Multifactor authentication - FAQ

What should I do if I get a new phone?
When I try to log in to TUNI services, I am offered my O365 account from another organisation. What shall I do?
How do I set up MFA in another phone?
Reading the QR code does not work in the application. What do I do?
Can I set up only SMS-based authentication method because I do not have a smartphone?
How do I turn off usage data collection from the phone app?
What do I do if my phone breaks?

What should I do if I get a new phone?

1. Enable multifactor authentication on your new phone according to the instructions Setting up multifactor authentication.
2. Only after this, remove the old phone from the authentication service at https://aka.ms/mfasetup

When I try to log in to TUNI services, I am offered my O365 account from another organisation. What shall I do?

You can use another browser or the browser's private mode and then log in to TUNI services with your TUNI email address. However, the option to use another browser is not always possible for an application that uses a (default) browser to log in, such as eduVPN or Zoom.

In this case, you can go to the address https://www.tuni.fi/hakalogout, which will log you out from the session. Then close the browser. Log in again, select Use another account and this way you should be able to log in with your TUNI email address.

How do I set up MFA in another phone?

It is convenient to set up MFA also in another phone especially if you have enabled MFA on your work phone and happen to forget the phone in the workplace. 

1. Complete the steps described in phase 1 with your other phone. (Install the Microsoft Authenticator app on your phone).  
2. After you have completed the phase 1, the app will wait for a QR code. 
3. Use your browser to go to the web address https://aka.ms/mfasetup
4. If necessary, log in with your TUNI email address and password.  
5. On Security info -page click + Add a method. 
6. In the drop-down menu, select Authenticator app. 
7. The browser displays information about using the Microsoft Authenticator app. 
8. In your browser, click Next, and a QR code appears on screen.  
9. Take your phone and scan the provided QR code with the QR code reader of the Microsoft Authenticator app. If the authenticator application asks for a lock code, this is the lock code of the phone display.
10. After the Microsoft Authenticator app has scanned the QR code, click Next in the browser window. 
11. The app will send a notification to your phone as a test.  
12. Select Approve. 
13. In your browser window, click Next. 
14. Then click Done. 
15. Your TUNI account has now been added to the Microsoft Authenticator app on your phone.  

Reading the QR code does not work in the application. What do I do?

If you cannot read the QR code in the application, you can link your account and authentication manually.

1. Open the following address in your computer browser https://aka.ms/mfasetup
2. When necessary, sign in by using your TUNI email and password.
3. On Security info -page click the + Add a method button.
4. Choose the Authenticator app from the drop-down menu.
5. Next, the browser introduces you to using Microsoft Authenticator.
6. Move forward in the browser by clicking Next in the place where the QR code will appear.
7. Click the link below the QR code: Can’t scan image?
8. The code and URL provided in the Microsoft Authenticator app will appear on the page.
9. Leave the browser open, pick up the phone, and open the Microsoft Authenticator application.
10. Press the plus button (add account) in the top bar of the application.
11. Select Work or school account and the QR code reader will open.
12. Below the reader you will see the link Or enter code manually, press the link.
13. The application will ask for the connection code as well as the website address.
14. Check the required information in the browser, add it to the required text fields in the application and press the Finish button in the application.
15. Click the Next button in the computer browser.
16. You will receive a test authentication request on your phone.
17. Click Approve to confirm the authentication.
18. Click Next in the computer browser to move forward.
19. Click the Done button in your browser.
20. The connection between the TUNI account and the phone application is now complete.

Can I set up only SMS-based authentication method because I do not have a smartphone?

Yes, you can. You will need only to complete phase 3.

• Phase 3: Set up SMS-based authentication method 

How can I enable SMS-based MFA if I have already installed the Microsoft Authenticator app on my phone? 

1. Use your browser to go to the web address https://aka.ms/mfasetup
2. If necessary, log in with your TUNI email address and password. 
3. Click Add a method. 
4. In the drop-down menu, select Phone. 
5. In the drop-down menu, select country code and type the rest of your phone number in the provided field.  
6. Click Next. 
7. You will receive an SMS containing a numeric code.  
8. Enter this code in the field displayed in your web browser. 
9. In your browser, click Done. 
10. Your TUNI account has now been connected to your phone number.  

How do I turn off usage data collection from the phone app?

1. Open the Microsoft Authenticator application.
2. Press the main menu button in the top bar.
3. Click Settings.
4. Deselect the slider under the Usage data heading.

What do I do if my phone breaks?

Multifactor authentication does not send authentication queries continuously, so if your phone breaks, TUNI electronic services will not be blocked immediately. It is recommended that everyone use SMS authentication as a secondary authentication method. In this case, if the phone is broken, you can transfer the SIM card from your broken phone to just any old phone that can receive text messages.

However, if this is not possible, we recommend contacting the IT Helpdesk.

IT Helpdesk
0294 520 500
it-helpdesk [at] tuni.fi
helpdesk.tuni.fi