Microsoft Multi-Factor Authentication (MFA) User Guide

11 October 2021
CBS-IT Collaboration Services

Microsoft Multi-Factor Authentication (MFA) is a tool used to verify a user’s identity. In the past, one
factor, most commonly a password, was all it took to gain access to an application or device. Effective
immediately, many applications will begin requiring additional evidence to confirm your identity such as a
authenticator application designed for the sole purpose of confirming your identity. You may also have a
secure PIN texted to your mobile device.

MFA provides the additional security needed to grant Cummins personnel access the Microsoft 365
environment along with other common applications. Cummins will continue to expand the list of
applications that require MFA. The MFA prompt will appear anytime an attempt is made to log into an
MFA-enabled application via one of the following devices:

• Non-Cummins Microsoft Windows computer

• Non-Cummins Apple Mac computer
• Apple iOS/iPadOS mobile device, both company-provided and personally owned
• Android mobile device, both company-provided and personally owned

MFA will be required across many applications such as OnePay, Microsoft Teams and even including our
Cisco VPN client in the future.

There are three MFA authentication methods available for use:

1. Notification from the Microsoft Authenticator mobile app (Recommended)
2. One-time passcode generated by the Microsoft Authenticator mobile app
3. One-time passcode sent via a text (SMS) message

This document provides instructions for configuring (or re-configuring) the Microsoft MFA settings noted
above.

Table of Contents
Configuring your account using the Microsoft Authenticator app. ................. 2
Configuring your account using the SMS (Text) method. ................................ 11
Temporarily disable Microsoft MFA for your account ....................................... 16
Already registered but need to modify a method? ............................................. 18
Frequently Asked Questions (FAQs) ...................................................................... 19

Recommended devices to use for the configuration process: Laptop, Desktop, Tablet, iPhone,
Android Phone. Laptop or Desktop would be the ideal device to use for the registration process.

1|Page
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

1. Configuring your account using the Microsoft Authenticator app.

To get registered for MFA (Authenticator app), please follow these steps. We highly encourage users
to utilize the Microsoft Authenticator app (outlined below) for CMI authentication needs.
A. Open a web browser on your Cummins PC.
B. Navigate to https://aka.ms/MFASetup
C. Sign into your account.
• Username: WWID@cummins.com
• Password: Current Cummins Password

D. After signing in, the following screen will appear.

E. Open your local App store on your mobile device. Search for “Microsoft Authenticator” as
shown below and download the application.

2|Page
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

F. Now, go back to your computer and click the “Next” icon to start the registration process.
Once you click “Next”, your next screen will load. click “Next” again, as shown below:

G. On the following screen, a QR code will be shown:

If you can’t scan the image, click the “Can’t scan image?” link below the QR code. You will need to
access the URL address and code in order to activate the account manually.

3|Page
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

H. Open the authenticator app on your device, select to allow notifications (if prompted) and
accept user policy agreement. Select the “Scan a QR Code” to open the camera from the app.

Note: If this is the first time you're setting up the Microsoft

Authenticator app, you might receive a prompt asking
whether to allow the app to access your camera (iOS) or to
allow the app to take pictures and record video (Android).

You must select Allow so the authenticator app can access

your camera to take a picture of the QR code in the next
step. If you don't allow the camera, you can still set up the
authenticator app, but you'll need to add the code
information manually.

If you clicked “Skip” on accident on the previous

screen, you could then click the “+” icon (upper right
corner) and select “Work or School Account” as
shown.

A window will appear with “Add work or school

account” with the options to select “Sign In” or “Scan
QR Code.”

Select “Scan QR Code” and then scan the QR code

on your computer screen.

4|Page
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

I. Once you scan the QR code on your browser screen, the Microsoft Authenticator app will
configure your profile into the app. Afterwards,go back to the browser and click “Next”. The
system will test this configuration and the following screen will appear. The system will send an
“Approve” request to the Mircosoft Authenticator App:

Your Microsoft Authenticator App should now open with a similar screen.

Make sure to select “Approve” to confirm the request.

5|Page
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

J. The web browser page will show the following message when you successfully click
“Approve” through the Microsoft Authenticator App. Now click “Next.”

