Multi-factor authentication (MFA) is an extra layer of security for your Baldwin Wallace and Microsoft 365 accounts. For example, you first enter your password and, when prompted, you also type a dynamically generated verification code provided by an authenticator app or sent to your phone.

Your Baldwin Wallace University Account has multi-factor authentication (MFA) enabled automatically. MFA is used to authorize access to your BW Email, the BW Virtual Desktops, all Microsoft Office 365 products, and more.  The instructions below will guide you through setting up your user account to use it.


To set up your multi-factor authentication: 

  1. Sign in to Microsoft 365, to reconfigure her MFA settings.  with your work or school account with your password like you normally do. After you choose Sign in, you'll be prompted for more information.

    A dialog box telling you that more information is required to complete your sign-in

  2. Choose Next.

  3. The default authentication method is to use the free Microsoft Authenticator app.

    If you have it installed on your mobile device, select Next and follow the prompts to add this account.
    If you don't have it installed there is a link provided to download it.

    RECOMMENDED: If you would rather use SMS messages sent to your phone instead, select I want to set up a different method. Microsoft 365 will ask for your mobile number, then send you an SMS message containing a 6-digit code to verify your device.

  4. Once you complete the instructions to specify your additional verification method, the next time you sign in to Microsoft 365, you'll be prompted to provide the additional verification information or action, such as typing the verification code provided by your authenticator app or sent to you by text message.

    NOTE: Generally you'll only need the additional verification method the first time you sign in to a new app or device, or after you've changed your password. You probably won't be asked for the additional verification code on a daily basis, unless your organization requires it.