Multi-Factor Authentication FAQs

No, you cannot opt out. Multi-factor authentication will be required for anyone with a LUC account.

No. Loyola’s MFA uses the Microsoft Authenticator app, which requires a smartphone or tablet. Phone calls, text messages, and landlines are not supported.

To approve sign-in requests in the Authenticator app, your device needs a mobile data or Wi-Fi connection. The one-time codes in the app work without any connection.

Go to LUC.edu/mfapreferences and sign in. You should be asked to approve the sign-in in Microsoft Authenticator. If you then see your Security Info page, MFA is enabled.

Visit MFA Getting Started or MFA Detailed Instructions.

If you need assistance, please contact the ITS Service Desk by logging an incident, via email at ITSServiceDesk@luc.edu, or via phone at (773) 508-4487.

If you need to make changes to your MFA preferences (e.g. add/change preferred options, add/remove a device or passkey), go to the MFA Preferences page. If you’re unable to do so, please call the ITS Service Desk during business hours at (773) 508-4487. We will confirm your identity and then reset your authentication methods. Note: ITS cannot confirm your identity via email or self-service tickets.

The Microsoft Authenticator app can be installed on any supported internet-connected device, such as an iPad or Android tablet. If you do not have a smartphone or tablet, contact the ITS Service Desk.

Please contact the ITS Service Desk during business hours at (773) 508-4487 to have your MFA methods reset. You will be asked to provide details to validate your identity.

Prior to getting your new phone, it is strongly recommended that you set up an alternate authentication method. Having another method allows you to use the "Sign in another way" option if you are having trouble, and will prevent you needing to call the ITS Service Desk.

It is recommended that you use your phone manufacturer's migration tool if available.

If you get a new phone and do not have a migration tool available, you will need to set up Microsoft Authenticator and a new passkey on your new phone using the MFA preferences page before getting rid of the old one. Passkeys don’t transfer between phones, so delete the old phone’s passkey from the MFA preferences page afterward.

If you lose access to all of your MFA methods, please contact the ITS Service Desk during business hours at (773) 508-4487 to have your MFA methods reset. You will be asked to provide details to validate your identity.

A passkey lets you sign in with your face, fingerprint, or device PIN instead of approving a request or typing a code. Passkeys are tied to Loyola’s real sign-in page, so they can’t be stolen/phished through a fake sign-in page.

App Lock makes Authenticator ask for your fingerprint, face, or PIN when you open it, so someone who picks up your unlocked phone can’t approve sign-ins. Loyola recommends leaving it on.

MFA is required for most Loyola applications.

You most likely need to complete the MFA setup process. Please see MFA Detailed Instructions for step-by-step instructions with screenshots. 

If you don't receive an MFA prompt in your email app on your mobile device or computer, please use the Microsoft Outlook app or the Outlook Web App.

Sign-in requests now ask you to enter a number shown on the sign-in screen. If you get a request you didn’t start, you won’t have a number to enter. Instead, tap "No, it’s not me". Someone may know your password, so change it right away. You can also report concerns to the ITS Service Desk.

If you are unable to scan the QR code, please check your phone’s settings and make sure the Microsoft Authenticator app has permission to access your camera. 

If scanning still doesn’t work, select "Can’t scan the QR code?" on the setup page, or tap "Sign in" in the app instead of "Scan a QR code".

Make sure notifications are turned on for Microsoft Authenticator: 

iPhone: Settings > Notifications > Authenticator

Android: Settings > Apps > Authenticator > Notifications

You may be using an application or technology that does not support modern authentication. Please review the following checklist and recommendations for supported software versions and devices: MFA Supported Technology.

You may be using an application or technology that does not support modern authentication. Please review the following checklist and recommendations for supported software versions and devices: MFA Supported Technology.

Unfortunately the vendor does not support or guarantee modern security and full functionality. Please choose another Supported Technology.

If you have an international mobile plan, the Microsoft Authenticator app will work. Otherwise, when you are prompted for MFA, click on Sign in another way. From there, select Use a verification code from my mobile app, you will then be prompted to enter a code. Open the Microsoft Authenticator app and enter the 6-digit code into your login screen.