MS Authenticator and Virtual Desktops: FAQ

MFA refers to an additional layer of security that will prompted during the login process to several TCC hosted applications (VDI Cloud Portal, Outlook, Canvas, Self-service, MS 365 apps and any Single Sign-on apps).  The system will require a minimum of two methods of authentication, your system password and a verification from mobile app or other forms as listed below 

DUO is a great application and was our original venture into using a multifactor authentication application. The goal, as TCC moves forward with its migration into Azure, is to use a native Microsoft application. Authenticator is that native application

MFA is enabled for all faculty, staff, student workers, on-calls, and NEMPs 

Yes, this will be mandatory and will require Microsoft additional authentication due to security requirements 

Currently, there is no video showing how to install the options for Authenticator. Please check back as a video is in the process of being created.

As of this writing, the time to respond is about 15 seconds. Please keep your phone close when signing on to the VDI tool. We are working with Microsoft to extend that response time to 30 seconds and will update this FAQ when completed.

There are two options available with Authenticator:

1. Download, install and setup the app on your phone
2. Setup Authenticator to send a text message with a numeric code to enter

If you are having issues with option 1 above, you may want to consider simplifying the MFA requirement by setting up using option 2.

If you have tried to setup Authenticator using the instructions and just can’t get it to work, please contact the Service Desk for assistance. To submit a service request, please use this link. Client Portal Home (tccd.edu)

1.  If your phone is replaced, please follow the steps below to log into https://aka.ms/mfasetup with alternative methods   
2. “I can't use my Microsoft Authenticator app right now” use various options such “Get a code a different way” using the various verify identity methods such as a phone call to your office number or a cell phone # which was previously listed as an options 
3. Delete the Authenticator APP, this will remove any old phone numbers, then follow the set-up instructions   
4. If all else fails, please contact the service desk and they will guide you 

There is a maximum, at this time, of five (5) devices that can be setup to use Microsoft Authenticator per user account. If you have set up the Microsoft Authenticator app on five different devices or if you've used five hardware tokens, you won't be able to set up a sixth one, and you might see the following error message:

“You can't set up Microsoft Authenticator because you already have five authenticator apps or hardware tokens. Please contact your administrator to delete one of your authenticator apps or hardware tokens.”

As Microsoft is constantly updating their services, please check back to see the latest updates.

Authenticator uses pop-up or notification messages. Your phone needs to be setup to alert you when that notification comes in. Since each phone manufacturer has a slightly different way to setup notifications, please refer to the owner’s manual for your phone to see how to setup notifications.

Microsoft’s Authenticator is available for iPhone, iPad, or Apple Watch installation. It can be found in the Apple App store or at this link - Microsoft Authenticator on the App Store (apple.com)

You may change your security method, for example, setting your office phone as your back-up, by clicking on Microsoft Security Verification portal   and follow the instructions “How to Update the MFA settings”. Please review this video for additional information -  https://go.microsoft.com/fwlink/?LinkId=821974

Using this link - Virtual Desktop Infrastructure (VDI) - Tarrant County College (tccd.edu) – not only is there a video on how to use the VDI to access the TCCD network, but also the applications that are available in the VDI environment.

Applications are continually being added to the VDI portfolio on a regular basis. Remote Desktop is the next application that will be coming online by September 1, 2021. As applications are added, the list of applications found here - VDI Software - Tarrant County College (tccd.edu) – will be updated. Please check back often.

You will be prompted if you utilize various Single Sign-on applications/portals (Office 365, Canvas, Outlook, VDI, etc.) and open various browsers to use college teaching resources.  

You will not able to access any apps, until you have an alternative method for MFA approval, such as your college phone to access the security information, so you can delete the “old authenticator app on the portal, then reinstall the app on your phone as per our instructions  

• Is there a link to a Microsoft website where they talk about the issues that Microsoft has dealt with?

There are some common two-step verification problems that seem to happen more frequently than any of us would like. We've put together this article to describe fixes for the most common problems.

Your Azure Active Directory (Azure AD) organization can turn on two-step verification for your account. When two-step verification is on, your account sign-in requires a combination of the following data:

• Your user name
• Your password
• A mobile device or phone

Two-step verification is more secure than just a password, because two-step verification requires something you know plus something you have. No hacker has your physical phone.

This content found in the link provided at the end of this sentence can help you with your work or school account, which is the account provided to you by your organization (your.name@tccd.edu). 

Common problems with two-step verification for a work or school account (microsoft.com)