How to Set Up Your Microsoft Login with Authenticator (Android)

What is Microsoft Authenticator?

The Microsoft Authenticator app lets you sign in to your Stanford Microsoft account by approving a request on your phone — no password needed. Learn more about this new login experience.

Prerequisite: Enroll your Android device in Intune 

Before you begin, your Android device must be enrolled in Intune. Enrollment creates the Work Profile used in the steps below. If you haven't enrolled yet, follow the Stanford UIT guide: Enroll your Android device in Intune. If your device is already enrolled, continue through the instructions. 

Work Profile vs Personal Profile

After your device is enrolled, your apps are split into two tabs at the top of your app screen: Personal and Work. Tap the Work tab to access your work apps. Every app in your Work Profile shows a small blue briefcase badge in the lower-right corner of its icon — personal apps do not. Whenever these instructions refer to your Work Profile, make sure you are on the Work tab and that the app shows the briefcase badge.

 Personal tab (left) has no briefcase badge; Work tab (right) shows a blue briefcase badge on each app.

Before you begin: Set aside time to complete

You'll need:

• Your laptop or computer
• Your Android device, already enrolled in Intune (see prerequisite above)
• 15 minutes to finish the setup

Tips and reminders

• Internet connection: Ensure your phone has WiFi or cellular data. 
• Keep both devices handy: You'll switch between your computer and smartphone during setup.
• Fully complete all four steps: Open the app (pre-installed in your Work Profile through Intune), add Authenticator as a sign-in method, add your Stanford account, and enable passwordless login. 

Ready to get started?

Click each step to view instructions. Icons show whether you'll complete that step on your mobile phone or computer. 

Allow up to 24 hours after completing setup for the new login method with Authenticator to appear.

Step 1: On your mobile phone, open the "Microsoft Authenticator" in your Work profile.

On your Android device, switch to your Work Profile and locate the application labeled "Microsoft Authenticator" (its icon shows a briefcase badge). It is deployed automatically through Intune, so you do not need to install it manually. If you do not see the app in your Work Profile after a few minutes, contact your IT support team.

Step 2: On your computer, add the Microsoft Authenticator app as a new sign-in method.

1. Open a new incognito window or private browser session and go to: https://mysignins.microsoft.com/security-info.
   (Why incognito? This allows Authenticator to work with Cardinal Key.)
2. Sign in with your university email in the format: <your sunetid>@stanford.edu and select Next. You'll be prompted through the familiar Stanford login process via Shibboleth.
   
    
3. On the "Security info" tab, select +Add sign-in method.
   
4. Under "Add a sign-in method," choose Microsoft Authenticator.
   
    
5. Click Next, then proceed through the prompts until a QR code is displayed.
   
6. Keep this window open! A unique QR code will be generated for you. You'll need to open the Authenticator app and scan it with your phone. 
   
7. Now it's time to switch to your phone.
   
   
    

Step 3: Scan the QR code to add your Stanford account to Authenticator and enable passwordless sign-in.

Note: If prompted to allow notifications, tap Go to Settings and enable them. 

1. Unlock your phone, switch to your Work Profile, and open the Authenticator app (it's icon shows a briefcase badge). Point your smartphone camera to the QR code displayed on your computer screen. The app will automatically detect it and add your sunetID@stanford.edu account to Microsoft Authenticator.
2. Tap your sunetid@stanford.edu account in Authenticator.
3. Your account should be displayed with a one-time password code that changes every 30 seconds. 
   
4. On the screen, select the option to Set up passwordless sign-in requests. (You may need to scroll down the screen).
   
5. Complete the indicated steps. If prompted to register the device, follow the on-screen steps to complete setup.
6. When completed, your account in Microsoft Authenticator should look similar to the image below. 
   
7. The system will update within 24 hours and your login will be available to you. You'll know you've successfully completed the process when you sign in to your Stanford Microsoft account on a browser or app, and instead of entering a password you'll receive a notification on your iPhone. Open Authenticator, review the sign-in details, and tap Approve.
    
    

What happens next?

Once you sign into your Stanford Microsoft account using the new login process, you're ready to connect all the devices you use to check email (and access other university Microsoft services) to Microsoft Intune. 

• Good news: Your Android device is already connected. You'll still need to connect your other devices, like your computer.
• Before you start: Wait 24 hours after setting up your login before connecting other devices to Intune, unless you are prompted to start sooner.

If you don't see the new login process appear 24 hours after completing set up, contact your local IT support.

Troubleshooting Tips

Didn't get the notification? Check that your phone is connected to Wi-Fi or cellular data. Also, ensure you have allowed notifications for the Microsoft Authenticator app in your phone's settings.

Need more help? Check out our FAQs.

More options

The Microsoft Authenticator app supports both passkeys and YubiKeys. After you complete the steps to set up passwordless login with the app, you can choose to set up either option based on your security and convenience needs. 

• Add a passkey within Authenticator
• Add a YubiKey

Get help

If you have questions, please submit a Help request.