How do I setup my CUNY Login account for MFA using Microsoft Authenticator?

Make sure you know your CUNY Login username and password before proceeding.

If you are already using an authenticator app like Microsoft Authenticator or Google Authenticator for your Brooklyn College email account or other apps, you do not need to install a new authenticator app on your phone.

Video Walkthrough

This video walks through the entire CUNY Login MFA setup process. You can also follow the written steps below.

Step-By-Step Setup Guide

1. Download and install the Microsoft Authenticator app on your mobile device. (If you already have the app installed, you can skip this step.)
   
   Note: CUNY Login MFA does not support using text messages, email, or voice calls as verification options. If you don’t have a smartphone, you can use the Oracle Authenticator App on a Windows 11 PC. If you don’t have access to a Windows PC, please contact the IT Helpdesk for assistance.)

2. Open the Microsoft Authenticator App on your mobile device.  We will return to the mobile app later on in this guide.

3. On your computer: Open the Google Chrome or Microsoft Edge web browser and go to the CUNY MFA Self-Service page (https://ssologin.cuny.edu/oaa/rui).
4. If prompted, log in using your CUNY Login username and password.
   – If you are already signed in, you will skip to step 6 automatically. Click Allow.
   – Allow location sharing, if prompted)

5. Click OK to continue.

6. Click Allow on the next page:

7. On the next page under My Authentication Factors click on Manage:

8. Click on Add Authentication Factor to display the list of authentication factor methods.

9. Choose Mobile Authenticator – TOTP (Time-based One-Time Password).

10. In the Friendly Name field, enter an informative name like CUNY Login MFA so you can easily distinguish the CUNY Login MFA code from other accounts in Microsoft Authenticator. Do not use special characters like exclamation points in the friendly name.

Keep this screen open and return to the Microsoft Authenticator App on your mobile device that you installed in step 1.

11. In the Microsoft Authenticator mobile app, click on the “+” and choose Other.

12. If prompted, click Scan QR Code and Allow camera access for the Authenticator app.

13. Point your mobile device camera at your computer browser screen to capture the QR Code that is displayed. When successful you will see a new entry added to the Microsoft Authenticator App displaying a 6 digit code and the same Friendly name you entered earlier.

14. Return to your computer web browser and click the Verify Now button. (A new input section will appear to enter the six digit verification code displayed in Microsoft Authenticator)

15. Enter the 6 digit code in the space provided for your Verification Code then click Verify and Save.
    
    IMPORTANT: You must click Verify and Save to complete the setup process!

Note: New 6-digit verification codes are randomly generated every 30 seconds.

16. You should be automatically redirected to the CUNY My Authentication Factors page and will see a your new Mobile Authenticator – TOTP app now enabled with your friendly name.

Congratulations! Your CUNY Login MFA is ready to go!

IMPORTANT: DO NOT UNINSTALL THE AUTHENTICATOR APP AFTER COMPLETING THIS SETUP!! You will need to enter the code from your authenticator app every time you sign in with your CUNY Login!

When you sign in to CUNY applications that require CUNY Login you will be redirected to a page asking you to enter an OTP code. Open the Microsoft Authenticator app on your mobile device and enter the six-digit code. See How to respond to CUNY Login MFA requests and prompts for more information.