Configuring Microsoft Multi-Factor Authentication (MFA) and Password Self-Service

The Microsoft Multi-Factor (MFA) Authentication set up process will require installing an app on your smart phone that will be used to access many Shepherd resources remotely. Accessing resources from a non-Shepherd location will require something you know (your password) and something you have (a six digit number from the app). MFA significantly reduces the risk of a breach of Shepherd’s resources.

1. If you are using an Apple iPhone and the default Apple mail client, please remove the Shepherd account from the mobile device before proceeding. This step is not required if you are using the Microsoft Outlook app or an Android device. If the mail icon you use to access Shepherd email looks similar to the icon below, you will need to remove your Shepherd account:

2. Install the Microsoft Authenticator app from either iTunes or the Google Play Store on your smart phone. The Authenticator app will look similar to this:

3. Complete the following steps from a computer web browser - not from your smart phone

a. Browse to https://office.shepherd.org, enter your Shepherd email address, and choose “Next” b. On the next page, enter your Shepherd network password and choose “Sign In” c. On the “More information required” screen, choose “Next” d. On the “Keep Your Account Secure” screen, choose “Set Up” e. On the “Get the app” screen, choose “Next” f. On the “Set up your account” screen, choose “Next” g. On the next screen a QR code will be displayed, similar to the following.

4. Complete the following steps from the Authenticator App on the smart phone:

a. In the application select “Add Account”

b. Select “Other Account” and scan the QR code displayed on the computer

c. On the next screen you should see your email address displayed, similar to the following.

5. Complete the following steps on the computer:

a. On the QR code screen, now choose “Next” b. On the next screen, enter a code shown in the Authenticator App and choose “Done”

c. Select “Done” when the Notification Approved check mark appears. The setup of MFA is now complete, and you will be logged into Office365.

6. If you are using an Apple iPhone and the default Apple mail client, you may now add your Shepherd account back to the iPhone. This step is not required if you are using the Microsoft Outlook app or an Android device. Use the link below to add your Shepherd account back to the iPhone.

https://support.office.com/en-us/article/Set-up-email-using-the-iOS-Mail-app-7e5b180f-bc8f-45cc- 8da1-5cefc1e633d1?ui=en-US&rs=en-US&ad=US#ID0EAACAAA=Office_365_work_or_school

*** Please continue to the following page to set up Password Self-Service **** Password Self-Service

The Microsoft Password Self-Service will allow users to reset their locked account or change their password by answering a series of security questions or entering an Authenticator app code. Please note that resetting a locked account will require changing the accounts password.

1. From Office 365, choose the charm on the right side of the navigation panel that displays your initials or account photo

2. Select “My Account”

3. Select “Manage security & privacy”

4. Choose “Additional security verification”

5. Choose “Update your phone numbers used for account security”, however no phone numbers will need to be provided in our configuration

6. On the “Keep your account secure” screen, click the pencil icon to edit your security questions.

7. Select three security questions and provide answers – then choose “Done”. Please note the following:  All answers must be unique and at least three characters long  Answers are case sensitive  The IS Service Desk does not have access to security questions or answers

8. Once the security questions have been completed, the account security screen should look like this. The setup of Password Self-Service is now complete.