Overview
Multifactor Authentication (MFA) is a security feature that adds an extra layer of protection to your AACC account. MFA combines something you know (your password) with something you have (a phone or other device), greatly reducing the risk of unauthorized access.
MFA is required for all faculty, staff, and employee student accounts.
New Requirement: Beginning July 7, new credit students are also required to use MFA when accessing MyAACC or Microsoft 365 services.
Employees and students can choose from the following MFA methods:
- Microsoft Authenticator App (most secure)
- Phone Call (employees and students)
- Text Message (students only)
- Security Key (students only)
Student MFA Setup Instructions
New Credit Students: If your account was created on or after July 7, you are required to use multifactor authentication (MFA) to access MyAACC and Microsoft 365 services (Outlook, Teams, OneDrive, etc.).
Reminder: Microsoft Authenticator is the most secure method. You may also add phone call, text message, or a security key as alternative methods.
The sections below contain step-by-step instructions based on whether or not you provided a phone number when applying to AACC:
✅ I provided a phone number during the application process
If you provided a mobile phone number during your application, it may have been automatically added to your AACC Microsoft account.
In this case, you will not be prompted to set up MFA. Instead, you’ll approve sign-ins using your phone number via:
- A phone call
- A text message with a code
After signing in, we recommend adding Microsoft Authenticator for additional security and convenience. See the Microsoft Authenticator section below for detailed instructions.
You can add or update your MFA methods by:
❌ I did not provide a phone number during the application process
If your AACC Microsoft account doesn’t already have a phone number, you will be prompted to set up MFA the first time you log in.
During your first sign-in:
- You will be prompted to set up Microsoft Authenticator (most secure)
- To use a phone instead, select "I want to set up a different method" and select phone call or text
- Once one method is configured, you may add others
You can add or update your MFA methods by:
See below to add additional authentication methods, such as authenticator app, phone (text or call), and security key.
Tip: Add an alternate authentication method in case you lose access to your device.
Employee MFA Instructions
Employees will be prompted to approve their sign-in when accessing MyAACC or Microsoft 365 services, including Outlook, Teams, OneDrive, Forms, Bookings, and Office apps. MFA is also required for VPN access (FortiClient).
💼 Employee MFA Setup Instructions
- Navigate to https://aka.ms/mfasetup,
- Enter your employee email address (e.g.,
rhawk2@aacc.edu) and password, and select Sign in.
- Select Next.
- Choose your preferred method:
- Option A – Microsoft Authenticator App (most secure)
Install the free Microsoft Authenticator App from the App Store (iOS) or Google Play Store (Android).
Once installed, select Next on your computer and follow the on-screen steps to scan the QR code with your mobile device.
Approve the test notification to complete setup.
- Option B – Phone Call
Select I want to set up a different method, then choose Phone.
Enter your phone number and select Call me.
Answer the call and follow the instructions to approve the sign-in.
Tip: After setup, consider adding an alternate method (e.g., alternate phone) in case you lose access to your primary device.
Change or Update MFA Methods
After configuring your preferred MFA option, it's a good idea to add an additional phone number, email, or authenticator app, in case you ever lose access to your mobile device. You can add or update your MFA authentication methods at any time by:
For detailed instructions about updating your MFA device after receiving a new mobile phone, see Configure Microsoft Authenticator on New Phone.
Step-by-Step Instructions for each MFA Method
- Navigate to https://aka.ms/mfasetup.
- Enter your email address (ex. rhawk2@mymail.aacc.edu) and password, and select Sign in.
- Select Next. If you already have an authentication method set up, approve your sign in, then select +Add sign-in method and choose Microsoft Authenticator.
- Select Next.
-
The Microsoft Authenticator App must be installed on your mobile device. Search for "Microsoft Authenticator" in the App Store (iOS) or Google Play Store (Android). Please make sure that you're installing the Microsoft Authenticator App, and not a third party application. The Microsoft Authenticator App is FREE.
-
Once the Authenticator App has been installed on your mobile device, select Next on your computer to continue the MFA set up. Follow the on-screen instructions to scan the QR code with your mobile device/camera to complete the set up.
-
Complete the test approval using your computer and mobile device.
Phone Call or Text Message
- Navigate to https://aka.ms/mfasetup.
- Enter your email address (ex. rhawk2@mymail.aacc.edu) and password, and select Sign in.
- Select Next. If you already have an authentication method set up, approve your sign in, then select +Add sign-in method and choose Phone.
- Select I want to set up a different method.
-
Enter your phone number and choose an option to receive a text message or phone call.
-
Select Next to complete the set up. Approve your MFA setup by entering the 6 digit code or answering the phone call.
⚠️ Before you can set up a security key, you must first configure another MFA method such as phone call, text message, or the Microsoft Authenticator app.
Acquire Security Key
The following security key has been tested and approved for use with AACC accounts:
- Identiv uTrust FIDO2 NFC Security Key USB-C (FIDO, FIDO2, U2F, WebAuthn)
- Amazon Link to Purchase
- Contact the Technical Service Desk to verify product before purchasing.
Set Up Security Key
- Navigate to the MFA Setup Page by:
-
Add Your Security Key
-
In the dropdown, choose Security key. 
-
Select USB device and select Add > On the "Have your security key ready" screen, select Next
-
Register the Security Key
-
When prompted, plug your security key into a USB port > Proceed through the prompts by selecting OK > Create and confirm a new PIN for the security key 
-
Touch the security key when prompted
-
Select OK when you see "Passkey saved"
-
Name Your Security Key
Sign in Using Your Security Key
When logging in to MyAACC or any other AACC online service:
-
At the sign-in screen, select Sign-in options
-
Select "Use a face, fingerprint, PIN, or security key"
-
Choose Security key, plug in your device, and follow the prompts to approve your sign-in 
Troubleshooting
After setting up MFA, follow the steps in this guide to sign in to Microsoft 365 services: Using Multifactor Authentication with Email / Microsoft 365
If you still have questions or need help, contact the Technical Service Desk or request assistance using the Multifactor Authentication service page.