Understanding the Importance of Multi-Factor Authentication
MFA adds an extra layer of protection to your account by requiring you to provide an additional form of authentication beyond just your password, making it significantly harder for unauthorized users to access your data. By using the stronger forms of MFA, you almost eliminate the risk of your account being compromised through phishing attacks or stolen credentials, as even if an attacker gains access to your password, they won't be able to access your account without the second factor of authentication. When you go passwordless, there's no more password for them to phish! Multi-factor authentication (MFA) using Authenticator is a fundamental security best practice and a critical requirement for protecting sensitive data and ensuring compliance with industry regulations. Our robust security protocols not only safeguard our own data and reputation, but also prioritize the privacy and security of our valued customers.
Step 2: Pick which method to use:
Existing Users | Add your account using a QR code Click here for a more detailed step by step with screenshots On your computer, go to the Security info page of your account dashboard.Sign in Note: If you don't see the Security info page, go to Additional security verification, then select the checkbox next to Authenticator app, and then select Configure to display your QR code. Select Add sign-in method. Choose Authenticator app from the dropdown and select Add. If you already have Authenticator installed on your phone, select Next to display a QR code. Open Authenticator on your phone and select the plus icon and select Add account. Select Work or school account then tap Scan a QR Code. Notes: If you can't use your camera to scan a QR Code, click Can't scan the image on your PC and tap Enter code manually on your mobile. If you are allowed by your admin to use phone sign-in using Authenticator, you'll be able to go through device registration to get set up for passwordless phone sign-in and Azure AD Multi-Factor Authentication. New Users | Link your Account to Authenticator using a QR code Using two devices is the easiest method, especially if you use an Apple device. This only takes about two minutes. If you want to open these instructions on another device, just browse to https://securestart.prevailnetworks.com Complete these steps on your computer Complete these steps on your phone 1. Login To Your Account Using a computer, login to your account using your new Miller Valve email and the supplied password. You'll see "More Information Required". Click Next. Loading... 2. Mr Wizard Once logged in, you'll be greeted with this wizard which will walk you through the next steps Click Next to display the QR code. 3. Set it up! On your phone, open the MS Authenticator app you just installed. On the accounts screen hit the plus icon on the top menu bar. Tap Work or school account. Select Scan QR Code. The scanner opens. Scan the QR code displayed on your computer screen. 4. Verify Once the QR code is scanned successfully, your Microsoft 365 account will be linked to the Authenticator App. A test notification will be sent. Enter the number from your computer into the notification you receive. 5. Add Backup Method You'll be asked to enter your cell number or an alternate email address in case you need to reset your password. Once you complete that step, you're done! You should now be logged into our network. Anytime you sign in from a new device, or our system detects something unusual, you'll be asked to verify your identity using Authenticator. 6. Forget Your Password On the Authenticator main screen you'll see your Miller Valve account listed. Tap it to open the account settings. Tap Setup Phone Sign-in and follow the instructions to enable passwordless sign-in using Authenticator. Method 2: Add your account using your credentials To add an account by signing into your work or school account using your credentials: Open Authenticator and select the plus icon on the top menu bar. Tap Work or school account. Select Sign in. Enter your work or school account credentials. Note: If you have a Temporary Access Pass (TAP) you can use that to sign in. On your device, tap the account and verify in the full-screen view that your account is correct. Next Step: Go passwordless… On the Authenticator main screen you'll see your Miller Valve account listed. Tap it to open the account settings. Tap Setup Phone Sign-in and follow the instructions to register that device to your account and enable passwordless sign-in using Authenticator.
Troubleshoot Authenticator Setup
If you don’t have enough authentication methods on your account to get a strong authentication token, you can't add an account. You’ll see an error in Authenticator that says "To set up Microsoft Authenticator, you'll need to go to aka.ms/mfasetup on a web browser." If you receive the message "You might be signing in from a location that is restricted by your admin", your admin hasn't enabled this feature for you and probably set up a Security Information Registration Conditional Access policy. You might also receive messages that block registration of Authenticator because your admin has Conditional Access policies set up. In these cases, contact the administrator for your work or school account to use this authentication method. If you are allowed by your admin to use phone sign-in using Authenticator, you'll be able to go through device registration to get set up for passwordless phone sign-in and two-step verification. However, you'll still be able to set up two-step verification whether or not you are enabled for phone sign-in.
- Allow while using the app: If you choose this option, you’ll be prompted to select two more options.
- Always allow (recommended): While you’re still accessing the protected resource, for the next 24 hours, your location will be shared silently once per hour from the device, so you will not need to get out your phone and manually approve each hour.
- Keep only while using: While you’re still accessing the protected resource, every hour, you’ll need to pull out your device and manually approve the request.
- Allow once: Once every hour that you’re still accessing the resource, or next time you try to access the resource, you’ll need to grant permission again. You will need to go to Settings and manually enable the permission.
- Don’t allow: If you select this option, you’ll be blocked from accessing the resource. If you change your mind, you will need to go to Settings and manually enable the permission.
- Allow all the time (recommended): While you’re still accessing the protected resource, for the next 24 hours, your location will be shared silently once per hour from the device, so you will not need to get out your phone and manually approve each hour.
- Allow only while using the app: While you’re still accessing the protected resource, every hour, you’ll need to pull out your device and manually approve the request.
- Deny and don’t ask again: If you select this option, you’ll be blocked from accessing the resource.
- To remove the app from a device using a work or school account, go to the two-step verification area of either your My Apps page or your organization's company portal to turn off verification for your old device. You should also submit a support request letting us know, so we can deregister the device.
- If you didnt register the new device before handing over the old one, you may find yourself unable to login. In that case you'll need to submit a support request so we can get your new device registered and block the old one.
- Your password isn't working and you want to reset it, or
- You know your password, but your account is locked out and you need to unlock it.
- On the login screen, select Forgot my password.
- In the Get back into your account screen, type your work or school User ID (for example, your email address), Prove you aren't a robot by entering the characters you see on the screen, and then select Next.
- Select one of the methods to verify your identity and change your password and add any requested information..
- Depending on how your administrator has set up your organization, some of these verification options might not be available. You must have previously set up your mobile device for verification using at least one of these methods.
- Additionally, your new password might need to meet certain strength requirements. Strong passwords typically have 8 to 16 characters, including upper and lowercase characters, at least one number, and at least one special character.