K. On the following screen, select your region and then input your mobile number to be used
for MFA. Once completed, click the “Next” icon to proceed.

6|Page
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

L. In the following screen, enter in the code that was sent to the mobile number you just submitted.
Once entered, click “Next.

You will have 180 seconds to input the verification code or this process will timeout in which you
will need to then restart the process again.

M. The system will give a successful message as shown below once the code has been verified.
Click “Next” to continue.

7|Page
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

N. The following screen will load the successful confirmation that you have registered for MFA
using the Microsoft Authenticator application. Click “Done” to move forward.

8|Page
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

The following process is completely optional. However, enabling an email account will allow
you to reset your own account password should you forget it, or allow it to expire. This
process takes about 2-minutes to complete.

A. On the following screen, click the “Add Method” option as shown:

B. Select the “Email” option in the available dropdown and click “Add”

C. Input an email address that YOU have access to that is NOT a Cummins email address.
Gmail, Microsoft etc will work. Click “Next”

9|Page
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

D. A code was sent to the email you just provided. Open the email and type the code provided
into the field as shown below and select “Next” once completed.

You will have 180 seconds to input the verification code or this process will timeout in which you
will need to then restart the process again.

E. Once you have validated the code, the “Email” option will now be added to your account.

10 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

2. Configuring your account using the SMS (Text) method.

To get registered for MFA (SMS), please follow these steps. We highly encourage users to utilize the
Microsoft Authenticator app (outlined above) but users may also use the SMS text method to have
the security code texted to a mobile number.
A. Open a web browser on your Cummins PC.
B. Navigate to https://aka.ms/MFASetup
C. Sign into your account.
• Username: WWID@cummins.com
• Password: Current Cummins Password

D. After signing in, the following screen will appear:

E. Select the “I want to set up a different method” link below and choose the “Phone” option. Once
selected, click “Confirm” to continue.

11 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

F. Select your country code and input a mobile number in the highlighted field below. Click the
“Next” icon after these steps have been completed.

G. Enter in the 6-digit code. Once inputted, the “Next” option will be available. Click the “Next” to
complete the registration.

You will have 180 seconds to input the verification code or this process will timeout in which you
will need to then restart the process again.

12 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

H. If the code is successfully verified, the following screen will appear. Click “Next” to continue.

I. A final confirmation will be shown that you have successfully registered for MFA using the SMS
text verification method. Click “Done” to go to your profile.

We highly recommend users to enable multiple methods such as the email option should you need
multiple options for authentication in case of a lost/inaccessible device, expired password etc. Please
review the steps on pages 9&10 of this document on how to add other methods to your account after
you complete the initial registration.

13 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

Need to reset your password?

If you have registered your account with MFA, you should be able to go to any of the following
options to reset your password on your Cummins account:

A. Visit https://passwordreset.microsoftonline.com/
a. Email or Username: (Enter in your WWID@cummins.com)
b. Once logged in, click the “I forgot my password” option and then “Next”

c. The list of options will vary depending on which methods you have selected to register for
your account. Choose the one that best works for you. Once you have inputted the
verification code, you will then be able to create a new password.

14 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

Password Reset Continued...

B. Visit https://passwordreset.cummins.com/ and click the “Change Password” link.
a. Log in using your current WWID and then your current Cummins password.
b. After logging in, click “Manage Password” and then follow the onscreen instructions.

C. You can also visit https://myaccount.microsoft.com/.

a. Email or Username: (Enter in your WWID@cummins.com)
b. Enter in your current password
c. Click the “Overview” tab and then locate “Change Password”
d. Enter in the new password.

D. You can also continue use the Helpdesk directly through:

a. Microsoft Teams (IT Support)
b. Help.cummins.com
c. Calling your local IT Help telephone number.

As you can see from above, there are now multiple ways to reset your Cummins password should you run
into an issue with one of the methods. If you encounter issues using multiple methods from above,
please enter in an IT Help ticket and the support team will contact you directly to resolve the issue.

