All faculty and students have multi-factor authentication (MFA) enabled on their Microsoft account. If you encounter a message upon logging into your account that says, "Let's keep your account secure", you have to set up MFA. See the Initial MFA Setup Processaccordion below for assistance with setting up MFA for the first time. If you've already set up MFA and simply need help with the login process, see the Logging in with MFAsection below.
- Sign in to the GCU Portal with your GCU email address and password. If you're prompted with a message that says, " Let's keep your account secure", click Next.
- Once you are the " Install Microsoft Authenticator"screen, click Other options.
-
Then, you will have the option to choose either Microsoft Authenticatoror Phonefor your sign-in method .You can choose Microsoft Authenticator, but GCU Technical Support has a limited scope of service for Microsoft Authenticator; therefore, it is recommended that you use the Phoneoption.
NOTEIf you would like to set up the Microsoft Authenticatoroption as your sign-in method, follow the steps listed in the Add a Methodaccordion below. - Now it will require you to input your phone number. Once input, click Next. A verification code will be sent to your phone number.
- Enter the verification code that was sent, and then click Next.
- After a successful verification, you will receive the " Phone number added" screen. Click Doneto log in.
- You should now be successfully logged in. Multi-factor authentication will be required anytime you log into a Microsoft application from a new device, and it may be required periodically on devices that have already been recognized.
Logging in with MFA
After completing the initial setup process for multi-factor authentication (MFA), you'll be prompted to enter an authentication code periodically when you log into your account. After entering your GCU email address and password, you'll be asked to authenticate using an authentication code that was sent to the authentication method you used during the initial setup process. This could be a verification code sent to your phone number or authentication via the Microsoft Authenticator app. MFA will be required every 45 days based on conditional access, so you may receive multiple MFA notifications through your time with GCU.
If you have the phone number option set up, you just wait for the verification code to be sent to your phone number. Once you receive the code, enter the code in the box provided and click Verify. If the correct code was entered, you will be logged in immediately afterwards.
Managing Your Authentication Methods
In order to change your authentication methods, which are used for both MFA and password recovery, you'll first need to access your GCU email inbox.
- You can access your GCU email inbox through the Email app in the GCU Portal , or by signing in directly at outlook.office.com .
- Once you are in your inbox, click your initials in the upper right corner and then click View account.
- From the left-side menu, click Security Info.
-
From the Security info page, you can add, delete, and change authentication methods.
NOTEYou cannot set an email address as a multi-factor authentication (MFA) method; therefore, MFA requires a mobile device. If you do not have a mobile device to set up MFA, please contact GCU Technical Support .
- To add a sign-in method, click Add sign-in method.
-
You will now have option to add either Microsoft Authenticatoror Phoneas a sign-in method.
NOTEYou can only set up one phone number for MFA, and you can have up to five different devices connected via the Microsoft Authenticator app for MFA. -
Based on the option you decided to add, open the matching accordion below.
NOTEWhile the Microsoft Authenticator app can be used as an authentication method, GCU Technical Support has a limited scope of service when it comes to supporting it. We cannot assist with troubleshooting your mobile device if the application does not work. For this reason, we don't recommend that students select the Microsoft Authenticator as their primary authentication method.- On the Install Microsoft Authenticatorpage, depending on your type of mobile device, click the applicable app store download button to install the Microsoft Authenticator app on your mobile device. Then, click Next.
- Keep the Set up your accountpage open while you set up the Microsoft Authenticator app on your mobile device.
- Once the app is downloaded, open it and click Acceptto agree with the privacy statement.
- Click Continueif you prefer not to share your app usage data with Microsoft.
- Next, you can either click Add work or school accountand sign in with your GCU email address and password or Scan a QR codewith your mobile device.
-
If you clicked Scan a QR code, return to the Set up your accountpage and click Next. This will make a QR code appear.
NOTEIf you are doing this entire setup process on your mobile device, it will prompt you to Pair your account to the app by clicking this linkinstead of showing a QR code. -
After scanning the QR code, click Next.
NOTEIf you receive any error messages when the QR code is scanned, check out the relevant accordions at the bottom of the FAQsection below. - After adding your account, a notification will be sent to your mobile device from the Microsoft Authenticator app to test your account.
- You can approve the notification by entering the number shown on the screen into the box on your mobile device and clicking Yes.
- Once complete, you will see the confirmation that the Microsoft Authenticator method has been added. Click Doneto exit this window.
Whenever the Microsoft Authenticator method is added, it will become your default sign-in method. To change your default sign-in method, check out the Change the Default Methodaccordion below
If you have any trouble setting up the Microsoft Authenticator app, check out Microsoft's support article for more detailed steps on the process.
- To start, input your phone number. Once input, click Next. A verification code will be sent to your phone number.
- Enter the verification code that was sent, and then click Next.
