Two-step authentication

We often use only a password to access our data. If someone were to hack you or look over your shoulder, however, your data become available to others. Two-step verification complements your password with another factor: something that you have. An example is a request on your telephone for additional confirmation to log in, also called a token. You then have to accept this additional confirmation after you have entered your password. In effect, it is a double check. Banks have been using two-step verification for much longer (such as TAN codes or an identifier).

Yes, of course. If you select the Microsoft Authenticator app, you do not require a mobile number. You should bring your device to work, though. Should you fail to register your mobile number, you will need to visit the FS desk in order to re-register if you replaced a lost phone. This process requires an identity document.

The Microsoft Authenticator app is available for iOS and Android. Use the links to check whether your device is compatible. If your device is unsuitable for the app, you have another option. During the registration wizard, select Telefoon [Telephone] as two-step verification. You will be called and asked to press the # button as additional confirmation when logging in. You should bring your device to work, though.

It works exactly the same domestically and abroad. You might be asked to confirm your login more often abroad, however.

If your phone does not have a signal or an active internet connection, use the code from the Authenticator app. You can select another method while logging in.

As each code is only visible for 30 seconds, you will never have the same code twice. These codes are one-off, so you need not remember them.

If you have a new telephone as well as a new mobile number, you need to re-register. To do so, go to https://idm.student.hva.nl, click on Two-step verification for Microsoft Cloud, log in and click on Reset two-step verification for Microsoft Cloud.

Should your new phone have the same number that you also registered in accordance with the manual, you can re-register the Microsoft Authenticator app using this mobile number. Follow the instructions for setting up two-step verification on this page.

There could be several reasons why installing the app does not work.

• I do not have an active internet connection on my mobile phone or tablet.
• Find an active internet connection, which you need in order to download the app.

Your telephone may have been configured only to enable downloading apps via Wi-Fi. Turn off this option (please note: your data use may incur higher costs) or find a spot where you can connect to Wi-Fi and try again.

The apps require access to your camera, which you need in order to scan QR codes during the installation and the use of two-step verification. These apps only activate your camera for the above purposes.

I am registering from my telephone.
You will not succeed. What you need is a device to display the QR code (preferably a PC) and a tablet or smartphone to scan the QR code.

I am using two devices.

I am having problems with the camera.

• You cannot use the Microsoft Authenticator app without a functioning camera. In this case, set up your telephone number for two-step verification.
• The app does not automatically open my camera. Close and reopen the app.
• If it still does not work, restart your phone and try again.

I have waited too long.
You are now unable to scan the QR code. Close the browser of your PC as well as the app and start over.

Tips to scan the QR code properly:

• hold your telephone perfectly still while scanning. It may take a while before the scan is made, as your camera needs to focus on the QR code;
• ensure that the QR code is fully visible while scanning;
• ensure that only the QR code is visible while scanning;
• do not hold your finger or other objects in front of the camera while scanning;
• increase the brightness of your computer screen to enhance the contrast of the QR code and facilitate the scanning process of your camera.

Visit https://aka.ms/mfasetup. If you are having difficulties, follow the instructions on this page.

Yes, we recommend it. If you do, you will always have a back-up method. To add multiple methods, visit https://aka.ms/mfasetup.

Check the app settings on your telephone. Make sure that notifications are enabled. If they are, check the following settings:

• is your telephone set to Do Not Disturb or Silent Mode? This set-up may interfere with push notifications;
• are you receiving notifications from other apps? If not, the issue could rest with your device or with the Android or Apple push protocol;
• are you receiving notifications from other accounts in the app? Log into https://aka.ms/mfasetup and delete the device in question. Next, delete the associated account from the app and add it again.

Yes you can. You can find further details here.

Outdated or special apps may not be able to handle two-step verification. In this case, choose one of the following apps:

• the standard Mail app on iOS 11.x or later;
• Outlook on iOS 10.x or later;
• Outlook on Android.

When setting up the two-step verification, choose the option to register your mobile phone number. With this method you will be called at the specified number and then give a confirmation by typing #.

You can request a temporary exemption, valid for four days. To apply, go to https://idm.student.hva.nl, click on Two-step verification for Microsoft Cloud, log in and click on Request temporary exemption two-step verification for Microsoft Cloud.

Choose to add an Alternate phone.

You can, but we recommend that you always use a VPN connection for MS Teams and OneDrive.