How do I setup multifactor authentication (MFA)?

MFA Microsoft-Authenticator-App Multi-Factor-Authentication Multifactor-Authentication 2FA Two-Factor-Authentication Authentication Microsoft-Authenticator multi-factor

Notice: Microsoft will no longer be supporting SMS or Voice Authentication methods as of February 2027

If you currently receive a text message code or a phone call to verify your identity — that method will stop working after January 31, 2027.
If you are already using the Microsoft Authenticator App to receive push notification alerts as your primary authentication method, your login process will continue to work exactly as it does today.

Note: Registering a device allows your phone to approve sign-ins. It does not give TRU access to your phone or personal data.

Important Information

Ensure you set up at least two authentication methods that includes: (step 1) Microsoft Authenticator App and either (step 2) synced key or (step 3) YubiKey/FIDO2.
- We recommend setting up the Microsoft Authenticator App on more than one device if you have a second device available.
Provide an alternate email address. This will allow you to reset your password if you forget it.
MFA prompt locations: MFA is typically prompted when signing in off campus and is usually not required when connected to TRU’s wired or wireless networks on campus.

Step 1: Set up Microsoft Authenticator App (required)

Step 1: Install the Microsoft Authenticator app

Download the app from Microsoft:

https://www.microsoft.com/en-ca/security/mobile-authenticator-app

Step 2: Set up MFA

Go to https://aka.ms/mfasetup.
Sign in using your TRU account.
Select Add sign-in method if prompted.
Choose Authenticator app.
Follow the on-screen instructions to complete setup.

Learn more: Add your work or school account to Microsoft Authenticator

Step 2: Add Synced PassKey (if you do not have YubiKey/FIDO2 hardware key) (required)

Note: Synced keys are not available if you have a FIDO2 key (Yubikey) issued by TRU Information Security Department.

Creating a Synced Passkey:

Start your preferred browser where you want your key to be stored (Microsoft Edge, Chrome, Safari, etc). (note -- If you want the key installed in multiple browsers (because you frequently use more than one). Repeat these steps starting with launching the browser for each browser you use).
Navigate to your security settings: My Sign-Ins | Security Info | Microsoft.com (https://mysignins.microsoft.com/security-info)
Select Add sign-in method
Select Passkey then press NEXT
You will be prompted to create a passkey. Press CREATE.
Follow the prompts. You will need to specify a password or code to protect the key.
Once successful, a Passkey entry will be listed in your configured MFA options. (as per step 1 you can create a key for all browsers you frequently use)

Using your synced passkey

Go to any website that uses our single sign on (SSO) and log in. (example: moodle.tru.ca)
When logging in you should be prompted with the synced passkey option
Enter your password/code you used to protect the key then press CONFIRM.

Step 3: Register a YubiKey/FIDO2 hardware key (if you have one)

Thompson Rivers University supports FIDO2 capable hardware keys (such as YubiKeys). These keys offer the highest form of multifactor authentication protection. Many manufacturers support FIDO2. https://www.amazon.ca/s?k=fido2

Authenticating with a YubiKey/FIDO2 on PC/Mac:

The YubiKey/FIDO2 works by generating a unique code when you touch the key, called the BUTTON in the instructions below.

Plug the YubiKey/FIDO2 into an available USB port on your computer. If this is the first time, it will take a few moments to install drivers and complete an initial configuration.

Authenticating with a FIDO2 key:

Ensure the FIDO2 key is plugged into an available USB port on the computer that you are using
Enter your TRU username and password
If asked, select your authentication method (security key)
When prompted, touch the button on the YubiKey/FIDO2.

You do not need to keep the key plugged into your computer once you have authenticated.

Step 4: Provide a Password Reset Alternative Email

Add an alternative email to your profile. This will allow you to reset your password in the event you forget it.

1. Go to https://mysignins.microsoft.com/security-info

2. Select +Add a Sign-In Method then select EMAIL

3. Enter your personal email address to send reset password codes to.

Update or Change Existing MFA Settings

After Microsoft Authenticator is set up, you can change or add verification methods at any time.

Go to https://aka.ms/mfasetup

https://support.microsoft.com/en-us/account-billing/change-your-two-step-verification-method-and-settings-c801d5ad-e0fc-4711-94d5-33ad5d4630f7

Other MFA options

For a full list of available MFA options, visit the Multi-factor authentication (MFA) overview article.

Additional Support

For further assistance with Microsoft MFA setup, review the Microsoft MFA support guidance and TRU MFA information below.

Microsoft Support: common-problems-with-two-step-verification-for-a-work-or-school-account

TRU MFA Information: Microsoft Multifactor Authentication FAQ

Need your MFA Methods Reset? Submit a Support Request through the links below for assistance.

Create MFA Reset Request Ticket

0 reviews

Print Article

Updating...

How do I setup multifactor authentication (MFA)?

Notice: Microsoft will no longer be supporting SMS or Voice Authentication methods as of February 2027

If you currently receive a text message code or a phone call to verify your identity — that method will stop working after January 31, 2027.

If you are already using the Microsoft Authenticator App to receive push notification alerts as your primary authentication method, your login process will continue to work exactly as it does today.