IT Service Desk

The Microsoft Authenticator app is supported and recommended by the UHasselt Service Desk for daily use, because it is the most user-friendly and secure method for MFA.

Follow these steps to set up authentication with the Microsoft Authenticator app:

1. If you choose the Authenticator app method, you will see the screen below on your computer.
   
   
   
2. Use your smartphone and open to the App Store (iOS), Google Play Store (Android), or Microsoft Store to download the Microsoft Authenticator app. The icon in the store looks like this:
   
   
   
3. Download and install the Microsoft Authenticator app.
   Tip: Are you using an iPhone? Make sure the Microsoft Authenticator app is allowed to send push messages so that you can approve them. To do this, open Settings > Notifications > select the Microsoft Authenticator app and enable "Allow notifications".
   
   
4. Installation successful? Click "Next" on your computer screen.
   
   
5. You will see a QR code on your computer screen.
   
   
   
6. Open the Microsoft Authenticator app on your smartphone and choose "Scan QR code". The app will request access to the camera to scan the QR code. Choose "Allow".
   
   
7. Point your camera at the QR code to scan it (as if you were taking a photo of it). Your UHasselt account is now added to the Microsoft Authenticator app.
   
   
8. Click "Next" on your computer screen.
   
   
9. You will receive a test code on your smartphone. Tap "Approve".
   
   
10. A confirmation will appear on your computer screen. Click "Done". The Microsoft Authenticator app is now in your list of methods.

Take note: This method becomes unusable if you uninstall the Microsoft Authenticator app, after a factory reset, or when transferring your apps and data to a new device.

This is a very simple method to get started with MFA.

Follow these steps to add a phone number:

1. Click on "Add method".
   

2. Select "Phone" and click "Add".

3. Select "Belgium (+32)" and enter your telephone number.
   Note: Your (mobile) number will not be visible within the organization.

4. Choose between "Text me a code” or “Call me". 
   

   • Code via text (SMS)

     • If you choose "Text me a code", you will receive a 6-digit code.
       

     • Enter the 6-digit code on the computer and click "Next".
       

     • You will receive a confirmation. Click "Done".

   • Call me

     • If you choose "Call me", you will receive a telephone call to the telephone number you entered. This can be either a mobile or a landline number.
       

     • You will receive a call from a Microsoft service with the automated message: "Thank you for using the Microsoft authentication system. Please press the Hash key."

     • Press the Hash sign (#). A confirmation will appear on your computer.
       

     • Click "Done".

Tip: Also add a second telephone number as an alternative (for example a land line number). This can be useful in the event of theft or loss of your mobile phone.
You add an alternative number in exactly the same way as the first telephone number. (Add method > Phone > Enter phone number)

Please note: This method becomes unusable if you change phone number or, temporarily, if you lose your device.

With this third option you use a security key (USB security key) to log in. This method provides the best security for your account but requires the purchase of a hardware device such as a Yubikey (for sale in the UHasselt webshop).

Follow these steps to set up security key authentication:

1. Click on "Add method".
   

2. Select "Security key" and click "Add".

3. Click "Next" and log in with MFA.

4. Follow the manual of the Security key
   (surf to yubico.com/start)

5. You will have to choose a PIN code for your security key. Make sure you don't forget it.

6. How to reset a security key if you forget the PIN code can also be found in the manual.

Please note: You cannot use this security key method to set up MFA. If you want to start with MFA, you will definitely need a telephone number. You can add this method afterwards.

If you wish, you can purchase a different security key yourself.

Note: Make sure you purchase a security key that supports the FIDO2 protocol.

In addition to the Microsoft Authenticator app, you can also use another authenticator app such as Google Authenticator, LastPass, Authy, Aegis Authenticator, etc.

Note: UHasselt service desk does not support these alternative apps. So only use one of these if you are already familiar with it.

If you choose this method,you must manually add an account in the authenticator app by entering an account name and secret key. Detailed instructions for adding accounts can be found in the manual of the chosen app.

Follow these steps to set up authentication with another authenticator app:

1. Click on "Add method".
   

2. Select "Authenticator App" and click "Add".

3. You will be asked to download the Microsoft Authenticator App. Click on "I want to use a different authenticator app".
   

4. Once you have downloaded and installed the app, click "Next".

5. Add your UHasselt account to your authenticator app. This can be done in two ways:

   1. From the smartphone on which you have installed the authenticator app, you can copy the account name and secret key by clicking on the documents icon. Then paste this information into your authenticator app. Then click on "Next".
      
   2. Using another device (laptop, desktop, tablet, ..)
      This is the most user-friendly method. A QR code will be displayed that you can scan with your authenticator app. If this has not already been done, you will have to give the app access to the camera. After scanning, your UHasselt account will be added automatically. Then click on "Next".
      

6. As a final step, you will be asked to enter the six-digit code. You can find this code when you tap your account in the authenticator app.