Microsoft Authenticator

Multifactor authentication (MFA) provides an added layer of security by confirming your identity with two factors: something you know (your NetID password), and something you have (your registered mobile device or landline phone).

How to Set Up Authenticator on a New Phone

Get started in 3 easy steps:

  1. Visit mfa.kennesaw.edu from your computer.
  2. Download Microsoft Authenticator on your mobile device and complete setup.
  3. Update your Self-Service Password Reset (SSPR) methods to ensure password recovery.

Need more detailed instructions? Refer to this Knowledge Base article.

You will use Microsoft Authenticator to verify your identity whenever you sign into KSUmail, D2L, and most other KSU services. 

Please note: We strongly recommend registering at least two devices with Microsoft Authenticator to ensure you can access your account if your primary device is lost or damaged. 

Receiving an Unexpected Microsoft Authenticator Prompt

IMPORTANT: If you ever receive a Microsoft Authenticator notification at a time when you’re not signing in to a KSU application, deny the request and immediately reset your password at changepassword.kennesaw.edu.

Change NetID Password

How Can I Get Help With Microsoft Authenticator?

Contact the IT Service Desk:

 

Frequently Asked Questions

  • Kennesaw State University uses Microsoft Authenticator as a multifactor authentication method to protect student and employee accounts when logging into applications like Owl Express, KSUmail, D2L Brightspace, and Virtual Machines.

  • Yes! In fact, we strongly recommend registering more than one device because this will ensure that you have easy access to multiple authentication methods in the event that you do not have access to your primary device.

  • Yes. When prompted to install the app, select “I want to set up a different method” and choose Phone call. Enter your personal phone number. After setup, select the “I want to set up a different method” option again and choose Email, then enter your non-KSU email address. 

  • Setup requires scanning a QR code with your phone’s camera, so while it's not impossible, it can be tricky. We recommend using a laptop or desktop for initial setup.

  • You can add your KSU account to your existing app without reinstalling. Follow the guides for iPhone and Android.

  • Guidance is still being finalized on token availability. Please check back for updates, or reach out to the IT Service Desk.

  • Do not use your Teams number. If you’re locked out, Teams won’t help you regain access. Also, calls may not go through during active calls or when Do Not Disturb is enabled. Use a personal phone number.
  • If the call is blocked, add Microsoft’s number (470-578-2632) to your contacts and check your Focus/Do Not Disturb settings.

  • App Lock is turned on. Learn how to turn this off here: How to turn off App Lock in the Microsoft Authenticator app 

  • Authentication calls come from 470-578-2632. Save this number and adjust Focus/Do Not Disturb settings to ensure you receive calls.

  • The app collects:

    • Your username (NetID)
    • Authentication success/failure
    • Your phone’s operating system
    • Your country (for location-based access control)

    This data is used solely for authentication and will only be shared as required by law or during institutional investigations.

  • No. Microsoft Authenticator does not make your personal device subject to open records.
  • Yes. All students must use Microsoft Authenticator for KSUmail, Microsoft 365, and other campus applications.