Set up MFA with the Microsoft Authenticator app to get fast, easy and secure access to our systems and services off campus.
We recommend that you use the Microsoft Authenticator app set to 'receive notifications for verification' to approve sign in for you university accounts. You also need to approve location sharing for MFA to work for you.
There have been several high-profile attacks on organisations through a successful MFA Fatigue attack. We have enabled new security features via the Authenticator app to protect against this type of hacking attempt, where available.
Number matching means you need to enter the number shown on the login page into your Microsoft Authenticator app to approve the authentication request. This protects against MFA fatigue attacks by making sure you are approving access to the system you need.
Additional Context will give you more information about the system you’re logging into and its location. This means you can check before deciding whether to approve or deny the request. Note, the location displayed may be that of your internet provider, not your device. If the location shown is not consistent with the country you are logging in from, do not approve access and contact the IT Service Desk for advice.
You will see number matching and additional context more frequently as these new security features are made available on additional systems.
We recommend that you use the Microsoft Authenticator app set to 'receive notifications for verification' to approve sign in for you university accounts. You also need to approve location sharing for MFA to work for you.
Install the Microsoft Authenticator app on your mobile device
Begin MFA mobile app setup
Open a browser on your device, go to and sign in to your university account.
The Authenticator app will add your account.
Send a notification to the app
Keeping the app open, return to the set up your account page and then select next. A notification will be sent to the Microsoft Authenticator app on your mobile device to test your account,
Approve sign in on your mobile device
Approve the notification in the app and then select next. Your settings will be updated to use the Microsoft authenticator app by default to verify your identity when using two step verification, or for password reset.
Add a second authentication method
On the phone setup page, choose whether you want to receive a text message or a phone call, add your phone number and then select next.
Note, if you are in the UK, when adding your phone number select United Kingdom (+44) and enter your mobile phone number without the leading zero.
A text message is sent to your phone number. Add the code provided by the text message sent to your mobile device, and then select next. Review the success notification, select next, and then select done
MFA setup complete
We recommend that you use the Microsoft Authenticator app set to 'receive notifications for verification' to approve sign in for you university accounts. You also need to approve location sharing for MFA to work for you.
Install the Microsoft Authenticator app on your mobile device
Begin MFA mobile app setup
Open a browser on your computer and go to
Generate a QR code to register app
The app should successfully add your account. Select next on the scan the QR code page on your computer.
Approve the notification and confirm activation
A notification is sent to the app to test your account.
Approve the notification in the app and then select next. Your settings will be updated to use the Microsoft authenticator app by default to verify your identity when using two step verification, or for password reset.
Add your phone number as a second authentication method
On the phone setup page, choose whether you want to receive a text message or a phone call, add your phone number and then select next.
Note, if you are in the UK, when adding your phone number select United Kingdom (+44) and enter your mobile phone number without the leading zero.
A text message is sent to your phone number. Add the code provided by the text message sent to your mobile device, and then select next. Review the success notification, select next, and then select done
MFA setup complete
We recommend that you use the Microsoft Authenticator app set to 'receive notifications for verification' to approve sign in for you university accounts. You also need to approve location sharing for MFA to work for you.
From a computer not on the university network, open a browser and go to
If configuration fails, delete the account and retry the previous steps again.
How does Multifactor Authentication work and should you use your personal phone for MFA at work?
Many people are concerned when their work asks them to use their personal phone for MFA. Should you? What are the privacy issues? What does your work collect about your phone? Do they have to install something?
is a Chief Information Security Officer who has led information security programmes for public and private sector organisations in the US, Canada and the UK. In this video he answers these questions, and more.
If you have a question about MFA which isn't shown here, then please get in touch with the IT Service Desk.
The university holds a large quantity of personal data of staff and students, as well as storing confidential research data with commercial value, which MFA helps protect. Once set up, MFA is easy to use and provides added protection against cyber-attacks which is especially important now as many of us are connecting from home.
MFA provides an additional layer of security to all our services, by requiring an additional piece of information in addition to your username and password to log in. All students, staff and affiliates must use MFA when logging on to our systems from an off-campus location.
MFA provides a 99.9% reduction in compromised accounts and will also help to protect your own personal information. The UK Government's National Cyber Security Centre recommends that you to protect your personal email and social media accounts too.
No. All students, staff and affiliates must use MFA when logging on to our systems from an off-campus location.
If you are concerned about the university asking you to use your personal phone to access our systems, please see the MFA and Privacy Explained section of this page for further information.
MFA provides a 99.9% reduction in compromised accounts and will also help to protect your own personal information. The UK Government's National Cyber Security Centre recommends that you to protect your personal email and social media accounts too.
Most university services will require you to provide MFA when off campus.
These include:
Please contact the IT Service Desk. You can also set up a second device in case this happens.
No. There is a "remember me" option so you will only need to authenticate periodically.
If you get a new phone then you will need to change the setup of your MFA. You can do this by following the instructions in the How to change your MFA preferences video.
Don't forget to remove your data before getting rid of old devices. Before you pass your phone on or give it to a charity; remove MFA from the device, delete all your information, restore it to its factory settings and wipe any memory cards.
Please decline the app notification and contact the IT Service Desk who can investigate further.
Please contact the IT Service Desk.
The recommendation is at least 2, so if you forget your mobile phone, for example, you have another method set up.