How to take Multifactor Authentication into use

Forced deployment happens when you log in to a service that requires Multifactor Authentication with a University of Helsinki username and password, but you have not enabled Multifactor Authentication. In this case, you will be asked for more information after the university's login window:

The Next button takes you to the Additional security verification page, where you can add the first authentication method..

Employees of the University of Helsinki have their work telephone number enabled by default, but you can also choose an authentication application or enter a different phone number as a method. We strongly recommend that you also add another authentication method! For instructions, see the Use and management of MFA methods page.

Authenticator app authentication

1. Download the Microsoft Authenticator application on your phone and click Next to move forward in your browser.
2. In your browser, move forward using the Next button until you reach the option Scan the QR code.
3. a) The first time you use the Microsoft Authenticator app, the app opens a wizard with the options Sign in with Microsoft, Add work or school account and Scan a QR code. Select Scan a QR code and scan the QR code displayed on the screen.
   b) If you have used the Authenticator app before, open the app and select Add an account > Work or school account > Scan a QR code and scan the QR code displayed on the browser screen with the phone camera.
   Once the account is added to the app, click Next to move forward in your browser.
4. Confirm authentication on your phone to add the Authenticator application.
5. Finally, you will be able to move on to the service you wanted to log in to.
6. Note! We strongly recommend that you register at least two authentication methods. For instructions, see the Use and management of MFA methods page.

Phone authentication

1. Enter your phone number and select a phone call as the method. Select Next to continue.
2. The service will call your number. Follow the instructions and press "#" to accept the authentication.
   • Please note! Many browsers use American English by default. In this case, the # sign is referred to as a pound key in the call.
   • Pay attention to information security! Only accept the authentication if you are personally logging in to the service. You will never be asked to give your username or password over the phone; the approval is always given by pressing the “#” sign..
3. The service will confirm the selection and the phone number is registered. Select Done to close the window.
4. Finally, you will be able to move on to the service you wanted to log in to.
5. Please note! We strongly recommend that you register at least two authentication methods. For instructions, see the Use and management of MFA methods page.

NOTE! Use a computer for registration as you cannot use your phone’s camera to scan a QR code on the screen of the same phone.

Go to https://mysignins.microsoft.com/security-info and enter your username in the form username@ad.helsinki.fi (e.g., rkeskiva@ad.helsinki.fi).

You will be forwarded to the university login page.

After logging in, you can access the Security Info page where you can manage authentication methods.

You can add a new authentication method in the Add method section. Select the authentication method to be added from the list.

You can later change the precedence of the authentication methods by following these instructions.

Authenticator app authentication:

1. In your browser, move forward using the Next button until you reach the option Scan the QR code.
2. a) The first time you use the Microsoft Authenticator app, the app opens a wizard with the options Sign in with Microsoft, Add work or school account and Scan a QR code. Select Scan a QR code and scan the QR code displayed on the screen.
   b) If you have used the Authenticator app before, open the app and select Add an account > Work or school account > Scan a QR code and scan of the QR code displayed on the browser screen with the phone camera.
   Once the account is added to the app, click Next to move forward in your browser.
3. Confirm authentication on your phone to add the Authenticator application.

Phone authentication:

1. Enter your phone number and select a phone call as the method. Select Next to continue.
2. The service will call your number. Follow the instructions and press "#" to accept the authentication.n.
   • Please note! Many browsers use American English by default. In this case, the # sign is referred to as a pound key in the call.
   • Pay attention to information security! Only accept the authentication if you are personally logging in to the service. You will never be asked to give your username or password over the phone; the approval is always given by pressing the "#"sign.
3. The service will confirm the selection and the phone number is registered. Select Done to close the window.