How to Set Up Microsoft Login with Authenticator (iOS)

Use the Microsoft Authenticator app for an easy and secure way to protect your Stanford Microsoft account. Instead of typing a password, you'll approve a sign-in request from your phone.

Walk through the steps below to set up Microsoft Authenticator app as your verification method for Stanford Microsoft. You'll then be able to log in to your Microsoft account using Authenticator.

Before you begin

Grab your computer and your mobile device. The process involves logging in on your computer and using your phone's Authenticator app to scan a QR code.
You'll need to open an incognito or private browser window. If you're unsure how, view the instructions here. This important step enables Microsoft Authenticator's passwordless login to work alongside Cardinal Key.
Remember to sign in with your Stanford email in the format: <your SUNetID>@stanford.edu. Your SUNet ID alone will no longer be valid for Microsoft logins.

Ready to set it up?

Click on each step below to view step-by-step instructions that you'll complete on your mobile phone or computer.

Step 1: On your mobile phone, download and install the "Microsoft Authenticator" app.

If you don’t already have it, download and install the Microsoft Authenticator app from your phone’s app store. The mobile app is free.

On your Apple iOS device, go to the App Store and install the application labeled “Microsoft Authenticator." You can download the app from this link: https://apps.apple.com/us/app/microsoft-authenticator/id983156458

Step 2: On your computer, add the Authenticator app as a new sign-in method.

Open a new incognito window or private browser session and go to: https://mysignins.microsoft.com/security-info.
(Learn how to open an incognito window in your browser.)

Note: This page times out after five minutes of inactivity. Should your session expire, you'll be logged out and need to restart.
Sign in with your university email in the format: <your sunetid>@stanford.edu and select Next. You'll be prompted through the familiar Stanford login process via Shibboleth.
On the "Security info" tab, select +Add sign-in method.
Under "Add a sign-in method," choose Microsoft Authenticator.
Click Next to proceed through the prompts until a QR code is displayed.
A unique QR code will be generated for you. You'll need to open the Microsoft Authenticator app and scan it with your phone.
Leave the screen open. It's time to switch to your phone.

Step 3: On your mobile phone, scan the QR code your produced at the end of step two and set up passwordless sign-in.

Unlock your phone and open the Microsoft Authenticator app.
Note: If you are prompted to allow notifications, make sure you allow notifications.
Tap + in the upper right to add an account.
Select Work or school account.
Select Scan QR code
Note: The first time you set up the Microsoft Authenticator app, you might receive a prompt asking whether to allow the app to access your camera. Select Allow so the Authenticator app can scan the QR code.
Point your smartphone camera to the QR code displayed on your computer screen. The app will automatically detect it and add your account to Microsoft Authenticator.
Enter the number that is displayed on your computer screen on the Authenticator app on your phone (for example 73). This will complete the account set up process.
Your Stanford account (sunetid@stanford.edu) should be displayed with a one-time password code that changes every 30 seconds.
On the screen, select the option to Set up passwordless sign-in requests. (You may need to scroll down the screen).
Complete the indicated steps. If prompted to register the device, follow the on-screen steps to complete setup.
When completed, your account in Microsoft Authenticator should look similar to the image below.
Note: If instead you see an option to “Set Up 2-Step Verification," let us know by emailing uit-et-eit-ecp-staff@office365stanford.onmicrosoft.com.
After you finish this step, the system will update within 48 hours. You'll know the process is complete when you see the new Microsoft login screen instead of the familiar Stanford login.

Step 4: On your computer, verify Microsoft Authenticator is working.

Visit outlook.office.com
Enter your username in the format: <your sunetid>@stanford.edu.
When prompted with a two-digit number (for example: 73) follow the authentication steps as instructed.
Go to your Microsoft Authenticator app and when prompted for the numbers enter them there.

What happens next?

From now on, when you sign into your Stanford Microsoft account you will use the new login process.

Troubleshooting Tips

QR code won't scan? Make sure your computer screen is bright enough and your phone's camera lens is clean. If it still fails, look for a link on your computer screen that says "Can't scan image?" and follow the steps to enter the code manually.
Didn't get the notification? Check that your phone is connected to Wi-Fi or cellular data. Also, ensure you have allowed notifications for the Microsoft Authenticator app in your phone's settings.
Get help. Submit a Help request if you have questions or require assistance.

More options

The Microsoft Authenticator app supports both passkeys and YubiKeys as an option. After you complete the steps to set up passwordless login with the app, you can choose to setup either option based on your security and convenience needs.