Skip to main content

Multi-Factor Authentication (MFA)

Everything you need to know about MFA at UAL.

Multi-Factor Authentication (MFA) adds an extra layer of protection to your identity, your data and our systems. You may have already used extra verification for online banking, social media accounts, the NHS or other secure services.

Explore how MFA works at UAL and the steps you need to take to get your devices set up.

Need IT support?

Raise a help ticket with MySupport

Call us 24/7 on +44 (0)20 7514 9898

Visit our IT Services page

How MFA works

MFA works by adding a step when logging in to verify your identity. It’s a way of double checking that you are the user of your personal account.

MFA confirms your identity by providing a one-time code to your phone through a security app that’s linked to your account. This makes it harder for criminals to access your data even if they know your password. If someone is trying to access your account and they enter the wrong code, access will be denied. Your identity and data will remain protected.

UAL services protected by MFA

Any service which uses your Microsoft 365 account to authenticate to is protected by MFA. This will include:

  • your UAL email account
  • your Microsoft Office applications including Microsoft Teams
  • LinkedIn Learning
  • Moodle
  • Qualtrics
  • VPN connections.

Authenticator apps supported by UAL

UAL recommends that students use the Microsoft Authenticator app. It’s free of charge, works on both IOS and Android operating systems and is available for download from app stores.

You’ll receive push notifications explaining why authentication has been prompted. Remember that you don’t have to authorise any requests. If anything seems suspicious or you’re not the person trying to log in to your account you can:

  • select ‘It’s not me’ in the app
  • let the request time out.

Register for MFA

You’ll need access to your smartphone to register for MFA. You may also need a tablet or a laptop to start the registration process.

Option 1: register using only your smartphone

  1. Start by downloading the Microsoft Authenticator app from your chosen app store.
  2. Open a browser and go to https://aka.ms/mfasetup.
  3. Enter your UAL email address and select Next. When prompted, enter your UAL network account username and password.
  4. You’ll be presented with a screen titled ‘Keep your account secure.’
  5. Select Next and follow the instructions on-screen until you reach the step ‘Set up your account in the app’.
  6. Select the link ‘Pair your account to the app by clicking this link.’
  7. The Microsoft Authenticator app will open. Follow the steps until your UAL account is displayed in the Authenticator app.
  8. Go back to your browser and select Next. You’ll be asked to test Microsoft Authenticator. Respond to the test code which is pushed to the Authenticator app.
  9. Follow the rest of the steps on the browser.

Option 2: register using your smartphone and another device (tablet/computer)

  1. On your tablet or computer, open a browser and go to https://aka.ms/mfasetup.
  2. Enter your UAL email address and select Next. When prompted, enter your UAL network account username and password.
  3. You’ll be presented with a screen titled ‘Keep your account secure.’
  4. Move to your phone. Download the Microsoft Authenticator app from your chosen app store.
  5. Go back to your tablet or computer. Select Next and follow the instructions on-screen until you’re presented with a QR code.
  6. On your phone, open the Microsoft Authenticator app. Select the ‘+’ icon to add a new account.
  7. Select ‘Work or School Account’ from the menu and then the option to ‘Scan a QR Code.’
  8. Use your phone to scan the QR code on your other device.
  9. If asked, allow permission for the Authenticator app to use the smartphone camera to scan the QR Code.
  10. Back on your tablet or computer, select Next. You’ll be asked to test Microsoft Authenticator. Respond to the test code which is pushed to the Authenticator app.
  11. Follow the rest of the steps on your tablet or computer.

How to log in with MFA

Once you’re registered with Microsoft Authenticator, when you log in to certain UAL services you’ll be prompted to verify your identity.

  1. Enter your UAL network username and password
  2. An ‘Approve sign-in request’ screen will appear, displaying a 2 digit number. At the same time a push notification will be sent to your phone.
  3. Open the notification on your phone. Enter the numbers you see on-screen into the app and select Yes.
  4. If you’re asked to ‘Stay signed in?’ select your preference of Yes or No.
  5. The screen should then update automatically and log you in.

I can’t see the 2 digit code on my phone

One-time passcodes are an alternative to the 2-digit response code. If you’re having issues receiving the 2-digit response codes:

  1. Select the option ‘I cannot use my Microsoft Authenticator app right now.’
  2. Then choose ‘Use a Verification Code.’
  3. Open your Microsoft Authenticator app and select your account for University of the Arts.
  4. A 6-digit, one-time passcode will be displayed. Enter this code as your verification.

Update your MFA: add a new smartphone

If you change your phone you can enrol the new one for use in MFA.

  1. Go to https://mysignins.microsoft.com/security-info.
  2. Select ‘Add sign-in method’.
  3. Select ‘Authenticator app’ from the dropdown menu and follow the on-screen prompts.

Once you’ve added your new phone, on the same screen you can either:

  • keep your old phone as an extra method for use in MFA, or
  • delete your old phone from your account.

Other information about MFA

Can I choose email as an option for MFA?

No, email is not used as an alternative in MFA at UAL.

An email option is only available for resetting your UAL network password.

Can I choose text message (SMS) or phone (voice) authentication as an option for MFA?

No, Microsoft is retiring SMS and voice authentication.

From 1 September 2026: users currently using SMS authentication will be encouraged to use the Microsoft Authenticator app.

From 1 February 2027: SMS and voice authentication will no longer be available through Microsoft's service.

Register for Microsoft Authenticator and a passkey as soon as possible to prepare for this change.

More about Microsoft Authenticator

You can use the Microsoft Authenticator app to add new accounts, update existing accounts, and delete outdated accounts. Use the app to maintain your account information, passwords, add verified IDs, or even change authentication methods for services.

If you lose your phone or change your smartphone handset, downloading and installing Microsoft Authenticator will also import your saved accounts.

Why we don’t recommend Google Authenticator

Google Authenticator has some key limitations compared to Microsoft Authenticator:

1) Not all services from UAL are compatible with Google Authenticator. This may stop you from logging into some services.

2) Google Authenticator does not include real-time notifications for expired authentications. You may be logged out of essential applications without notice.

We recommend the use of the Microsoft Authenticator app for MFA. The UAL IT Service Desk cannot offer any advice or guidance about Google Authenticator.

Request to be excluded from MFA

We recognise that under certain conditions, students might find themselves unable to use Multi-Factor Authentication. Exclusions from the requirement to use MFA are considered strictly on an exceptional and case-by-case basis.

You can submit a request for exclusion via the IT Service Desk. Each exemption request must be accompanied by a valid justification, such as the absence of a personal mobile phone or tablet.

The UAL Information Security Team will evaluate each submission individually and their final determination will be communicated to you directly.

Please be aware that exemptions are granted sparingly and are subject to rigorous scrutiny. Exemptions will also be periodically reviewed and you may be requested to submit further information to remain exempt.

Data usage and privacy

UAL has undertaken extensive research into the methods and applications used in Multi-Factor Authentication and can provide assurance that we collect no data from your smart phone.

The Microsoft Authenticator app collects only standard device data: we'll record where you are connecting from and what phone or other device you're using to complete your authentication. No user account or personal data is ever requested or collected when using the MFA services.

Contact UAL’s Data Protection Officer by email at dpo@arts.ac.uk if you have any questions about your personal data. Review the University’s Student Privacy Policy.

Need IT support?

Contact the UAL IT Service Desk

Call us

24/7, 365 days a year: +44 (0)20 7514 9898

Raise a ticket

MySupport

Email

servicedesk@arts.ac.uk