How to use and manage MFA methods

See detailed help tab.

Authentication methods management site

Go to the authentication methods manager ata

Log in to the service. Enter your username in the form (e.g.


You will be directed to the university's login page.


Managing authentication methods

After logging in, you can access the “Security Info” page where you can manage authentication methods.

You can add a new authentication method in the “Add method” section. Select the authentication method to be added from the list. We strongly recommend that you add at least two authentication methods!
Confirm authentication on your phone to add the Authenticator application.

Changing the default method

The default method is automatically enabled when stronger authentication is required. In this case, the login service will send a verification request to the Microsoft Authenticator application or call you, depending on the method you have chosen.

You can change the authentication method above Add method with the option Default sign-in method: <default method> Change .
Note! This option is only displayed when at least two authentication methods are used.
The site has an error that will not display the change button until the Security Info page has been reloaded (press F5) after adding another method.

Deleting an authentication method

You can disable unused authentication methods by clicking on the Delete button next to them. Deleting methods is necessary if, for example, you lose your ID or change your mobile phone with the Microsoft Authenticator application.

Adding an authentication method

You can add a new authentication method in the Add method section. Select the authentication method to be added from the list.

  • AThe Authenticator app is usually the easiest to use.
  • Security key means a FIDO2-compatible USB/NFC key.

Adding the Authenticator app

This guide is for Microsoft Authenticator, the easiest and safest application to use because it allows you to get a certificate-based Yes/No  approval to verify your login on your phone. You can also use other apps to access a numeric code that changes every 30 seconds. In this case, select I want to use a different authenticator app in the first step, and continue as described.

Download the Microsoft Authenticator application on your phone and click Next to move forward in your browser.

In the Authenticator app, select Add an account and Work or school. Click Next to move forward in your browser.

In the Authenticator app, select Scan a QR code and scan the QR code displayed on the screen. Click Next to move forward in your browser.

Confirm authentication on your phone.

Click Next in your browser to return to the authentication methods manager.

Adding a phone

Enter your phone number and, if necessary, select a phone call as the method. Select Next to continue.

The automated service will call your number. Follow the instructions and press "#" to accept the authentication.
Please note! Many browsers use American English by default. In this case, the # sign is referred to as a pound key in the call.
Pay attention to information security! Only accept the authentication if you are personally logging in to the service. You will never be asked to give your username or password over the phone; the approval is always given by pressing the "#"sign.

The service will confirm the selection and the phone number is now registered. Select Done to close the window.

Adding a USB Security Key

Note! While writing this help, adding a security key does not work on Linux, but security keys can be used in a Linux/Chrome combination. This manual is based on the assumption that you have a FIDO2-compliant USB security key that has been preconfigured according to the supplier's instructions.

Select the type of security key. The instruction have been made for a USB key.

Click Next to move forward. You will move on to the FIDO2 authentication of the operating system.

The next steps may vary depending on your operating system, security key model and browser, so please follow the on-screen instructions. The steps below are an example of how to register with Windows 10 and Chrome browser.

Windows Security: Security key setup window: click OK to proceed.

Click OK to confirm access to the security key.

Insert the safety key as instructed in the USB port.

Enter the PIN code you set up when installing the key.

Touch the security key ID to confirm the authentication

The security key is set, select Done.

Enter a name for the security key to distinguish it from other authentication methods. Finally, select Next.

Give feedback

The instructions site of the University of Helsinki's IT Helpdesk helps you with IT-related issues related to your work. Let us know how we can improve our instructions. We greatly appreciate your feedback!

How would you improve these instructions?
Back to top