Microsoft Authenticator

Get ready for a smoother sign-in process at KSU! Starting this September, Microsoft Authenticator will replace Duo as KSU’s official multifactor authentication (MFA) tool. This update will make signing in easier, strengthen your account security, and simplify password recovery.

Follow the steps below to set up Microsoft Authenticator. Once set up, choose “Azure Multi-Factor Authentication” when signing in to applications to complete your sign-in with Microsoft Authenticator.

Screenshot of sign-in prompt, with "Azure Multi-Factor Authentication" selected

 

 

 

 

Microsoft Authenticator icon

 

Microsoft Authenticator enrollment period: Sept. 3–17

Follow the instructions on this page to install Microsoft Authenticator and connect it to your KSU account, which you must do by September 17. If you miss this window of time, you will need to contact the IT Service Desk and verify your identity via a video call to regain access to your account.

Have questions? UITS is here for you!

We've provided helpful instructions and FAQs below, and we'll also be out and about on campus to offer support.

Information Tables, Sept. 3, 4, & 5

UITS will host Information Tables across KSU to help students, faculty, and staff transition from Duo to Microsoft Authenticator. Stop by to get hands-on assistance and ask questions:

    • Wednesday, Sept. 3
      • 10 a.m.–4:30 p.m. 
        • Kennesaw:
          • Academic Learning Ctr, 1404B
          • Student Center, 155B
        • Marietta:
          • Student Center, 101B
      • 11 a.m.–2 p.m.
        • Kennesaw: Sturgis Library, G12
    • Thursday, Sept. 4
      • 10 a.m.–4:30 p.m.
        • Kennesaw:
          • Social Science, 1001E
          • Student Center – 155B
        • Marietta:
        • Student Center, 101B
      • 11 a.m.–2 p.m.
        • Kennesaw: Sturgis Library, G12
    • Friday, Sept. 5
      • 10 a.m.–2 p.m.
        • Kennesaw:
          • Social Science, 1003D
          • Student Center, 155B
        • Marietta:
          • Student Center, 101B
      • 11 a.m.–2 p.m.
        • Kennesaw: Sturgis Library, G12

 

MFA provides an added layer of security by confirming your identity with two factors: 1) Something you know (your NetID password), and 2) something you have (your registered mobile device or landline phone).

We strongly recommend registering more than one device because this will ensure that you have easy access to multiple authentication methods in the event that you do not have access to your primary device.

Don’t have a smartphone? No problem. When prompted to install the app, select “I want to set up a different method” and choose Phone call, then enter your personal phone number. After setup, select the “I want to set up a different method” option again and choose Email, then enter your non-KSU email address. 

If Microsoft Authenticator or phone verification won’t work for you due to special circumstances, you’ll have the option to purchase a hardware token as an alternative.

 If you have questions or need assistance, please contact the IT Service Desk.

 

How to Set Up Microsoft Authenticator

Going forward, you will use Microsoft Authenticator to verify your identity whenever you sign into KSUmail, D2L, and most other KSU services. 

Please note: We strongly recommend registering at least two devices with Microsoft Authenticator to ensure you can access your account if your primary device is lost or damaged. 

 

Receiving an Unexpected Microsoft Authenticator Prompt

IMPORTANT: If you ever receive a Microsoft Authenticator notification at a time when you’re not signing in to a KSU application, deny the request and immediately reset your password at changepassword.kennesaw.edu.

Change NetID Password

How Can I Get Help With Microsoft Authenticator?

Contact the KSU IT Service Desk:

470–578-6999
service@kennesaw.edu

Frequently Asked Questions

 

  • Kennesaw State University uses Microsoft Authenticator as a multifactor authentication method to protect student and employee accounts when logging into applications like Owl Express, KSUmail, D2L Brightspace, and Virtual Machines. 

  • Yes. When prompted to install the app, select “I want to set up a different method” and choose Phone call. Enter your personal phone number. After setup, select the “I want to set up a different method” option again and choose Email, then enter your non-KSU email address. 

  • Setup requires scanning a QR code with your phone’s camera. Not impossible but it can be tricky. We recommend using a laptop or desktop for initial setup. 

  • You can add your KSU account to your existing app without reinstalling. Follow the guides for iPhone and Android.

  • Guidance is still being finalized on token availability. Check back for updates.
  • Do not use your Teams number. If you’re locked out, Teams won’t help you regain access. Also, calls may not go through during active calls or when Do Not Disturb is enabled. Use a personal phone number.
  • If the call is blocked, add Microsoft’s number (470-578-2632) to your contacts and check your Focus/Do Not Disturb settings.

  • App Lock is turned on. Learn how to turn this off here: How to turn off App Lock in the Microsoft Authenticator app 

  • Authentication calls come from 470-578-2632. Save this number and adjust Focus/Do Not Disturb settings to ensure you receive calls.

  • The app collects:

    • Your username (NetID)
    • Authentication success/failure
    • Your phone’s operating system
    • Your country (for location-based access control)

    This data is used solely for authentication and will only be shared as required by law or during institutional investigations.

  • No. Microsoft Authenticator does not make your personal device subject to open records.
  • Yes. All students must use Microsoft Authenticator for KSUmail, Microsoft 365, and other campus applications.