How to set up Multi-Factor Authentication (MFA)

The School is rolling out Multi-Factor Authentication (MFA) for all LSE users (staff and students) as an extra layer of security, to help protect accounts from being exploited by hackers.

This means that when you log into Microsoft 365 – for instance your Outlook email – you will be required not only to log in with your username and password, but also with an additional method of authentication.

On this page you will be shown step by step how to set up MFA.

Before you start

Print out this page AND print out the instructions from the LSE's The Microsoft Authenticator App - Set Up and Use page, so you have these to hand.
Ensure you have a backup, non-LSE email, e.g. gmail or yahoo where the LSE can send you a confirmation message and MFA instructions, in case you temporarily lose your connection to your LSE email.
Read ALL the instructions below carefully first.
Ensure you have your computer AND your smartphone to hand as you will need to download the Microsoft Authenticator App
If you do not have a smartphone, or cannot use the Microsoft App, go to our instructions on how to set up MFA with a phone call or text message as preferred method of authentication.
Finally, if you are an iPhone user and use the Mail App on your phone, read our support and troubleshooting section at the bottom of this page, after you have set up MFA.

Setting up MFA

Before you apply for MFA, log out of any email accounts that you access through your web browser.
On your computer open your browser and go to the LSE pages on MFA.
On the page, go to Step 2, which will begin "On your computer screen, click here to enable MFA...." Click on the link to open the form.
NOTE: If this is the first time you have used a browser to log into your LSE account, you will be prompted for your LSE email address and password.
The LSE Multi-factor Authentication form will open:
- Check "Enable MFA".
- A second text box will appear in the form. Under "(Optional) Alternative email address", type your back up email address e.g. your gmail, yahoo or hotmail email.
  This is useful because if you are locked out of your LSE email account during the MFA set up process you can access instructions from your backup email.
- Check "Send me an email receipt of my responses."
Make a note of the time you have done this. Then click Submit.
You will receive a first email acknowledging your form submission. Wait for a second email confirming your MFA request has been processed, which can take 10 minutes to be sent.
Important: If you submitted an alternative email address on your form (e.g. gmail), the confirmation message may be sent there rather than to your LSE account.
The School recommends that you use the Microsoft Authenticator App (for your mobile device) as your first method of authentication, and phone (for a text message or voice call) as your next (backup) method of verification.

In our next steps we will download the Microsoft Authenticator App onto your phone, and configure it as your default method of authentication.
Download the App from your device App store, but do NOT click Open when it has downloaded. Instead close your App store.
Once you have received your email confirming your MFA request has been processed open Outlook on your computer OR go to Microsoft 365 on your browser.
You may be prompted to sign in with your LSE email address OR see a message for more information. Enter your LSE email address where prompted, and click Next. Continue to enter your LSE password when asked, and click Sign In.
You will see a Microsoft Authenticator dialog box, prompting you to download the App. If you have already downloaded the App click on Next.
You will see a "Set up your account" dialog box. At this point, go to your phone.
On your phone open the Microsoft Authenticator App. The App will ask if you want to be sent notifications. Click Allow.
In the App select "+" or Add account option. Then select "Work or school account". If you do not see "Work or school account" close your App and reopen it. You should then see the option.
Now return to your computer, to the "Set up your account" dialog box, and click Next.
On your computer, you will now be shown a QR code to scan with your phone (which will link the Microsoft Authenticator App with your account).
The first time you set up the Microsoft Authenticator App on your phone, you might receive a prompt asking whether to allow the app to access your camera (iOS) or to allow the app to take pictures and record video (Android). You must select Allow.
With your phone click "Scan QR code" …

…and scan the code on your computer screen:
After the QR code is accepted by the App, Microsoft will send a test authentication request to the App.
Click Accept in the App notification on your phone to complete the test and confirm successful setup.

Logging into Email, Teams, or Microsoft 365 with MFA enabled

You will now have MFA enabled and your Microsoft Authenticator App set as your default method of authentication.

This means when you sign in to email or Teams on a device you will be prompted to enter your password AND verify your log in through your Authenticator App:

You will be prompted for your password.
You will be prompted to verify the log in using your Microsoft Authenticator App:
If you have notifications enabled for the Authenticator app, a popup will appear on your phone to allow you to "Approve" your sign-in.
If you do not have notifications enabled or have no signal or Internet connection on your phone, you can still complete a logon to Microsoft 365 by entering the 6-digit verification code displyed in the Authenticator app.
This code changes every 30 seconds so be sure to enter the code while it is still displayed in the app:

After enabling MFA, configuring the Microsoft Authenticator App, and checking everything works, the LSE recommends you Set up a Phone call or sms text message as a second method of authentication to ensure you always have access to your account.

Support and Troubleshooting

This section deals with specific issues with MFA including iPhone users, setting up a second method of authentication, resetting your MFA, and losing your phone. Please read instructions on setting up MFA first if you have not done so already.

iPhone users

For iPhone users, once you have completed the process of setting up MFA, there is a small chance your phone - specifically your phone's Mail App - will ask for your email credentials on a loop or not connect to your email.

If this happens please do the following:

	iPhone 7 / pre iOS 14.6	iPhone 8 +
1	Open your phone and go to Settings	Open your phone and go to Settings
2	Select Passwords & Accounts and select your LSE email account.	Select Mail > Accounts. Next select your LSE email account.
3	At the bottom of this page select Delete account.	At the bottom of this page select Delete account.

After deleting the account, you can re-add it following our instructions: Setting up email on iOS devices - Mail app.

Second method of authentication

Resetting your MFA

If you need to reset your MFA first try visiting your Microsoft Security Info account page and click on "Add method". If you cannot access this page, contact LSE Tech Support.

Trouble with your MFA

If you have any trouble with MFA, try the LSE MFA Troubleshooting page first. If you continue to experience problems contact LSE Tech Support.

Losing your phone

If you have lost your phone please contact LSE Tech Support immediately.