20
Arup MFA Enrolment
Arup
MFA Enrolment
2
2
In order to enrol begin the MFA enrolment process it is advisable to do so in Incognito mode in your Chrome Browser. This is to avoid a clash with an existing online Microsoft service you may already use in your organisation.
In the chrome browser select the settings icon (three dots in the top right of the screen) and select
‘New Incognito window’
3
3
Your browser screen will change colour. Browse to:
http://aka.ms/MFASetup
4
4
You will now be taken to the start of the MFA enrolment process
The username that you should use here will be a combination of your usual, ARUP, provided SharePoint username followed by ‘@arup.com’.
E.g.:
Please Note: Do not use the format global\[email protected]
Laptop/PC Screen
5
5
MFA Enrolment
You will then be informed that more information is required to validate your
identity
Please click on ‘Use different account’ to allow you to enter your Arup details
On the next screen you will be presented with option ‘use another account’. Select
this option
Laptop/PC Screen
Laptop/PC Screen
6
6
As before the username that you should use here will be a combination
of your usual, ARUP, provided SharePoint username followed by
‘@arup.com’.
E.g.: ‘[email protected]’ then click next
MFA Enrolment
You will then be redirected to an Arup site to enter your password
Please enter your SharePoint password on this page
MFA Enrolment
Once signed in you may be greeted with a security warning box
Select ‘Yes’ to allow your browser to save this site to your trusted sites
MFA Enrolment
9
9
MFA Enrolment
Once successfully authenticated you will be asked to set up MFA
authentication, click on the set it up now button to start the MFA enrolment
wizard
Laptop/PC Screen
1
0
10
MFA Enrolment
The first page of the MFA enrolment wizard asks you to specify your
preferred authentication method, the authentication methods currently
available are:
• Authentication via the Microsoft Authenticator mobile app
• Authentication via mobile phone (text message or phone call)
• Authentication via a landline (phone call)
In this example we have chosen the main option to authenticate using the
Microsoft Authenticator mobile application which can be downloaded from
the Apple or Google App store.
It is recommended that the Microsoft Authenticator mobile app is used
wherever possible
Laptop/PC Screen
1
1
11
MFA Enrolment
Once you have selected your preferred authentication method the wizard will
prompt you to configure additional parameters relevant to the authentication
method chosen. In this instance we have chosen to authenticate using the Microsoft
Authenticator app so are given the option to configure MFA verification via push
notification or by entering a verification code supplied by the app.
To use the Microsoft Authenticator app you must first set it up by clicking on the
blue set up button
Laptop/PC Screen
1
2
12
MFA Enrolment
The mobile app configuration page allows you to configure the authenticator app by
scanning an image or entering an app code.
To continue with configuration open the Microsoft Authenticator app on your
mobile device
Laptop/PC Screen
1
3
13
MFA Enrolment
Select Work or school account from the list of account types
Mobile Device Screen
1
4
14
Azure MFA Enrolment
Configure the authenticator app by either:
• Scanning the image displayed on the mobile app configuration page with your
mobile device (the image must be within the green crosshairs)
• Entering the app code displayed on the configure mobile app page by selecting
“Or enter code manually”
Mobile Device Screens
1
5
15
MFA Enrolment
Upon successful setup of the mobile authenticator app a verification test is
initiated. The type of test carried out differs depending on the options chosen
during setup. In this example push verification was selected therefore the
authenticator app prompts us to approve access
Laptop/PC Screen
1
6
16
MFA Enrolment
Click approve to complete MFA authentication
Mobile Device Screen
1
7
17
MFA Enrolment
After successfully authenticating with the mobile app you will be asked to provide a
telephone number for phone verification. Phone verification can be used as the
second factor of authentication if you lose access to the mobile app
Laptop/PC Screen
1
8
18
MFA Enrolment
On exiting the wizard you will be presented with your profile page, click sign
out everywhere to sign out of your Microsoft account
Laptop/PC Screen
1
9
19
Arup MFA – user FAQs
• What if I already use Microsoft Authenticator for access to other, non Arup, services?
If you are using the Authenticator App with the ‘Enter Code’ method
then, when you open the App on your mobile device to enter your
code, you will see a screen similar to the one here
The Arup code is clearly labelled
If you have chosen to use either the push notification function of the
app, a text notification or voice message MFA will know which of
your accounts it needs to provide a code for and will notify you
accordingly
Mobile Device Screen
2
0
20
Arup MFA – user FAQs
• What do I do if I do not wish to receive calls or texts to my personal phone?• You have another two options you can use which are Authentication via a landline (phone call) or Authentication via the
Microsoft Authenticator mobile app.
• Will I be charged for receiving texts?• If you are not normally charged for receiving texts to your mobile phone and if accessing from within your normal country
no charges will be received for the MFA texts.
Please bear in mind the text might take a few moments to arrive to your phone
• How does MFA affect System to System or App to App communication?• The MFA system is only in use for real people – system to system or app to app authentication should take place using app
keys, which should be unique and long, but MFA will not impact this
• What if I encounter an error when trying to enrol ?• Please liaise with your usual Arup point of contact with any enquiries
