Use an Alternate Authenticator App for MFA
Microsoft Authenticator is the recommended MFA method at Normandale. If you prefer a different app, you can use any authenticator app that generates 6-digit, time-based codes. Common options include Google Authenticator and Duo Mobile.
Microsoft is retiring text message and phone call MFA on February 1, 2027. An alternate authenticator app is a supported replacement.
BEFORE YOU BEGIN
- Install the authenticator app on your phone or tablet from the Apple App Store or Google Play Store.
- Have a computer or second device available to display the QR code.
- Know your sign-in address:
HOW ALTERNATE APPS WORK
- The app shows a 6-digit code that changes every 30 seconds. You type the code when Microsoft asks for it.
- Alternate apps do not send approve/deny notifications. Only Microsoft Authenticator does.
- Alternate apps cannot be used for password-less sign-in.
- The app works without cell service or Wi-Fi once it is set up.
SET UP YOUR APP
- On your computer, go to Security Info and sign in with your StarID email and password.
- Select Add sign-in method.
- Choose Authenticator app, then select Add.
- On the "Start by getting the app" screen, select I want to use a different authenticator app.
- Select Next. A QR code will appear on the screen.
- On your phone, open your authenticator app and add a new account. Look for a + button or Add account, then choose Scan a QR code.
- Scan the QR code on your computer screen. The account will appear in the app with a 6-digit code.
- On your computer, select Next and enter the 6-digit code shown in the app.
- Select Next, then Done.
If you are prompted to set up MFA while signing in, the same I want to use a different authenticator app link appears on the setup screen. Follow steps 4–9 from there.
AFTER SETUP
- On the Security Info page, set your new app as your default sign-in method.
- If text message or phone call is still listed, delete it. These methods stop working February 1, 2027.
- Add a second supported method as a backup, such as Microsoft Authenticator on another device or a hardware security key. If you lose your only device, you will need to contact the Service Desk to regain access.
SETUP HELP FROM APP PROVIDERS
FREQUENTLY ASKED QUESTIONS
My code is not accepted.
Make sure you enter the code before it changes. If codes keep failing, check that your phone's date and time are set automatically. Codes depend on an accurate clock.
I got a new phone.
Some apps can transfer accounts to a new phone. If yours cannot, sign in to Security Info using a backup method, delete the old app entry, and set up the app again on your new phone. If you have no backup method, contact the Service Desk.
I cannot use a phone or tablet.
Contact the Service Desk to discuss a hardware security key. See Enable/Configure BioPass FIDO 2 Fingerprint Tokens. Users with accessibility or technical constraints may also request an MFA exception through the Service Desk.
Never share your codes.
Normandale will never call, text, or email you asking for an authenticator code.
RELATED ARTICLES
GET HELP
Contact the Normandale IT Service Desk by: