PURPOSE

The purpose of this document is to set up authentication options for a store’s Microsoft account.

PROCESS

Add/Change Office Phone as MFA Method

1. This process must be completed with access to the store phone. You may change the phone number associated with the account or add a new number at any time.
2. On the store manager’s computer, navigate to portal.azure.com.
   • NOTE: If already signed in, sign out by selecting the username in the upper-right corner, then click “Sign out”.
3. Select or enter the store’s email account and enter the password.
4. Click the email address in the upper-right corner and select View account.
   • 
5. A new browser tab will open. Under Security info, click Update Info.
   • 
6. Verify current MFA and approve the login.
7. Either Change the existing Office Phone to the format below OR Add sign-in method:
   1. Select United States as the Country or Region.
   2. In Office Phone, enter 5206154000 as the phone number.
   3. In Extension, enter ####4, then the 4 digit store number and the number 1 at the end.
      • For example: Store 1322 would have an extension of 413221.
   4. Select Call me.
      • 
8. Select Next.
   • Answer the phone and press # a few times until the voice accepts the input.
9. Select Done after verification is successful.
   • Your Microsoft session may time out and have you log in again. 
   • If asked to stay signed in, select No and check the box Don’t show this again.
10. You must follow Change Primary Authentication Phone Number (listed below) to the Office Phone.

Changing Default MFA Method to Office Phone

1. Follow the process below when you need to change the store’s primary authentication phone number to the properly formatted ‘Office Phone’.
2. On the store manager’s computer, navigate to portal.azure.com.
   1. If already signed in, proceed to step 3.
   2. Select or enter the store’s email account.
   3. Enter the password.
   4. Authenticate the current MFA.
3. Click the email address in the upper-right corner and select “View account”.
   • 
4. A new browser tab will open. Under Security info, click Update Info.
   • 
5. Verify the current MFA and approve the login.
6. Under Default sign-in method, select Change.
7. In the pull down, select the Phone - call with the extension and click Confirm.
   • 
8. Close the Security Info tab in the browser.

Adding Authenticator App (General Managers only)

1. Ensure the mobile device you are using already has the Microsoft Authenticator app installed. 
2. If your personal Mister email account does not have MFA set up, refer to the MFA - HOW TO REGISTER YOUR ACCOUNT document before proceeding.
3. On the store manager’s computer, navigate to portal.azure.com.
   1. If already signed in, proceed to step 4.
   2. Select or enter the store’s email account.
   3. Enter the password.
   4. Answer the phone call to authenticate if prompted.
      • 
4. Click the email address in the upper-right corner and select View account.
5. A new browser tab will open. Under Security info, click Update Info.
   • 
6. Verify the current MFA and approve the login.
7. Select Add sign-in method.
8. In the pull-down menu, select Set up Authenticator app.
9. Open the Microsoft Authenticator app on your mobile device.
10. Select the Plus icon in the upper-right corner and select Work or school account.
11. If there is no Plus icon, select the three vertical dots icon in the upper-right corner.
    • 
12. When a QR code reader appears on your device’s app, scan the QR code displayed on your computer. Once the scan is successful, click Next on your computer.
13. Select Approve on the Microsoft Authenticator app when prompted.
14. After answering the store phone to verify, select Close.

Removing Authenticator App Entry after GM Transfer

1. Open the Microsoft Authenticator app and select the Menu button in the upper-left corner.
   • Depending on your app, this will look like three horizontal lines or three vertical dots.
2. Select Accounts and tap the store’s email account.
3. Tap Remove account at the bottom.
4. Select All apps on this device on the popup that appears.

Using Microsoft Multi-Factor Authentication

1. When signing into the store account, the phone may ring and ask you to verify that you are at the store.
2. If you are away from the store and need to access the store account, log in as normal. You may be presented with the following prompt:
   • 
3. Select the Verify option. When asked how to authenticate, select “Approve a request on my Microsoft Authenticator app”.
   • 
4. Tap Approve on the notification that appears on your mobile device. You will be logged in.
   • NOTE: The store will receive a call to authenticate if the GM is accessing the account from a different location. 
   • WARNING: Store employees must be instructed to hang up without authenticating if they are not sure who is logging in.

HISTORY