Enrolling into Microsoft Authenticator MFA

The College will incorporate Microsoft (MS) Authenticator as a two-factor authentication solution to improve the College's information security posture. To continue using your account, enrollment in two-factor authentication is required. Please complete enrollment by the deadline provided in the communications you received. Accounts not enrolled by that date will be suspended.

First Time Enrollment

To enroll into MS Authenticator for the first time, you will need two devices: your phone, and a computer or tablet.

1. From your computer or tablet, open an incognito tab in Chrome and login at email.css.edu with your CSS credentials.
2. Upon login, you will be prompted to enroll into Microsoft Authenticator.
3. Proceed through the prompts on your computer until presented with a QR code.
   1. On your phone, open the Microsoft Authenticator app.
   2. Select the plus icon  and select "Add account."
   3. Select "Work or School Account"
   4. Select "Scan a QR Code"
   5. Scan the code right off your computer or tablet's screen.

Update Previous Enrollment

If you previously enrolled in MS Authenticator using SMS (text message) or voice call verification, you will need to update your enrollment.

To update your previous enrollment to use the app, you will need two devices: your phone, and a computer or tablet.

1. From your computer or tablet, sign in to the Security info page of your work or school account at mysignins.microsoft.com/security-info.
   • Note: If you don't see the Security info page, go to Additional security verification, then select the checkbox next to Authenticator app, and then select Configure to display your QR code.
2. On your computer or tablet, select " Add sign-in method."
3. On your computer or tablet, choose "Microsoft Authenticator" from the dropdown and select "Add."
4. On your computer or tablet select "Next" to display a QR code.​​​​​​​
   1. On your phone, open the Microsoft Authenticator app.
   2. Select the plus icon  and select "Add account."
   3. Select "Work or School Account"
   4. Select "Scan a QR Code"
   5. Scan the code right off your computer or tablet's screen.
      • Note: If you can't use your camera to scan a QR Code, click "Can't scan the image" on your computer or tablet and tap "Enter code manually" on your phone.

Frequently Asked Questions

What is MS Authenticator?

Microsoft (MS) Authenticator is an application that provides a cloud-based software service that utilizes two-factor authentication to ensure secure access to services and data.

What is two-factor authentication?

Two-factor authentication (2FA) adds an extra layer of security to the login process. In addition to entering your password, you must provide a second piece of information or use a physical device to verify your identity. This additional step helps safeguard accounts from remote attacks that attempt to use stolen usernames and passwords.

Why do we need two-factor authentication?

Login credentials are more valuable than ever and are increasingly easy to compromise. Over 90% of breaches today involve compromised usernames and passwords.

Two-factor authentication enhances the security of your account by using a secondary device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.

How will MS Authenticator change my login experience?

When logging in to an application protected by MS Authenticator, you will still enter your CSS username and password. After you input your login information, MS Authenticator requires you to complete a second-factor authentication method. Think of MS Authenticator as another way to help ensure that only you have access to your account!

Why is this changing?

Microsoft has announced that it will retire Microsoft-provided SMS and voice call authentication for all accounts by September 1, 2026. This change is part of a global industry move toward "phishing-resistant" authentication, as traditional text and voice-based MFA methods are increasingly vulnerable to sophisticated cyberattacks like phishing and SIM-swapping.

• Effective September 1, 2026: If you currently use SMS or voice calls for MFA, you will see a prompt to register a more secure method—such as a Passkey or the Microsoft Authenticator app—the next time you sign in.
• Effective September  1, 2026: Microsoft-provided SMS and voice call authentication will no longer be available. You will be required to use a stronger, phishing-resistant method to access your account.

What do I need to do?

We strongly encourage you to transition to the Microsoft Authenticator app at your earliest convenience to ensure you are prepared for these upcoming requirements. Using the Authenticator app is faster, more secure, and provides a smoother sign-in experience than waiting for a text message or a phone call.

How can I confirm my enrollment?

Confirm your enrollment by going to the Security info page of your work or school account at: https://mysignins.microsoft.com/security-info

• You can double-check by logging-in with a new Incognito or Private browser window - you should be prompted to approve the login on the Microsoft Authenticator app on your phone.
• If you have forgotten your password or experience difficulties signing in, you can reset your password at css.edu/forgotpassword