Frequently asked questions

If the device you are using to verify your details is lost or has been stolen, you should change your University account password to keep your account secure. Once you have done this, you should arrange to have your MFA settings cleared. You should either: 

Request Support for Students 

Request Support for Staff 

After your settings have  been cleared, the next time you sign in to your account you will be prompted to set up MFA again.  You can follow the instructions to set up each type of authentication method on the Registration page.

You can visit the Information Security site for more guidance about keeping mobile phones and tablets safe and secure:

Security for mobile phones and tablets

If you are changing to a new phone, steps for setting up Multifactor Authentication (MFA) on your new phone are below:

If you authenticate via the Microsoft Authenticator app:

If you still have access to your old phone then you should follow the below steps to add your new phone as an authentication method then remove your old phone:

On your computer:

1. In a web browser, login to the My Sign-ins website using your University Username (uun) in the format uun@ed.ac.uk and your login password.
2. On the Security info page click + Add sign-in method
3. From the drop down menu, select Microsoft Authenticator
4. Select Next then Next
5. Take out your new phone

On your new phone:

1. Scan the QR code that is visible on your computer using your phones camera. Alternatively you can open your device's app store and search for Microsoft Authenticator to install the app.
2. This will take you to the install page on your phone, select Install
3. Once the app is installed on your phone, complete the wizard
4. When prompted, Select the option Scan a QR code
5. Allow the app to access your camera and scan the QR code shown on your computer screen
7. Make sure to allow notifications

On your computer:

1. Select Next
2. You will be presented with a 2 digit number.

On your phone:

1. Enter the 2 digit number in the box that appears.

On your computer:

1. Select Next
2. The Microsoft Authenticator app on your new phone will now have been added as an authentication method. You can now remove your old phone from the list of sign-in methods by clicking the Delete button next to the Microsoft Authenticator entry for your old phone (please make sure not to delete the entry for your new phone).

On your old phone:

1. Once the Microsoft Authenticator entry for your old phone has been removed from your list of sign-in methods, you can then uninstall the Microsoft Authenticator app on your old phone.

If you do not have access to your old phone then your MFA settings will need to be reset. Please submit the appropriate form at the link below which will then be sent to EdHelp/IS Helpline to reset your MFA settings:

Students (to EdHelp): https://edin.ac/MFA-Students

Staff/Visitors (to IS Helpline): https://edin.ac/MFA-Staff

If you authenticate via an alternative authenticator app:

If you still have access to your old phone then you should follow the below steps to add your new phone as an authentication method then remove your old phone:

On your computer:

1. Download and install the authenticator app on your new phone.
2. Open the authenticator app and add a new account.
3. In a web browser on your computer, login to the My Sign-ins website using your Edinburgh Username in the format uun@ed.ac.uk and your login password.
4. Select +Add sign-in method > Microsoft Authenticator
5. Select I want to use a different authenticator app > Next
6. If a QR code is displayed, either scan it (skip to step 11) or select Can't scan image
7. In the authenticator, provide the Secret key displayed.
8. If prompted, leave the Token length as 6 digit.
9. On the My Sign-ins website, select Next
10. Provide the 6 digit code displayed by the authenticator, then Next
11. Activate your MFA
12. Once your authenticator app on your new phone has been added to your list of sign-in methods, you can then remove your old authenticator app from your list of sign-in methods at https://mysignins.microsoft.com/security-info by clicking the Delete button next to the authenticator app for your old phone (please make sure not to delete the entry for your new phone).
13. You can then uninstall/remove your University account from the authenticator app on your old phone.

If you do not have access to your old phone then your MFA settings will need to be reset. Please submit the appropriate form at the link below which will then be sent to EdHelp/IS Helpline to reset your MFA settings:

Students (to EdHelp): https://edin.ac/MFA-Students

Staff/Visitors (to IS Helpline): https://edin.ac/MFA-Staff

1. In a web browser, login to the My Sign-ins website using your University Username (uun) in the format uun@ed.ac.uk and your login password.
2. Select Add sign-in method
3. Choose a method and select Add
4. Follow the on screen instructions to add your new method
5. If you would like to make the new method your default, select the Change option next to Default sign-in method

Select the drop-down menu, choose your preferred default sign-in method and select Confirm.

