Deployment of Multifactor Authentication (MFA) and management of authentication methods

When you log in for the first time, you will receive a More information required message after entering your username and password. Follow the instructions and select at least two different authentication methods on two different devices. 

After this, you can manage your authentication methods at https://mysignins.microsoft.com/security-info.

Log in to the service. Enter your username in the format username@ad.helsinki.fi (e.g. rkeskiva@ad.helsinki.fi).

You will then be redirected to the University's login page. At this stage, you can use the short login format (e.g. rkeskiva), but the long format, username@ad.helsinki.fi (e.g. rkeskiva@ad.helsinki.fi), also works.

Click Sign in.

Management of authentication methods can be found at https://mysignins.microsoft.com/security-info

After logging in, you can access the “Security Info” page where you can manage authentication methods.

You can add a new authentication method under Add method. Select the authentication method to be added from the list. 

We strongly recommend that you add at least two authentication methods on two different devices. The recommended primary methods are Passkey in Microsoft Authenticator and Microsoft Authenticator. Phone call authentication should always be a backup method only.

Management of authentication methods can be found at https://mysignins.microsoft.com/security-info

You can add a new authentication method under Add sign in method. 

Select the authentication method to be added from the list that opens.

The authentification methods listed here are in the order in which they are recommended to be used. We recommend you to adapt multiple different authentification methods using two different devices so that you have alternative ways to authenticate your sign-in in case one of the other methods is not available (i.e. your mobile phone is lost or broken) . You can add multiple methods of authentification as backup and choose an alternative method while you sign in in case you do not have access to your primary authentification method. Phone authentification should only be used as a backup method.

The longest login interval for personal devices is 30 days, but some user groups have shorter times, such as five days for staff. On a risk basis, you may be asked to log in more often.

You can disable unused authentication methods by clicking on the Delete button next to them. Deleting methods is necessary if, for example, you lose your ID or change your mobile phone with the Microsoft Authenticator application.

You can find solutions to the most common problems in the separate instructions.

Read Microsoft’s instructions for Multifactor Authentication deployment.