Changes to MFA and MS Authenticator app
In early May 2023, the Microsoft Authenticator app will change with the introduction of a number query, or number matching feature. This change will affect you if your primary authentication method is the push notification feature of the Authenticator app.
Haaga-Helia IT Services recommends using authenticator for two-step verification (instead of a call or SMS code).
Body
Changes to MFA (two-step sign-in) and the Microsoft Authenticator app
In the early May 2023, the operation of the Microsoft Authenticator application will change with the introduction of a number matching feature. This feature will make it easier for users to identify login attempts that arrive on their phone and detect potential misuse.
This change applies to you if your primary authentication method is the push notification feature of the Authenticator app. Instead of the accept / reject option, you will be shown a two-digit code that you enter into the login window of the phone application.
If you're not the Microsoft Authenticator application or your authentication method is text message or phone call, this change doesn't apply to you. You can continue to use these methods as you have done so far. However, Haaga-Helia IT Services recommends switching to the app.
Supported versions of Authenticator
For a number query to work correctly, a supported version of the Authenticator must be used. The version must be at least 6.2111.7701 on Android devices and 6.5.85 on iOS devices.
You can update the Authenticator app from the app store on your phone. Logging in with the old version of the app doesn't work at all. Haaga-Helia's personnel phones should work without any updates.
Things to consider
- If you don't recognize the login request, click "No, it's not me". If you suspect you've been the victim of phishing, contact Helpdesk immediately (contact details below).
- After the change, the authenticator app's one-time verification code will work as before.
- Number matching may not be compatible with your smartwatch, such as Apple Watch. In the future, you'll have to authenticate with your phone.
- You can manage your own authentication methods in Microsoft service. In the service, you can specify the authentication method to use primarily. In addition, you can specify a secondary phone number and edit the devices on which your Authenticator app is installed.
- If you have problems signing in, you can always contact Haaga-Helian Helpdesk customer service.