1. In a web browser, login to the My Sign-ins website using your University Username (uun) in the format uun@ed.ac.uk and your login password.
2. Select the Change option, next to Default sign-in method
3. Select the drop-down menu and choose your preferred default sign-in method and select Confirm.

1. In a web browser, login to the My Sign-ins website using your University Username (UUN) in the format uun@ed.ac.uk and your login password.
2. Select the Delete option, next to the method you want to remove.

If you delete your default sign-in method, the next available method will automatically become your default method.

Yes, you can use Google Authenticator as a method of authentication for MFA.

Google Authenticator is an app for Android and Apple mobile or tablet devices which prompts for authorisation using a time-based numerical password. The following instructions tell you how to add it to your account as an additional authentication method;

1. Download Google Authenticator from your device’s app store.
2. In a web browser, login to the My sign-ins website using your Edinburgh username in the format uun@ed.ac.uk and your login password.
3. If MFA is already set up on your account, provide authentication using an existing method.
4. If you do not enter the account setup automatically, select +Add sign-in method > Authenticator app > Add.
5. Click I want to use a different authenticator app then select next.
6. In the Google Authenticator app, select Add a code.
7. Select Scan a QR code and scan the QR code displayed on the My Sign-ins website.
8. Select next and key in the 6-digit code shown in the Google Authenticator app.
9. Google Authenticator has now been added to your account.

If you receive an MFA request that appears unusual or when you're not trying to actually connect to a University MFA-secured service, DO NOT authenticate it and instead immediately contact the IS Helpline sending them a screenshot of the request. They will investigate the matter.

Contact the IS Helpline

If you receive an MFA request and have no signal or Wi-Fi on your device, you can generate an authentication code using authenticator app.

All applications settings are different. The most common authenticators used at Edinburgh University are:

MS Authenticator App

Open the Authenticator App, select the University of Edinburgh account relating to the authentication request and it will open a screen showing a One-time password code. Enter the code into the authentication request screen and verify. Please note that the code refreshes every 30 seconds. 

authenticator.cc

Open your browser, click the authenticator Extension’s icon in your browser to reveal the current temporary code.  Enter the code into the authentication request screen and verify. Please note that the code refreshes every 30 seconds. 

In these, and other circumstances which prevent a notification being received for the MS Authenticator app, a secondary function of the app can be used:

1. When logging-in and receiving the Approve sign in request screen, it is necessary to select I can't use my Microsoft Authenticator app right now as per below:
2. Then select Use a verification code if prompted.
3. Now go back to the Authenticator app and manually tap on the University account from the list.
4. If the account is added properly there will be a number listed which periodically changes as displayed below:
5. Enter this number into the request screen and continue in order to complete authentication.

You may encounter difficulties with the MFA process if you are travelling, or if you are based outside the UK.

If you are likely to have a poor WiFi or data access due to travelling, it may be better to set up the Microsoft Authenticator app as your verification method, as this does not rely on connectivity to work.

You should set up the Authenticator app before travelling, you will find the instructions to set up the MS Authenticator app on the Registration page.

If you have both a staff account and a student account you will likely have already set up MFA for your student email account. If you do not already access your staff email regularly you may now need to separately set up MFA for your staff account, for example to access your payslip. While the recommended Microsoft Authenticator app can be used for both staff and student accounts, if you wish to more easily differentiate which account you are using you may choose to set up a different authenticator app for your second account, see “Add a new authentication method” above on this page. If you inadvertently lock either your student or your staff account due to a mix-up help is available: https://www.ed.ac.uk/information-services/help-consultancy/contact-helpline

If you get requests to set up MFA for third-party services that are NOT provided directly by University (such as Diversity Travel, JISC, etc or other services where you have used your university email to register), you may be able to add the service to the same authenticator app you use for the University. 

If you are not using an app or if the app is not compatible, then you will need to follow the instructions provided by the third-party or contact their support, as the University can only support the University configured MFA options. 

In the future, as other University services begin to use MFA this will require no action on your part as the MFA used will be the same as for existing University services.