Go back to the Microsoft MFA page at the ITS Help Centre
Students can follow the steps below in the order provided to onboard themselves to Microsoft multi-factor authentication (MFA).
Note: Other authenticator services are useable but not supported.
Before You Begin
- All steps must be followed in the order provided.
- If accessibility issues prevent you from using any of the available authentication methods, please contact the Service Desk.
Phase 1. Soft Enrolment
Students will automatically begin seeing prompts to set up MFA when they attempt to log into Carleton services using their MyCarletonOne password. The prompts should match the screenshot below.
During this phase, students will be given the choice of the following:
- Click Next and follow the prompts to exit the Self Enrolment Phase and enrol in MFA.
- Click Skip for now (14 days until this is required) to continue on in the Self Enrolment Phase and access to the service they were attempting to log into. Please note that this option will disappear 14 days after it is first clicked. This means the Self Enrolment Phase has ended, at which point students will be required to click Next and set up MFA before accessing Carleton services. Details about how to set up MFA are covered in the remainder of this page.
Note: If the Self Enrolment Phase has ended and a student urgently needs to log into a Carleton service, they can request an exception by contacting the ITS Service Desk. In this scenario, the student in question would be required to set up MFA at a later time.
Phase 2. MFA Enforcement
Students who have exhausted the 14-day grace period will encounter a prompt that should match the screenshot below. This prompt signals that the grace period is now over and students will be prevented from logging into Carleton services until they have set up MFA.
To download and configure the Microsoft Authenticator, follow these steps:
- Click Next to proceed to the screen below
- Click Download now. You will be taken to a Microsoft page that directs you to the Microsoft Authenticator app within the Apple App Store or Google Play Store, depending on your device’s operating system. Download the app on your phone to proceed.
- Once you have downloaded the app, return to your browser window and click Next to proceed to the screen below.
- If prompted, allow notifications within the Microsoft Authenticator app. Then click + to add an account, and select Work or school.
- Select Scan QR code and a QR code scanner will activate on your phone
- On the screen below in your browser, click Next to reveal the QR code. Scan it using the app on your phone.
- Once you have scanned the QR code, your Cmail account will appear in the Microsoft Authenticator app on your phone.
- On the page below in your browser, click Next to proceed.
- An authentication prompt will provide a number. Type this number into the prompt that appears in the Microsoft Authenticator app on your phone and select Yes.
- The prompt will be approved. Click Next.
- This will conclude the steps to set up Microsoft Authenticator and MFA. Click Done.
How to Use MFA Once You Have Enrolled
For information on how to use MFA once you have enrolled, view our documentation page.