15 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

Temporarily disable Microsoft MFA for your account

By default, the Microsoft MFA capability has been enabled for all Microsoft 365 accounts at Cummins.
Additionally, Cummins will continue to expand the list of applications that require MFA. To perform the
initial configuration of the Microsoft MFA settings for your account, you need to begin by temporarily
disabling the Microsoft MFA capability.

A. Connect your Cummins PC to the Cisco AnyConnect VPN (if not onsite at a Cummins
location)
B. Open a web browser.
C. Navigate to https://me.cummins.com
D. Log in using your current WWID and Cummins password
E. Click the “Manage Direct Reports” MFA link located at the top of the webpage.

F. Locate the “Select” option next to the WWID you would like to reset the MFA
registration and click the link as shown.

G. Click the “Click to RESET MFA” link as shown below:

16 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

H. After receiving a confirmation prompt, click OK.

I. Once the request has processed, you will see a “Process Complete” message. After
this message, please navigate to https://aka.ms/mfasetup to continue with the MFA
registration.

In addition to temporarily disabling your MFA, an email message will be sent to you shortly afterwards
in your inbox. You will then have 14-days to configure (or re-configure) your MFA settings at
https://aka.ms/mfasetup.

17 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

Already registered but need to modify a method?

If you have registered but need to add or modify an existing method, please view the below process to
access your account quickly.
You can also use the below process to edit your mobile number should that information needs to be
updated.
To modify or update a method
a. Open a web browser on your Cummins PC.
b. Navigate to https://mysignins.microsoft.com/security-info
c. Sign into your account.
d. On the displayed screen:
• Review the current default sign-in method under the “Security Info” tab
• If your desired method is shown on the list, then:
i. Tap Change
ii. Select the desired method from the drop-down list. The recommendation is to
select “Microsoft Authenticator - notification”.
• If your desired method is not shown on the list, then:
i. Tap Add method
ii. Select the desired method from the drop-down list. The recommend is to select
“Microsoft Authenticator”
iii. Change.
• Follow the on-screen instructions and corresponding instructions included in this guide to
configure the selected method.

18 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

Frequently Asked Questions (FAQs)

How do I add to or change my authentication method?
Open a web browser on your Cummins PC.
A. Navigate to https://aka.ms/MFASetup
B. Sign into your account.
C. The Additional security verification page loads with your settings. Make the desired
modifications and click Save

How do I sign in if my mobile device is lost or stolen?

A. If you don’t have multiple methods configured for your account, you will need to re-register
your MFA on your account by following the steps on pages 16&17 of this document. In order
for you to avoid a re-registration process, we recommend to add multiple methods as
highlighted on page 18.

How much time do I have to enter a verification code received in a text message before the system
times out?
A. You will have 180 seconds to enter the verification code. This setting is not configurable.

What should I do if I see this error message when using Microsoft Authenticator mobile app:
“Authentication request is not for an activated account”?
A. Open a web browser on your Cummins PC.
B. Navigate to https://aka.ms/MFASetup
• Sign into your account.
• Remove the existing account configured for the MobileIron Authenticator mobile app.
• Click Configure.
• Follow the instructions in Section 3 to reconfigure the Microsoft Authenticator mobile app
for use with your Cummins’ Microsoft 365 account.

Will the Microsoft Authenticator mobile app allow me to approve a request without unlocking the
mobile device?
A. Yes. In addition, if you have an Apple Watch paired with your mobile device, you can also
approve a Microsoft Authenticator request using your Apple Watch as well.

Can multiple mobile devices be configured with the Microsoft Authenticator app?
A. Yes, you can have multiple devices configured.

19 | P a g e
Microsoft Multi-Factor Authentication (MFA) User Guide
11 October 2021
CBS-IT Collaboration Services

As I have difficulty seeing my mobile device’s screen, I used to use the phone call MFA method
before it was deactivated. How do I configure my device to read text messages aloud from the
Microsoft MFA system?
• Apple iOS: The easiest way is for you to ask Siri to read your latest text message. You can also
configure Siri to announce and read your text messages when using Air Pods or Beat
headphones (see this link for instructions).
• Android: Follow the step-by-step instructions found in this link.

If you would like to follow the latest on Cummins Mobile, please visit our Cummins Mobile page in the
Help Community for the latest information and documentation around MFA.

20 | P a g e