How to Set Up Your Microsoft Login with Authenticator (Android)
These instructions are for the School of Medicine community.
What is Microsoft Authenticator?
The Microsoft Authenticator app lets you sign in to your Stanford Microsoft account by approving a request on your phone — no password needed. Learn more about this new login experience.
Before you begin: Set aside time to complete
You'll need:
- Your laptop or computer
- Your Android device
- 15 minutes to finish the setup
Tips and reminders
- Internet connection: Ensure your phone has WiFi or cellular data.
- Keep your both devices handy: You'll switch between your computer and smartphone during setup.
- Fully complete all four steps: Install the app, add Authenticator as a sign-in method, add your Stanford account, and enable passwordless login.
Ready to get started?
Click each step to view instructions. Icons show weather you'll complete that step on your mobile phone or computer.
Complete these steps without interruption. Microsoft's My Sign-Ins portal will sign you out after about five minutes of inactivity. If you see a SAML error, your session timed out. Remove your Stanford account from the app and restart the setup process.
Allow up to 24 hours after completing setup for the new login method with Authenticator to appear.
Step 1: On your mobile phone, download and install the "Microsoft Authenticator" app.
If you don’t already have it, download and install the Microsoft Authenticator app from your phone’s app store. The mobile app is free.
- On your Android device, open the Google Play Store and install the application labeled “Microsoft Authenticator." You can download the app from this link: https://play.google.com/store/apps/details?id=com.azure.authenticator&hl=en_US
Step 2: On your computer, add the Microsoft Authenticator app as a new sign-in method.
- Open a new incognito window or private browser session and go to: https://mysignins.microsoft.com/security-info.
(Why incognito? This allows Authenticator to work with Cardinal Key.) - Sign in with your university email in the format: <your sunetid>@stanford.edu and select Next. You'll be prompted through the familiar Stanford login process via Shibboleth.

- On the "Security info" tab, select +Add sign-in method.

- Under "Add a sign-in method," choose Microsoft Authenticator.

- Click Next, then proceed through the prompts until a QR code is displayed.

- Keep this window open! A unique QR code will be generated for you. You'll need to open the Authenticator app and scan it with your phone.

- Now it's time to switch to your phone.
- Open a new incognito window or private browser session and go to: https://mysignins.microsoft.com/security-info.
Step 3: Scan the QR code to add your Stanford account to Authenticator and enable passwordless sign-in.
Note: If prompted to allow notifications, tap Go to Settings and enable them.

- Unlock your phone and open the Authenticator app. Point your smartphone camera to the QR code displayed on your computer screen. The app will automatically detect it and add your sunetID@stanford.edu account to Microsoft Authenticator.
- Tap your sunetid@stanford.edu account in Authenticator.
- Your account should be displayed with a one-time password code that changes every 30 seconds.

- On the screen, select the option to Set up passwordless sign-in requests. (You may need to scroll down the screen).

- Complete the indicated steps. If prompted to register the device, follow the on-screen steps to complete setup.
- When completed, your account in Microsoft Authenticator should look similar to the image below.

- The system will update within 24 hours and your login will be available to you. You'll know you've successfully completed the process when you sign in to your Stanford Microsoft account on a browser or app, and instead of entering a password you'll receive a notification on your iPhone. Open Authenticator, review the sign-in details, and tap Approve.
What happens next?
Once you sign into your Stanford Microsoft account using the new login process, you'll be ready to connect all the devices you use to check email (and access other university Microsoft services) to Microsoft Intune.
Please wait 24 hours before connecting your devices to Intune unless you are prompted to start sooner.
If you don't see the new login process appear 24 hours after completing set up, submit a Help request.
Troubleshooting Tips
Didn't get the notification? Check that your phone is connected to Wi-Fi or cellular data. Also, ensure you have allowed notifications for the Microsoft Authenticator app in your phone's settings.
Didn't get the notification? Ensure you have allowed notifications for the Authenticator app in your phone's settings.
Need more help? Check out our FAQs.
More options
The Microsoft Authenticator app supports both passkeys and YubiKeys. After you complete the steps to set up passwordless login with the app, you can choose to setup either option based on your security and convenience needs.
Get help
If you need assistance, please submit a Help request.