- After a successful verification, you will receive a " Phone number added" screen. Click Doneto exit this window.
- On the Install Microsoft Authenticatorpage, depending on your type of mobile device, click the applicable app store download button to install the Microsoft Authenticator app on your mobile device. Then, click Next.
- Click Deleteon the method you would like to remove.
- Click Okto delete the method from your account.
-
Click Changenext to the authentication method you want to change.
NOTEYou are only able to change the phone number method. If you would like to change the Microsoft Authenticator method, delete the method and add the method back with the change. - Now you will be asked to input your new phone number. Once input, click Next. A verification code will be sent to your phone number.
- Enter the verification code that was sent, and then click Next.
- After a successful verification, you will receive a " Phone number added" screen. Click Doneto exit this window.
- If you have multiple authentication methods, you can change the default sign-in method. Click Changenext to Default sign-in method.
-
Select your default sign-in method from the options available in the dropdown. After selecting your default, click Confirm.
NOTEIf you have the Microsoft Authenticator app method enabled, you will have two App based authenticationoptions that you can select for your default methods:
- "App based authentication – notification" – With this option as the default, a number will appear on the authentication page, and you will receive a push notification from the Microsoft Authenticator app to sign in.
- "App based authentication or hardware token – code" – With this option as the default, you will need to enter a code from the Microsoft Authenticator app into the box that appears on the authentication page.
You may need to reset your multi-factor authentication (MFA) methods if you've lost your mobile device, you lost access to your phone number, or you lost access to the Microsoft Authenticator app. If you're prompted to authenticate with a code sent to your authentication method and you are not receiving it, please contact GCU Technical Support so that we can reset it for you.
FAQ
You will be required to use MFA every 45 days. However, if you switch devices or Wi-Fi connections you will be asked to complete MFA again. Once you have completed MFA in one system, like signing into the GCU Portal, you will not have to do MFA again to open another system, like your Halo Learn classroom or your student email, as long as you stay on the same device and Wi-Fi connection.
There may be times when you lose access to your device or you are unable to receive the authentication code. If this happens to you, please contact GCU Technical Support so that we can get you logged in as soon as possible. We can temporarily allow you access your account when you lose access to your device.
Due to security concerns, we removed the option to authenticate using a phone call. However, some students need to authenticate with a phone number that can't receive texts. If you need to authenticate with a phone call, please contact GCU Technical Support to re-enable that option.
If the verification code has not arrived within a few minutes or the phone number listed is no longer correct, try to follow the steps below to log in.
- To start, click Sign in another way.
- If you have the Microsoft Authenticator method set up, you will have the available options below. Click either Approve a request on my Microsoft Authenticator appor Use a verification codeto continue.
-
Based on the option you decided to use to log in, open the matching accordion below.
- After clicking this option, a notification will be sent to your mobile device from the Microsoft Authenticator app to approve your sign in request.
- You can approve the notification by entering the number shown on the screen into the box on your mobile device and clicking Yes. After completing this, you should be logged in!
- After clicking this option, you will be prompted to enter the code displayed in the Microsoft Authenticator app. Navigate to your Microsoft Authenticator app on your mobile device.
- After navigating to the Microsoft Authenticator app, open your added Grand Canyon Universityaccount.
- The verification code is under One-time password code. Enter this code into the box on the login page.
- After entering the code, click Verifyto log in.
- After clicking this option, a notification will be sent to your mobile device from the Microsoft Authenticator app to approve your sign in request.
If you are in a foreign country or have a VPN set to any of the below countries, you may receive the error message, "You cannot access this right now". If you are in one of the below countries for travel or work purposes, please contact GCU Technical Support so that we get you logged into your account.
| Belarus | Kenya | Russia |
|---|---|---|
|
China
|
Lebanon | Sudan |
|
Hong Kong
|
Nigeria | Syria |
|
Iran
|
North Korea | Tanzania |
|
Iraq
|
Pakistan | Vietnam |
|
Kazakhstan
|
Romania |
If you try to verify yourself multiple times in quick succession, you may receive the error message, "Sorry, we’re having trouble verifying your account. Please try again." If you have alternative methods set up, attempt to use those to log in. If you receive this error and you do not have alternative methods set up, we recommend attempting basic troubleshooting
to solve this issue. If you continue to receive this error, please contact GCU Technical Support
so that we can reset your authentication methods.
When setting up the Microsoft Authenticator app you will receive a QR code to scan with the Microsoft Authenticator app. If you use your mobile device's default camera to scan this QR code, you may receive the error message, "No Usable Data Found." If you receive this error, you can attempt to scan the QR code with the Microsoft Authenticator app Scan a QR codebutton or you can attempt to set up the Microsoft Authenticator app with their Add work or school accountoption. If you continue to experience problems with setting up the Microsoft Authenticator method and you are unable to set up the phone number method, please contact GCU Technical Support for further assistance.
