Setting Up CUNY Login MFA
The following one-time procedure provides instructions on setting up CUNY Login MFA for use with the Microsoft Authenticator mobile app.
Important Note: This process must be completed from a computer. The Microsoft Authenticator App must be downloaded and completed from a mobile device.
Before You Begin
-
Please utilize your default web browser's Private Browser Window to complete this process:
- Chrome - New Incognito Window:
- Firefox - New Private Window:
- Edge - New InPrivate Window:
1. On your mobile device, download and install the Microsoft Authenticator App from the AppStore or PlayStore.
Note: Please be aware and install the the proper authenticator app. Do not install any 3rd party authenticator app.
2. Open the Microsoft Authenticator App on your mobile device and pause. We will return to this later on in this article.
3. In your private browser window, go to the CUNY Login MFA Self Service (https://ssologin.cuny.edu/oaa/rui).
4. At the CUNY Login page, enter your CUNY Login username and password, then click Log in:
5. Click OK on the next page:
6. Click Allow on the next page:
7. On the next page under My Authentication Factors click on Manage:
8. Click on Add Authentication Factor and then click on Mobile Authenticator - TOTP:
9. Next enter a Friendly Name, for example CUNY Apps MFA.
Note: Be sure to use a unique name to avoid confusion with other MFA accounts.
10. A QR Code is visible on the same page, click on Verify Now.
Pause and return to the Microsoft Authenticator App on your mobile device.
11. In the Microsoft Authenticator App, click on the "+" and choose Work or school account.
12. Click on Scan QR Code. Note: If you mobile device prompts for camera access during this step, please click on Allow.
13. Point your mobile device to your computer screen to capture the QR Code. When successful you will see an entry added to the Microsoft Authenticator App displaying a 6 digit code and the same Friendly name you entered earlier. Enter the 6 digit code in the Verification Code field and click Verify and Save.
Note: Please be aware a 6 digit code is randomly generated every 30 seconds.
14. You should automatically be brought back to the My Authentication Factors page and will see an Enabled Mobile Authenticator - TOTP entry with the Friendly name.
Congrats, the CUNY Login MFA is setup, you can now utilize it to access CUNYfirst, CUNYbuy, Brightspace, Navigate, Zoom, Campus VPN, etc.
Important Note: Please be aware, don't confuse this CUNY Login MFA with the other Microsoft MFA (M365 MFA), which is used strictly to verify all Microsoft 365 applications (Outlook, Teams, etc)
View next article on how to respond to MFA Requests/Prompts