Add your work or school account to the Microsoft Authenticator app

If your organization uses two-factor verification, you can set up your work or school account to use the Microsoft Authenticator app as one of the verification methods.

Important

Before you can add your account, you must download and install the Microsoft Authenticator app. If you haven't done that yet, follow the steps in the Download and install the app article.

Add your work or school account

You can add your work or school account to the Microsoft Authenticator app by doing one of the following:

  • Sign in with your work or school account credentials (preview)
  • Scan a QR Code

Sign in with your credentials

Note

You can now sign in to the Microsoft Authenticator app to add your work or school account.

To add an account by signing into your work or school account using your credentials:

  1. Open the Microsoft Authenticator app and select to the + button and tap Add work or school account. Select Sign in.

  2. Enter your work or school account credentials. If you have a Temporary Access Pass (TAP) you can use that to sign in. At this point, you could potentially be blocked from proceeding by one of the following conditions:

    • If you don’t have enough authentication methods on your account to get a strong authentication token, you can't proceed to add an account.

    • If you receive the message You might be signing in from a location that is restricted by your admin, your admin hasn't enabled this feature for you. You can try to set up your account by scanning a QR Code from the Additional security verification page or in Security info.

  3. If you are allowed by your admin to use phone sign-in using the Authenticator app, you'll be able to go through device registration to get set up for passwordless phone sign-in and Azure Multi-Factor Authentication (MFA). However, you'll still be able to set up MFA whether or not you are enabled for phone sign-in.

  4. At this point, you could be asked to scan a QR Code provided by your organization to set up an on-premises multi-factor authentication account in the app. You're required to do this only if your organization uses on-premises MFA Server.

  5. On your device, tap the account and verify in the full-screen view that your account is correct. For additional security, the verification code changes every 30 seconds preventing someone from using a code multiple times.

Sign in with a QR code

To add an account by scanning a QR Code, do the following:

  1. On your computer, go to the Additional security verification page.

    Note

    If you don't see the Additional security verification page, it's possible that your administrator has turned on the security info (preview) experience. If that's the case, you should follow the instructions in the Set up security info to use an authenticator app section. If that's not the case, you will need to contact your organization's Help Desk for assistance. For more information about security info, see Set up your Security info from a sign-in prompt.

  2. Select the checkbox next to Authenticator app, and then select Configure. The Configure mobile app page appears.

    Screen that provides a QR code

  3. Open the Microsoft Authenticator app, select the plus icon Select the plus icon on either iOS or Android devices and select Add account, and then select Work or school account, followed by Scan a QR Code. If you don't have an account set up in the Authenticator app, you'll see a large blue button that says Add account.

If you aren't prompted to use your camera to scan a QR Code, in your phone's settings, ensure that the Authenticator app has access to the phone camera.

Sign in on a remote computer

Many apps allow you to authenticate by entering a code on another device such as a PC. If you want to sign in on a remote computer to install the Microsoft Authenticator app:

  1. Open the Microsoft Authenticator app, select the + button > Add work or school account > Sign in.
  2. Select Sign in from another device.
  3. On the remote screen, open the Sign in to your account page and enter the code that you see in your Authenticator app.
  4. On your remote screen, sign in using your work or school account credentials. If you have a Temporary Access Pass (TAP) you can use that to sign in.
  5. After you complete your authentication on the remote screen, return to the Authenticator app to complete setup.

Next steps

  • After you add your accounts to the app, you can sign in using the Authenticator app on your device. For more information, see Sign in using the app.

  • For devices running iOS, you can also back up your account credentials and related app settings, such as the order of your accounts, to the cloud. For more information, see Backup and recover with Microsoft Authenticator app.