How do I register devices in Microsoft MFA?

All individuals at UIC will be enrolled in the MFA Transition Campaign in November 2026. This campaign will last until late January 2027. During this campaign, when you attenmpt to log in to an MFA-protected application (e.g. Outlook or Box), you will encounter a Secure Sign-in Portal where you can start the campaign to set up Microsoft MFA.

1. When you select Start, if you currently have any registered Microsoft MFA devices, you will be guided to review those. Follow the instructions on the page. When finished, scroll to the bottom, read the guidance, and select Confirm and Continue.
   
   
   
2. On the next page, read the content carefully to ensure you are ready to proceed. Then select Set up Microsoft MFA Methods.
   
   

If you have already completed the MFA Transition campaign, or you have Snoozed the campaign, you can follow these steps at any time to register new Microsoft MFA methods:

1. Visit aka.ms/mfasetup and log in with your UIC NetID and password.
   
   Note: This web page will automatically time out after 5 minutes.
2. The Microsoft MFA setup page will display your available sign-in methods. If you haven't already, review How do I choose the right MFA method for me?
   
   Note: it is strongly recommended that you set up Microsoft Authenticator as a backup method, while also setting up passkeys as your primary methods on your commonly used devices for the best sign-in experience.
   
   
    

Note: If you came to this article from the MFA Transition Campaign, read through these instructions as a preview of what you will do. Return to the campaign interface to complete the process.

The below instructions allow you to set up a passkey in Microsoft Authenticator, as well as push-style MFA and one-time passcodes, in one smooth process.

Summary instructions are provided below for setting up a Passkey in Microsoft Authenticator. More detailed instructions can be found on Microsoft's support site.

1. Use your mobile device to install the Microsoft Authenticator app on your iOS or Android device.
    
2. When first opening the Authenticator app, decide whether to share additional data to Microsoft and select Continue.
    
3. Select Work or school account in the Authenticator app to continue.
   
   
    
4. Sign in to your UIC account, verifying your identity with Duo 2FA.
    
5. On the following screen in the Authenticator app, select Continue.
   
   
    
6. If you are prompted to do so, enable Autofill and Push Notifications for the Authenticator app. The Authenticator app will generate your MFA configuration and then show you an Account Added screen. Select Done.
   
   
    
7. On the Microsoft Security Info site, confirm your new methods are listed. If you haven't already done so, move on to setting up a Synced and Device Passkeys for the best sign-in experience.

Note: If you came to this article from the MFA Transition Campaign, read through these instructions as a preview of what you will do. Return to the campaign interface to complete the process.

1. Select + Add sign-in method and then Passkey.
   
   
    
2. On the next screen, select Next.
   
   
    
3. It is possible that you will encounter the following screen. If you do, this means the device you're using does not detect a place to create a passkey directly. This typically happens if you are not signed in to your browser (e.g. Chrome) or preferred password manager (e.g. Apple Passwords). Please visit How do I troubleshoot problems with Microsoft MFA? and refer to the relevant password manager section for guidance on resolving this issue. Once you have resolved this, restart this process at step 1.
   
   
    
4. Once you see a screen saying Setting up your passkey..., select Next and your device will prompt you to create a passkey in your password manager (e.g. Google Password Manager, Apple Passwords, Microsoft Password Manager, Bitwarden, etc). Examples are shown for Apple Passwords and Bitwarden.
   
   
   
   
   
    
5. Once created, you will be prompted to name your passkey. Enter any name that is easily identifiable to you.

1. Select + Add sign-in method and then Passkey.
   
   
    
2. On the next screen, select Next.
   
   
    
3. It is possible that you will encounter the following screen. If you do, this means the device you're using does not detect a place to create a passkey directly. This typically happens if you are not signed in to your browser (e.g. Chrome) or preferred password manager (e.g. Apple Passwords). Please visit How do I troubleshoot problems with Microsoft MFA? and refer to the relevant password manager section for guidance on resolving this issue. Once you have resolved this, restart this process at step 1.
   
   
    
4. Once you see a screen saying Setting up your passkey..., select Next and your device will prompt you to create a passkey on your device (e.g. Windows Hello). 
   
   
   
   
    
5. Once created, you will be prompted to name your passkey. Enter any name that is easily identifiable to you. Then select Done.

1. Select Add Sign-in Method. On the following screen, select Passkey.
   
   
2. On the next screen, select Next.
   
   
    
3. If prompted, select to save your passkey to a Security Key.
   
   
   
   
   
   
    
4. When prompted, insert the security key.
   
   
    
5. Follow the prompts to choose and enter a PIN for your security key. Note: This is a PIN that you create.  Keep it safe and do not share it with anyone. If you lose or forget your YubiKey PIN, you will have to work with the YubiKeyYubiKey Manager application to reset your PIN, or work with the YubiKey manufacturer directly.
   
   
   
    
6. When prompted, touch the security key again.
   
   
   
    
7. Select Allow for the site to interface with the security key.
   
   
   
    
8. Name your security key, select Next, and you are done!

1. Select Add Sign-in Method. In the pop-up window, seleect Hardware Token.
   
   

2. A pop up window will ask for the hardware token Serial Number. 

   

   You can find your Hardware Token's serial number on the back of the device. 

   
    

3. Enter a name for your Hardware Token.
   
   
    

4. The next pop up will ask for the 6-digit verification code on the device you just registered. Enter the code.
   
   
    

5. The next pop up screen will have the confirmation that your device has been added to your Microsoft account.
   
   
    

6. Your New C200 Hardware token will now be listed on the Security Info screen.