Multi-Factor Authentication FAQ

Setup with Your Old Device

1. Navigate to the MFA Setup Page in your computer browser. You will be required to perform MFA on your old phone or device to log in.
2. Click Add sign-in method on the Security info page.
3. In the Add a method window that opens in the browser, select Authenticator app.
4. If you haven't already, download the Authenticator app onto your device from the Apple App Store or Google Play Store. In the browser window, click Next.
5. Open the Authenticator app on your device and start the add account process in the app. In the browser window, click Next.
6. If prompted in the Authenticator app on your device, allow notifications and select Work or school as the account type. In the browser window, click Next.
7. In the Authenticator app on your device, select Scan QR code. Hold your device up to the computer screen so the QR code in the browser is in the scan window of the Authenticator app. The app should read the QR code and confirm "successfully added." In the browser window, click Next.
8. Complete the test MFA verification. You should receive a notification on your device. Tap this notification and the Authenticator app will open a window where you can enter the number displayed in your browser.
9. On the success screen, click Done. Your setup is complete.

Your new phone or device is now set up with MFA and you can use it to verify your identity when logging in to your St. Thomas account.

When Your Old Device Is Not Available

If you no longer have your old phone or device, you will need to call or physically visit the Tech Desk at 651-962-6230 for identity verification and a reset of your MFA method. Information on hours and in-person locations is available here.

The Tech Desk will verify your identity and reset your MFA configuration so you can set it up on your new device.

Hardware Security Token Alternative

If you do not have a phone or tablet capable of installing Microsoft Authenticator, you will need to purchase a security token (either on your own or through your department). The University of St. Thomas currently supports the Yubikey 5 and 5c NFC models.

1. Review the compatible devices and purchase options in the MFA: Yubikey Purchase Links and Setup Instructions article.
2. Follow the setup instructions provided in that article to configure your Yubikey on your computer.
3. Once configured, you can use your Yubikey to complete MFA verification when logging in to your St. Thomas account.

MFA While Away from Campus

Using the Microsoft Authenticator app or a Yubikey, you should easily be able to continue using your current phone or device for MFA while traveling, out of the country, or studying abroad.

• With cellular service or Wi-Fi: If you have cellular service or are connected to Wi-Fi on your phone or device while traveling, the app will continue to work as usual, typically through a push notification (a pop-up on your phone you approve to verify that it is you logging in).
• Without internet connection: If you have no cellular network or Wi-Fi on your phone or device, you can still use it for MFA. Open the Authenticator app on your phone or device and select your University of St. Thomas account. The app generates a 6-digit code every 30 seconds. This code does not require you to be on the internet or connected to cellular data, so you don't need phone service to sign in, which is beneficial for travelers.
• With Yubikey: If you use a Yubikey (as outlined in this article), authentication will continue to work as usual.

For the best travel experience, consider downloading the Authenticator app on your device before you leave so you have offline access to your authentication codes.