Multi Factor Authentication

Introduction

Multi-factor authentication increases security for our company and decreases the likelihood of successful phishing attacks by adding an extra layer of protection during the login process.

In May of 2021 Xpress Global Systems began rolling out multi-factor authentication to better secure our network and prevent unauthorized use. Multi-factor authentication is a process in which a user is prompted during the sign-in process for an additional form of identification, such as entering a code from their mobile phone or acknowledging a text message or phone call to their office phone or cell phone.

Setting Up Multi-Factor Identification

Before you can take advantage of multi-factor authentication (often called MFA or 2-step verification), you need to set up your secondary authentication method. It sounds more complicated than it is and we will walk you through each step below. Once you have configured your MFA settings, the IT department needs to enable MFA for you. And that’s it. Let’s begin!

Video Instructions

Personalize and secure your login options

1. Start by visiting https://aka.ms/mfasetup to configure additional methods of authenticating.
2. Once you are at the setup screen using the link above, watch the two-minute video below that will walk you through each step. Note that the video below does not have sound. Written instructions for the same steps as in the video are available below.

You can click here to watch the video below in full screen.

The video above does not have sound. Click here to watch it in full screen.

You’re done!

Written instructions

These instructions are identical to the video directions. If watching a video is not your thing, then follow the instructions below.

Step 1: Personalize and secure your login options

1. Start by visiting https://aka.ms/mfasetup to configure additional methods of authenticating.
2. Under How should we contact you? in the dropdown, pick Office phone.
3. Under Select your country/region dropdown, select United States (+1).
4. Enter your office phone number without an extension (or your cell phone number if you prefer using your own cellphone*)
   May require personal mobile phone use for authentication

   *Some features above may require you to use a mobile phone. XGS does not reimburse employees that choose to use their personal phone as a second factor for authentication.

5. In the Method region, select how you would like our server to verify your identity.
6. Click Next
7. The system will now be calling your office phone (or cellphone if that is the choice you picked). Please make sure you answer and listen to the prompt (it will simply ask you to push # on your phone).
8. After you answered the phone and pushed # you have completed all the steps.

Optional: If you want to use the Microsoft Authenticator app, you can follow the steps below on how to install and configure the app.

Sign in using the Microsoft Authenticator app notification on your mobile device

1. When setting up authentication methods on https://aka.ms/MFASetup. On the drop-down menu, click “Mobile app”. Choose your preferred use (i.e. Receive notifications for verification or Use verification code). Click “Set up”
3. Download the Microsoft Authenticator app from the Apple AppStore or Google Play store.
4. In the app, add an account and choose “Work or school account”
5. Sign in to your XGS account with your email address and password.
6. Scan the QR code on the screen or manually enter the code and click “Next”
7. Confirm your preferred method and click “Next”
8. You will receive a message asking to respond via the verification app on your mobile phone.
9. Select Approve from the approval notification sent to your mobile device.
10. On your mobile phone, the Microsoft authenticator app will ask if you deny or approve sign-in. Tap “Approve”.
11. For added security, you will be prompted for a phone number. Please enter your phone number and click “Next”
12. Once the phone number is verified, you will receive an app password. You can copy this password and keep it in a secure location. Click “Next” a. This secure password can be used for specific applications that cannot use a phone to secure the account (i.e. Microsoft Outlook, Apple Mail, etc.…). This password will only work for these types of applications and will not work anywhere else.

Option 4 – Sign in using an authenticator app code on your mobile device

1. Sign in to your account with your username and password.
2. Open your authenticator app and type the randomly generated code for your account into the Enter code box.

PLEASE NOTE: It is important to have an alternate method of authentication configured so that if your default method is not working, you can click Sign in another way to try a different method.

Frequently Asked Questions