticator on a new phone or other device (eg a tablet / iPad) do the following:
1. Check if you have registered your phone number as the authentication method. (Log in to aka.ms/mfasetup and see if your phone number appears in the list. If it does not, add your mobile number to your account.)
2. Then follow these setup instructions to add your new device. (Start at point 2. You do not have to be physically present on campus)
If you no longer have that device, or have deleted the configuration or App that was previously used for MFA, you must contact Onsite Support personally at AAU, to have the old MFA device deleted, and possibly get help creating MFA again.
+
add a new autheticator device

To add additional devices (phone or tablet) simply follow the instructions "setting up multifator validation". Start at step 2. You do not have to be physically located on campus.

NOTE: To be able to distinguish between your devices, it is a good idea to name them differently. For example, if you have a new iPhone 11, call it "iPhone 11", and not just "iPhone".