Notes

This screen answersUS-10

Acceptance criteria

As a portal user, I want to log in using Microsoft Authenticator or email OTP, so my account is protected beyond a password.

Given a user has Multi-Factor Authenticator enrolled via Microsoft Entra, when they log in with correct credentials, then they are prompted for Authenticator approval or email OTP before access is granted.
Given a user fails MFA 5 times, when the 5th attempt fails, then the account is temporarily locked per security policy. Auto-unlock after 15 min.
After auto-unlock and another 3 failed attempts within 24 hours, account is temporarily locked for admin to unlock. (full admin-unlock go to US-54).
Given MFA is enabled, when an existing user without enrollment logs in, then they are forced through enrollment before proceeding.

Save your recovery codes

If you lose your phone, each of these codes lets you sign in once. They are shown now and after an administrator resets your two-step sign in.

You will not see these again. Keep them somewhere safe and private. Anyone with a code and your password can sign in as you.

7KQ4-M2XDR9TA-83LPC5ZN-Q7HWX2VB-64JED8MF-K3UYP6GS-T9RCH4WE-Z5NAB3JL-V8QXN7YU-2DKMF9AC-L6TH

Download codesI saved my recovery codesContinue to workspace Back to setup