Microsoft Authenticator

Multifactor authentication (MFA) provides an added layer of security at Kennesaw State University. When you login to your Kennesaw State account, you will confirm your identity with two factors.

Common categories for factors are something you know (a password or PIN); something you have (a smartphone or secure USB key); and something you are (a fingerprint or facial recognition.)

At Kennesaw State University, we use Microsoft Authenticator to secure campus systems and make sure your KSU account stays secure. You will use Microsoft Authenticator when signing in to services like KSUMail, D2L, Owl Express, and most other campus services.

UITS strongly recommends registering at least two devices with Microsoft Authenticator to ensure account access in the event of a lost or damaged device. 

Get Started with Microsoft Authenticator

  1. Visit the Microsoft Security Info webpage from your computer.
  2. Download Microsoft Authenticator on your mobile device and complete setup.
  3. Update your Self-Service Password Reset (SSPR) methods to ensure password recovery.

Need more detailed instructions?

Review our on-demand help article on setting up Microsoft Authenticator for the first time.

New from Microsoft: Phone Calls to be retired as Sign-In Method

Microsoft is retiring phone calls as an authentication method. KSU faculty, staff, and students will no longer be able to authenticate using phone calls starting January 20, 2027.

UITS encourages those who relies on phone calls to update their authentication methods before the January 20 deadline to avoid sign-in disruption.

It is recommended that your default authentication method be the Microsoft Authenticator app. Review the below self-service articles to learn how to make changes to your sign-in methods.

If you do not have a smartphone or do not wish to use it to authenticate, physical hardware tokens can be purchased through the KSU Bookstore.

Security Alert: Unexpected Authenticator Prompts

Never approve a Microsoft Authenticator request you do not recognize. If you ever receive an authentication request when you have not signed in to a KSU application or service, immediately deny the request and reset your NetID password.

Learn more about staying cybersafe at KSU by visiting the Phish Market.

Get Help With Microsoft Authenticator

Our IT Service Desk is here to troubleshoot any authentication issues you may experience. Contact the IT Service Desk through phone at 470-578-6999, email at service@kennesaw.edu, or by visiting a walk-in support counter.

 

Setting Up Authenticator on a New Phone

Upgrade your smartphone and not sure where to start with setting up Microsoft Authenticator? UITS is here to help!

Review our Knowledge Base article on Setting Up Microsoft Authenticator on a New Phone.

Not sure how to proceed? Our IT Service Desk can help walk you through setting up Authenticator on your new device.

Frequently Asked Questions

  • Kennesaw State University uses Microsoft Authenticator as a multifactor authentication method to protect student and employee accounts when logging into applications like Owl Express, KSUmail, D2L Brightspace, and Virtual Machines.

  • Yes! In fact, we strongly recommend registering more than one device because this will ensure that you have easy access to multiple authentication methods in the event that you do not have access to your primary device.

  • MFA physical hardware tokens are available for purchase at the KSU Bookstore. Access our How to Setup a Hardware Token Knowledge Base article to learn how to add it as an authentication method.

  • Setup requires scanning a QR code with your phone’s camera, so while it's not impossible, it can be tricky. We recommend using a laptop or desktop for initial setup.

  • You can add your KSU account to your existing app without reinstalling. Follow the guides for iPhone and Android.

  •  MFA tokens are available at the KSU Bookstore
  • If the call is blocked, add Microsoft’s number (470-578-2632) to your contacts and check your Focus/Do Not Disturb settings.

  • App Lock is turned on. Learn how to turn this off here: How to turn off App Lock in the Microsoft Authenticator app 

  • Authentication calls come from 470-578-2632. Save this number and adjust Focus/Do Not Disturb settings to ensure you receive the call.

  • The app collects:

    • Your username (NetID)
    • Authentication success/failure
    • Your phone’s operating system
    • Your country (for location-based access control)

    This data is used solely for authentication and will only be shared as required by law or during institutional investigations.

  • No. Microsoft Authenticator does not make your personal device subject to open records.
  • Yes. All students must use Microsoft Authenticator for KSUmail, Microsoft 365, and other campus applications.