Zentraler Informatikdienst

Setting up Microsoft Authenticator as second factor for VPN

For:  students    employees

This user guide will help you set up the Microsoft Authenticator app as a second factor for multi-factor authentication for VPN.

You will then need to configure the VPN software before you can establish a VPN connection.

Requirements

  • a device (i.e. laptop) on which you want to use VPN with multi-factor authentication
  • a mobile device with Android or iOS, iPadOS and a precisely set time for the app Microsoft Authenticator

  1. Install Microsoft Authenticator
  2. Open Microsoft Authenticator
  3. Scan a QR code
  4. Form Setting up second factor – Setting up TOTP authentication app – scan QR code
  5. Display one-time password
  6. Enter one-time password

Detailed user guide

1. Installing Microsoft Authenticator

Download and install the Microsoft Authenticator App from:

How do you download and install an app? To the basic user guide Installing smartphone or tablet app

2. Opening Microsoft Authenticator

  1. Open the Microsoft Authenticator app.
  2. On an Android device, you will now be asked whether the app is allowed to send notifications. It is not necessary to allow notifications for VPN.
  3. A note on privacy will follow. Tap Accept. Please also note the app’s privacy policy.
  4. You will be asked whether the app may collect personal data. The ZID recommends leaving this option disabled. Tap Continue.

3. Adding account

  1. Tap Scan a QR code.
  2. Allow the app to access the camera, or allow it to take pictures and videos.

4. Scanning QR code

  1. In the browser of your other device (i.e. laptop) that you want to use VPN on, open the form Setting up second factor.
  2. Click Setting up TOTP authentication app.
  3. Scan the QR code displayed there with your mobile device.
  4. Confirm the note App lock enabled with OK.
  5. If you are asked for permission for push notifications, select Not now.

5. Displaying one-time password

  1. An account named ZID Universität Wien has now been added to the authentication app.
    iOS, iPadOS: The one-time password is displayed below.
    Android: Tap on this account to display the one-time password.
  2. The one-time password is renewed every 30 seconds. The number in the circle next to the one-time password indicates how long the one-time password is still valid.

6. Entering one-time password in form

  1. Enter this one-time password in the One-time password field of the form.
  2. Click OK before the time expires.