How do I setup my CUNY Login account for MFA using Microsoft Authenticator?

Make sure you know your CUNY Login username and password before proceeding.

If you are already using Microsoft Authenticator or Google Authenticator for your Brooklyn College email account on Microsoft 365, you do not need to install a new authenticator app on your phone.

Video Walkthrough

This video walks through the entire CUNY Login MFA setup process. You can also follow the written steps below.

Step-By-Step Setup Guide

1. Download and install the Microsoft Authenticator app on your mobile device.
   (CUNY Login MFA does not support using text messages, email, or voice calls as verification options. If you don’t have a smartphone, you can use the Oracle Authenticator App on a Windows 11 PC .)

2. Open the Microsoft Authenticator App on your mobile device and pause.  We will return to this app later on in this article.

3. Open the Google Chrome or Microsoft Edge web browser and go to the CUNY MFA Self-Service page (https://ssologin.cuny.edu/oaa/rui).
4. If prompted, log in using your CUNY Login username and password.
   – If you are already signed in, you will skip to step 6 automatically. Click Allow.
   – Allow location sharing, if prompted)

5. Click OK to continue.

6. Click Allow on the next page:

7. On the next page under My Authentication Factors click on Manage:

8. Click on Add Authentication Factor to display the list of authentication factor methods.

9. Choose Mobile Authenticator – TOTP (Time-based One-Time Password).

10. In the Friendly Name field, enter an informative name like CUNY Login MFA so you can easily distinguish CUNY Login MFA from any other accounts in Microsoft Authenticator (e.g. CUNY Microsoft 365 MFA).

Keep this screen open and return to the Microsoft Authenticator App that you installed on your mobile device in step 1.

11. In the Microsoft Authenticator App, click on the “+” and choose Other.

12. Click Scan QR Code.
    (If you mobile device prompts for camera access during this step, please click on Allow.)

13. Point your mobile device camera at your computer screen to capture the QR Code that was displayed earlier. When successful you will see an entry added to the Microsoft Authenticator App displaying a 6 digit code and the same Friendly name you entered earlier. Enter the 6 digit code in the Verification Code field and click Verify and Save.

Note: New 6-digit verification codes are randomly generated every 30 seconds.

14. You should be automatically redirected to the CUNY My Authentication Factors page and will see a your new Mobile Authenticator – TOTP app now enabled with your friendly name.

Congratulations! Your CUNY Login MFA is ready to go!