Enroll in MFA with Passkey in Microsoft Authenticator group

After setting up your passkey, you must self-enroll in the MFA with Passkey in Microsoft Authenticator security group.

All University of Arkansas faculty, staff, and student employees must be enrolled in the MFA with Passkey in Microsoft Authenticator security group after setting up their Microsoft passkey. Before enrolling, you must sign out everywhere so you do not experience issues using your Microsoft passkey. 

IMPORTANT: Your passkey must be completely set up before enrolling in the MFA with Passkey in Microsoft Authenticator security group! If you enroll in the group without having a passkey set up, you will not be able to log into university resources!

Sign out everywhere

1. Log into the Security info page.
   Note: You might be required to authenticate using your new passkey or with Windows Hello. 
    
2. Click the Sign out everywhere link at the bottom of the page.
   
   
    
3. Click OK on the "Sign out everywhere?" window. 
   
   
    
4. Click your account in the Pick an account window. 
   
   

Your account will be signed out of all university resources.

Enroll in the MFA with Passkey in Microsoft Authenticator security group

The next step is to enroll in the MFA with Passkey in Microsoft Authenticator security group.

1. Log into your Microsoft My Access page.
   Note: You might be required to authenticate using your new passkey or with Windows Hello.
    
2. Click Access packages from the My Access section in the left navigation.
   
   
    
3. Click View all.
   
   
    
4. Click Request in the "MFA with Passkey in Microsoft Authenticator" row.
   
   
    
5. Click Continue in the MFA with Passkey in Microsoft Authenticator window that opens. 
   
   
    
6. In the Additional questions window that opens:
   1. Select Yes or No to answer, "Have you registered a Microsoft passkey in Microsoft Authenticator or registered a YubiKey?"
   2. Select Yes or No to answer, "For Windows users, have you set up Windows Hello for Business?"
   3. Click the Submit Request button.
      The Business Justification field does not need to be completed. 
      
      
      You should see a green pop-up in the upper, left corner that lets you know that your request is being processed. 
      
      
       

You will receive an email to your UARK email account from Microsoft Security with the subject line, "You now have access to MFA with Passkey in Microsoft Authenticator" to let you know that you have successfully enrolled in the required security group.

You will continue to use your Windows Hello PIN or biometric to log into your assigned work computer and to log into applications from your assigned work computer. 

Learn how to use your Microsoft passkey to log into shared devices such as lab computers or conference room devices.