How to Configure Multi Factor Authentication Without a Mobile Device

For situations where a mobile device has not been provided by Choice Books and the user prefers not to download the MS Authenticator device on a personal phone, there is an alternative method of MFA provided. There are some important limitations with this method of which the user should be aware.

1. The user will not be able to access his accounts on other devices unless he is physically present with the computer on which he has configured MFA.
2. The user will not be able to setup Passwordless Sign In.
3. The user will not be able to use Self Service Password Reset.

1. Reach out to the IT Department for a Temporary Access Pass.

2. Find the Ente Auth app on your Choice Books computer start menu.

3. After opening the software, select "Use without backups".

4. Press Enter a Setup Key. Now you will be taken to the set up page shown below.

5. Next, visit https://aka.ms/mfasetup/ on your computer. You will be prompted to enter your Temporary Access Pass.

6. Select "Next".

9. Then select "I want to use a different authenticator app". Then press next on the following screen.

10. You are now presented with a screen showing a QR code. Press the button underneath the QR code that says "Can't scan image?" This gives you a Secret Key that should be copied and pasted into the "secret" blank in the Ente window pictured in step 4. 

11. You may enter any description you like into the "Issuer" and "Account" blanks in Ente. Press save.

12. Go back to the Microsoft page in your browser, and press the blue Next button. You will now be asked to enter the code from the Ente app. Then press "Next" again, and your authentication setup is complete.