Enrolling into Microsoft Authenticator MFA

Tags MFA MSAuth

The College will incorporate Microsoft (MS) Authenticator as a two-factor authentication solution to improve the College's information security posture. Alumni of the College will use two-factor authentication to access your email and other College services. On June 30, 2025, all alumni* of the College will be enrolled into MS Authenticator, and MFA will be required. An enrollment period will begin April 28, 2025.
*Current, active employees or students of the College who are also alumni do not need to enroll into MS Authenticator. Active employees and current students will continue to use Duo MFA (must be an active employee or current student to view this link).

What is MS Authenticator?

Microsoft (MS) Authenticator is an application that provides a cloud-based software service that utilizes two-factor authentication to ensure secure access to services and data.

What is two-factor authentication?

Two-factor authentication (2FA) adds an extra layer of security to the login process. In addition to entering your password, you must provide a second piece of information or use a physical device to verify your identity. This additional step helps safeguard accounts from remote attacks that attempt to use stolen usernames and passwords.

Why do we need two-factor authentication?

Login credentials are more valuable than ever and are increasingly easy to compromise. Over 90% of breaches today involve compromised usernames and passwords.

Two-factor authentication enhances the security of your account by using a secondary device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.

How will MS Authenticator change my login experience?

When logging in to an application protected by MS Authenticator, you will still enter your CSS username and password. After you input your login information, MS Authenticator requires you to complete a second-factor authentication method.

Think of MS Authenticator as a layer of security added to your pre-existing login method. You will still need to reset your password per our Password Policy.

How do I Enroll?

Upon the first registration opt-in date, you will receive an enrollment invitation from Microsoft. Follow the prompts to register your device.

Learn how to use Microsoft Authenticator:

  1. Get the app.

  2. Add your account.

  3. Learn how to sign in.

On June 30, 2025, all alumni of the College will have a mandatory enrollment. If accounts are not enrolled by this date, the account will be suspended and unretrievable.

When does this change take effect?

April 28, 2025 marks the start of the enrollment period. Alumni have until June 30, 2025 to opt-in and enroll. Starting June 30, 2025, all alumni will have MFA protection on their account.


Alumni who have not enrolled by June 30, 2025 will have their account deactivated. There will be no reactivation or recovery options available for those whose accounts have been deactivated.

How can I confirm my enrollment?

Login at https://mysignins.microsoft.com/security-info with your CSS account to view or change your Microsoft Authenticator devices.