Security Update: Transition from SMS and Voice Call to Microsoft Authenticator

You may receive a Microsoft Authenticator registration prompt if you have not yet set up Microsoft Authenticator for push notifications. The prompt may appear when you sign in to a College service and complete an MFA verification. Once Microsoft Authenticator has been registered, you will no longer receive the registration prompt.

Example: If you currently use SMS to complete MFA and have not yet set up Microsoft Authenticator, you may be prompted to register Microsoft Authenticator the next time you complete an eligible MFA sign-in.

No. If you have already set up Microsoft Authenticator for push notifications, you will not receive a registration prompt as part of the Microsoft Authenticator campaign. However, beginning in February 2027, SMS will no longer be available as a method for multi-factor authentication (MFA), so you should ensure that Microsoft Authenticator or another supported authentication method is configured on your account.

Between November 2 and November 23, you can choose "Skip for now" once per day when prompted to set up Microsoft Authenticator. After November 23, you will have up to three additional opportunities to skip the setup. Once those skips have been used, you will be required to register Microsoft Authenticator before you can continue signing in.

Example: If you defer the setup during the campaign period, you'll continue to receive the prompt on future eligible sign-ins. After the final campaign date, only three remaining skips will be available before Microsoft Authenticator registration becomes mandatory.

You can choose to postpone setting up Microsoft Authenticator for a limited time by selecting "Skip for now" when the prompt appears. However, Microsoft Authenticator registration will eventually become required, and the number of times you can skip the setup is limited.

If you currently use SMS for MFA, you should plan to register Microsoft Authenticator as soon as possible. After February 2027, SMS will no longer be available as an MFA method, so users relying on SMS will need to use Microsoft Authenticator or another approved authentication method to continue accessing College services.

SMS will no longer be available as a multi-factor authentication (MFA) method after February 2027. If you currently use SMS to verify your sign-ins, you should register Microsoft Authenticator or another supported authentication method before that date to ensure continued access to College services.

If you currently use SMS for MFA, you should set up Microsoft Authenticator as soon as possible. Doing so will ensure a smooth transition before SMS is retired and will provide a more secure and convenient sign-in experience. Once Microsoft Authenticator is registered, you can use it to approve sign-in requests instead of receiving verification codes by text message.

No. Installing Microsoft Authenticator does not give the College access to your personal data, such as your photos, text messages, emails, contacts, or browsing history. The app is used only to verify your identity when you sign in to College services. It does not allow the College to view or manage the content on your personal device.

Microsoft Authenticator is designed to help verify your identity and protect your account. The College cannot use the app to track your location or access personal information stored on your device. Depending on how the app is used, Microsoft may collect limited diagnostic or security-related information to support authentication and protect against fraud, but the app is not used by the College to monitor your personal activities.

Microsoft Authenticator provides stronger protection than SMS because authentication requests are sent directly through the app rather than through text messages. SMS messages can be intercepted, redirected, or targeted by scams such as SIM-swapping attacks. Microsoft Authenticator helps reduce these risks by using encrypted notifications and app-based verification, making it a more secure way to confirm your identity when signing in.

Microsoft Authenticator is a free mobile app that helps verify your identity when signing in to College services. Instead of receiving a verification code by text message, you can approve a sign-in request directly from the app, providing a faster and more secure authentication experience.

No. Microsoft Authenticator is free to download and use on supported iOS and Android devices. There are no subscription fees or charges for using the app.

Yes. Microsoft Authenticator can be configured on more than one device. This can be useful if you have both a primary and backup device. 

If you get a new phone, you should re-register Microsoft Authenticator as soon as possible. We recommend completing the re-registration before disposing of or resetting your old device. If you no longer have access to your previous phone and cannot sign in, contact the IT Help Desk for assistance.

Yes. Most staff and students use Microsoft Authenticator on a personal smartphone. The app is used only to verify your identity when accessing College services. Installing Microsoft Authenticator does not give the College access to your personal photos, messages, emails, contacts, or other content on your device.

Don't worry. If you choose "Skip for now", you'll have additional opportunities to register Microsoft Authenticator. During the registration campaign period, the prompt may appear again during future eligible sign-ins. We encourage you to complete the setup as soon as possible to avoid interruptions when registration becomes mandatory.

If you experience issues during setup, such as problems installing the app, scanning the QR code, or approving notifications, contact the IT Help Desk for assistance. They can help troubleshoot the issue and guide you through the registration process.

If you still have another registered authentication method, you may be able to use it to sign in and re-register Microsoft Authenticator. If you cannot access any of your authentication methods, contact the IT Help Desk for assistance with regaining access to your account.

If you need assistance installing, configuring, or using Microsoft Authenticator, please contact the IT Help Desk. The support team can assist with registration, troubleshooting, device changes, and account access issues.