What are the different ways I can sign in using Microsoft Authenticator?

Overview

Microsoft Authenticator gives you several ways to securely verify your identity when signing in with your UIC account.

Depending on the application, device, and sign-in method you choose, you may use Microsoft Authenticator in one of three ways:

  • Passkey – Sign in using the passkey stored in Microsoft Authenticator and verify your identity using your phone's face recognition, fingerprint, or PIN.
  • Push notification – Receive a notification in Microsoft Authenticator, enter the two-digit number displayed on the sign-in screen, and approve the request.
  • One-time passcode – Open Microsoft Authenticator and enter the six-digit verification code displayed for your UIC account.
Recommended: When available, use your passkey. Passkeys provide a faster, more secure, and phishing-resistant way to sign in.

Table of Contents

Sign In Using a Passkey in Microsoft Authenticator

A passkey is the recommended way to use Microsoft Authenticator when it is available.

A UIC passkey stored in Microsoft Authenticator is tied to your device. Instead of entering your UIC password and then completing a separate MFA prompt, the passkey can securely verify your identity using your phone and its face recognition, fingerprint, or PIN.

Note: A passkey in Microsoft Authenticator is stored on the phone where you created it. It does not automatically sync to your other devices.

Using Your Passkey on Your Phone

  1. Open the university application or website you want to use and begin signing in with your UIC account.

  2. If you are not automatically prompted to use your passkey, select Other ways to sign in or Sign-in options, and then select Face, fingerprint, PIN, or security key.

    microsoft verify identity prompt

  3. Select the passkey associated with your UIC account.

    phone passkey prompt

  4. Verify your identity using the method requested by your phone, such as face recognition, fingerprint, or your device PIN.

  5. After your identity is verified, the sign-in completes automatically.

Using Your Authenticator Passkey on Another Computer

You can also use the passkey in Microsoft Authenticator to sign in on another computer, such as a classroom, computer lab, or shared computer. This process requires that Bluetooth is enabled on both devices.

  1. On the computer, begin signing in with your UIC account.

  2. Select Other ways to sign in or Sign-in options, and then select Face, fingerprint, PIN, or security key.

  3. When asked where your passkey is located, select Use a phone, tablet or security key.

    microsoft prompt to use other device passkey

  4. A QR code will appear on the computer. Scan the QR code using your phone.

    passkey qr prompt

  5. Follow the prompts on your phone to use the passkey and verify your identity using face recognition, fingerprint, or your device PIN.

    ios passkey selection screen
     

Note: Cross-device passkey sign-in requires Bluetooth and an internet connection on both the phone and the computer. The devices must be near each other, but they do not need to be connected to the same network.

Sign In Using a Microsoft Authenticator Push Notification

You can also use Microsoft Authenticator to approve an MFA request sent to your phone.

With this method, Microsoft displays a two-digit number on the device where you are signing in. You must enter that number in Microsoft Authenticator before approving the sign-in.

  1. When you log in, you may be prompted to use a passkey; simply Cancel that prompt.
     
  2. You will then need to choose to use your password

    microsoft prompt to choose a way to sign in
     
  3. After entering your password, you will be provided a list of options to verify your identity. Select Approve a request on my Microsoft Authenticator app.

    microsoft prompt to verify identity
  4. A two-digit number will appear on the device where you are signing in. Open Microsoft Authenticator on your phone, enter the number shown on the sign-in screen, and approve the request.

    microsoft authenticator code prompt

    microsoft authenticator app prompt

After you approve the request, the sign-in completes on your other device.

Important: Only approve an authentication request that you initiated. If you receive a Microsoft Authenticator notification when you are not attempting to sign in, select Deny. Never enter a number provided to you by another person.

Sign In Using a One-Time Passcode

Microsoft Authenticator also generates a one-time verification code for your UIC account. This is useful when you cannot receive an Authenticator notification or have limited network connectivity.

The verification code is generated directly on your phone, so your phone does not need an internet connection or cellular service to generate the code.

  1. When you log in, you may be prompted to use a passkey; simply Cancel that prompt.
     
  2. You will then need to choose to use your password

    microsoft prompt to choose a way to sign in
     
  3. After entering your password, you will be provided a list of options to verify your identity. Select Use a verification code.

    microsoft prompt to verify identity
  4. Open Microsoft Authenticator on your phone, find the One-time password code, and enter that code on the login screen.

    microsoft authenticator app code

  5. Enter the code into the Microsoft sign-in screen to complete authentication.

Traveling or without service? Microsoft Authenticator can generate one-time verification codes without Wi-Fi, cellular service, or an internet connection. This makes the one-time passcode a useful backup when you have your phone but cannot receive a push notification.

Which Method Should I Use?

The method available to you may vary depending on the application, device, browser, and authentication methods registered to your UIC account.

When you have a choice, we recommend using the following order:

  1. Passkey – Recommended when using your phone

    Use your Microsoft Authenticator passkey when on your phone. Passkeys provide a fast, phishing-resistant way to sign in.

  2. Push notification

    If a passkey is not available, use the Microsoft Authenticator notification and enter the two-digit number displayed during sign-in.

  3. One-time passcode

    Use the verification code in Microsoft Authenticator when the other methods are unavailable, especially when your phone does not have an internet connection.

What Should I Do If I Receive an Unexpected Sign-In Request?

If Microsoft Authenticator displays a push notification or sign-in request that you did not initiate:

  1. Do not approve the request.

  2. Select Deny if Microsoft Authenticator gives you the option.

  3. Do not enter a two-digit number supplied by another person.

  4. Never provide your Microsoft Authenticator one-time passcode to someone else.

  5. If you believe another person may know your UIC password or is attempting to access your account, change your UIC password and contact the Technology Solutions Service Desk.

Security reminder: Technology Solutions staff will never ask you to approve an unexpected Microsoft Authenticator request or ask you to provide your passkey, Microsoft Authenticator verification code, or device PIN.
Print Article

Related Articles (4)

How do I register devices in Microsoft MFA?
This article provides a guide to registering devices in Microsoft MFA.
How do I troubleshoot problems with Microsoft MFA?
This article walks through troubleshooting some potential problems encountered with setting up or using Microsoft MFA.
What do I need to know about Microsoft Multi-factor Authentication (MFA)?
As the University of Illinois transitions to Microsoft Multi-factor Authentication (MFA), this article highlights some of the key changes and improvements to expect.
What is the simplest way to set up Microsoft MFA as a replacement for Duo?
If you currently use Duo Mobile on your phone to approve UIC sign-ins and want the simplest way to transition to Microsoft MFA, we recommend setting up Microsoft Authenticator.