How to set up Multi-Factor Authentication (MFA)
Over the 2019-20 academic year the LSE will be rolling out Multi-Factor Authentication (MFA) for all LSE users (staff and students).
This means that when you log into Microsoft 365 for instance your Outlook email you will be required not only to log in with your username and password, but also with an additional method of authentication too.
The School are introducing MFA as an extra layer of security - to help protect accounts from being exploited by hackers.
If you have any issues regarding MFA please see our Support and Troubleshooting section on this page.
Before you request to enable MFA for your account, we highly recommend you print the instructions on this page and print out the instructions from the LSE at https://info.lse.ac.uk/staff/divisions/dts/help/guides-faqs/mfa, so you have these to hand.
We also recommend you have a backup non-LSE email, e.g. gmail, yahoo, hotmail, so that the LSE can send you a confirmation message and MFA instructions, in case you temporarily lose your connection to your LSE email account.
Read ALL the instructions below carefully first.
You will need your computer AND your smartphone as you will be downloading the Microsoft Authenticator App.
If you do not have a smartphone or cannot use the Microsoft App, we have instructions on how to set up MFA with a phone call or text message as your first or preferred method of authentication.
Setting up MFA
- Before you apply for MFA, please make sure you are logged out of any email accounts that you access through a web browser.
- On your computer open your browser and go to https://info.lse.ac.uk/staff/divisions/dts/help/guides-faqs/mfa
- Click on the link for Enable or request to reset your MFA settings and fill in the simple form for your account:
- Make sure you check "Enable MFA".
- Check "Send me an email receipt of my responses."
- A second text box will appear in the form. Under "(Optional) Alternative email address", type your back up email address e.g. your gmail, yahoo or hotmail email.
This is useful because if you are locked out of your LSE email account during the MFA set up process you can access instructions from your backup email.
- Make a note of the time you have done this. Then click Submit.
- Once you have completed the form, you will have to wait approximately 1 - 2 hours before you can start using MFA.
- The School recommends that you use the Microsoft Authenticator App (for your mobile device) as your first method of authentication, and phone (for a text message or voice call) as your next (backup) method of verification. In our next steps we will download the Microsoft Authenticator App on your phone first, and configure that as your default method of authentication.
- Download the App from your device App store, but do NOT click Open when it has downloaded. Instead close your App store.
- You will NOT be notified when MFA is ready. Instead, after an hour has passed, open Outlook on your computer or go to Microsoft 365 on your browser.
- You may be prompted to log in with your LSE email address. If not, you will see a dialog box showing your email address and prompting you to "Enter Password". Type in your LSE password and click Sign In.
- You will see a Microsoft Authenticator dialog box, prompting you to download the App if you have not done so already. Click on Next.
- You will see a "Set up your account" dialog box. At this point, go to your phone.
- On your phone open the Microsoft Authenticator App. The App will ask if you want to be sent notifications. Click Allow.
- In the App select "+" or Add account option. Then select "Work or school account". If you do not see "Work or school account" close your App and reopen it. You should then see the option.
- Now return to your computer, to the "Set up your account" dialog box, and click Next.
- On your computer, you will now be shown a QR code to scan with your phone (which will link the Microsoft Authenticator App with your account).
- The first time you set up the Microsoft Authenticator App on your phone, you might receive a prompt asking whether to allow the app to access your camera (iOS) or to allow the app to take pictures and record video (Android). You must select Allow.
With your phone click "Scan QR code"
and scan the code on your computer screen:
- After the QR code is accepted by the App, Microsoft will send a test authentication request to the App.
- Click Accept in the App notification on your phone to complete the test and confirm successful setup.
Logging into Email, Teams, or Microsoft 365 with MFA enabled
You will now have MFA enabled and your Microsoft Authenticator App set as your default method of authentication.
This means when you log in to email, or Teams, on a device, you will be prompted to sign in with your password and also verify your log in through your Authenticator App:
- You will be prompted for your password.
- You will be prompted to verify the log in using your Microsoft Authenticator App:
- If you have notifications enabled for the Authenticator app, a popup will appear on your phone to allow you to "Approve" your sign-in.
- If you do not have notifications enabled or have no signal or Internet connection on your phone, you can still complete a logon to Microsoft 365 by entering the 6-digit verification code displyed in the Authenticator app.
This code changes every 30 seconds so be sure to enter the code while it is still displayed in the app:
Support and Troubleshooting
For iPhone users, once you have completed this process there is a small chance your phone - specifically the Mail App on the phone - will ask for your email credentials on a loop or not connect to your email.
If this happens please do the following:
- Open your phone and go to Settings
- Select Passwords & Accounts and select your LSE email account
- At the bottom of this page select Delete account.
- Finally, follow our instructions on for setting up your email again: Setting up email on ios devices - Mail app.
After enabling MFA and configuring the Microsoft Authenticator App it is advisable to Set up a Phone call or sms text message as a second method of authentication.
The LSE recommend you set-up both the "Microsoft Authenticator App" and "Phone" methods of verification to ensure you always have access to your account.
If you have any trouble with MFA, or have lost your phone please contact LSE Tech Support.
If you need to reset your MFA you can use the Enable or request to reset your MFA settings form at https://info.lse.ac.uk/staff/divisions/dts/help/guides-faqs/mfa