Users who use text messaging or a phone call to complete authentication will not be affected by the change. They need to type that number into the app to complete the approval. When a user responds to an MFA push notification using the Authenticator app, they will be presented with a number.

The measure is designed to prevent accidental approvals and attacks where users are bombarded with appro val requests. To combat “MFA fatigue,” the Authenticator app will now require users to type a number displayed on the screen to complete the authentication process. In 2023, Microsoft is adding 'number matching' to MFA as an additional security measure to protect your account. If the password is weak or has been exposed elsewhere, is it really the user signing in with the username and password, or is it an attacker? When you require a second form of authentication, security is increased as this additional factor isn't something that's easy for an attacker to obtain or duplicate. If you only use a password to authenticate a user, it leaves an insecure vector for attack. Multi-factor authentication is a process where a user is prompted during the sign-in process for an additional form of identification, such as entering a code on their cell phone or providing a fingerprint scan. What is Multi-Factor Authentication (MFA)? If you need additional instructions, they can be found in the video below:

If you do not receive an email to register for Microsoft MFA, sign into and then follow the simple instructions found here (if you are already signed into your Microsoft account, you'll need to sign out and log back in). How to configure Multi-Factor Authentication This page provides information about setting up Microsoft MFA, as well as answers to frequently asked questions. In 2022, Purdue adopted Microsoft Multi-Factor Authentication for all personal University email accounts.

2 factor authentication microsoft