[ENG] Two-step verification for the Microsoft account

    Needed:

    - YubiKey 
    - Yubico Authenticator [ENG] Install Yubico Authenticator

    The setup for your own organization is described here!
    For guest access to other organizations, please follow these instructions: [ENG] Two-step verification for Microsoft guest access

    Installation

    1.  Add sign-in method to Microsoft account

    Log in with your Microsoft account, e.g. via the central Office portal portal.office.com or at mysignins.microsoft.com
    Please use Microsoft Edge for this.

    Two additional steps are necessary in the Office Portal:
    ->

    Now click on Security Info on the left.
    Add sign-in method.

    Choose Authenticator-App from the drop down menu.


    Now click "Ich möchte eine andere Authenticator-App verwenden.  / I want to use a different authenticator app"  at the bottom of the window.

    A QR code will be displayed. Leave the window open like this.

    2. Set up Yubico Authenticator

    Start the Yubico Authenticator and plug the Yubikey into your computer.

    Now click on the three dots on the right or if you have the new design click on the Yubikey.
      

    Old design:
    Then Scan QR code.
      

    New design:
    Click on "Add account"
     
    Then click on "Scan QR code"


    The app looks for the QR code on your screen and automatically creates an entry.

    If necessary, you can edit the name of the entry.
    Issuer:  e.g. Microsoft-Account

    If that does not work:
    Click on "Das Bild wird nicht gescannt? " | "Cant't scan Image?" 

    An account name and secret key will be displayed.

    In Yubico Authentificator: Three dots -> "Add account".


    Choose an issuer, then fill in the account name and secret key.
    Old design    |    New design
            
    You can choose whether you want a code to be displayed all the time, or only when you tap the Y on the stick.

    Now click "Add account".

    3. Confirm setup
    Click Next on the Microsoft page.
    A code will be requested.

    Now double-click on the entry you just created in the Yubico Authenticator.

    [If you've "Require touch" enabled , now touch the flashing Y on the YubiKey.]

    The code is now already copied and in the clipboard, paste it into the Microsoft page and click "Next".

    Now the Setup is complete.

    How to confirm your Microsoft log-in with the two factor authentification?

    The Yubico Authenticator must be started and the YubiKey must be plugged into your computer.
    Now double-click on the entry in the Yubico Authenticator.

    [If you have Require touch enabled, now touch the flashing Y on the YubiKey.]

    The code is now already copied and in the clipboard, paste it into the Microsoft page and click "Next".
    Veröffentlicht