Microsoft

Authenticator
Changing our Strong
Authentication solution from
Symantec VIP to Microsoft
Authenticator

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Enrollment steps
• Click and open this link on your
computer https://aka.ms/mysecurityinfo
• You might be prompted to sign in as shown to the
right. Sign in as prompted.
• If you are already signed into your Microsoft [email protected]
or

account, you will go directly to the page as shown

[email protected]
or
FirstName.Lastname.EXT

below.
@ericsson.com

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Enrollment steps
• Select Add method in the Security
info pane.
• On the Add a method pop-up,
select Authenticator app from the
list then select Add.

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Enrollment steps
• Now you will see the pop-up to the right.
• Follow instructions in the pop-up. If you do not already
have the application installed on your phone.
• Click Next on the computer pop-up after you have
Microsoft Authenticator installed on your mobile phone.
• Now you will see the pop-up shown below in your
computer. Stay there and take the next step on your mobile
phone.

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Enrollment steps
• On your mobile phone, open the Microsoft Authenticator
app. Passcode or face ID (if you have enabled it) is
required to open the app.
• If prompted, select to allow notifications
• Press the + or three dots icon on the top right of the
Authenticator screen to add account.
• Select Work or school account.
• Stay here and don’t click Scan QR code yet.

Note – If you see the Do you have a backup? pop-up. Please

click Continue.

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Enrollment steps
Now go back to your computer where you
have the Set up your account page still open,
click Next.

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Enrollment steps • On your mobile phone, now you can
click Scan QR code in the Authenticator
• Now you will see a QR code on your app (if not present, see step 4 in this guide).
computer as shown below. • If the QR code reader can't read the code, you
• Stay there and go to your mobile phone. can select Can't scan image and manually
enter the code and URL into the Authenticator
app.

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Enrollment steps
Click Next on below screen You will see below screen. Go to your mobile
phone.​​

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Enrollment steps
• You will see this on your mobile phone. • Go back to your computer and click Next to
• Press Approve when prompted. complete the first part of enabling enrolling.
• Type the number from "Let's try it out" in the • Follow-up confirmation screens can safely be
"Enter number here" field. accepted.
• Click Yes.

Note: The number matching is a challenge / response

ensuring you, and only you can approve the sign-in.
Never share this code with anyone!
Ericsson Internal | 2018-02-21
Microsoft Authenticator
Enrollment steps
• Now you are just one step away
from enjoying passwordless when
accessing all Ericsson applications
and environments that are today
protected by Microsoft Azure
including for example O365 apps.
This security approved solution
works for both mobile phone and
computer.

• Please continue with the next

steps to go passwordless.

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Going passwordless
• Open Authenticator app on your mobile phone, select
your Ericsson credential.
• Then click Enable phone sign-in to start the Passwordless
enrollment.

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Going passwordless
• Review the status of your device. Click Continue if
there is no red cross on Device Registration and Set
passcode.
• Perform the number matching. Use I can’t see the
number if it is hidden behind the Are you trying to
sign in popup.
• The select Register.

Congratulations. You are passwordless!

Note: Device Registration and passcode are requirements for

Passwordless sign-in

Ericsson Internal | 2018-02-21

Microsoft Authenticator
Curious? Test!
• Note: If you have not enabled Phone Sign-in
(Passwordless) then you will need to wait 15-20
minutes before testing. Password is required during
this logon.
• From your PC or your mobile phone, use your favorite
browser in InPrivate / Incognito / Private mode, and
open:
• https://internal.ericsson.com or https://www.office.com
• Now sign in to Office365 or Ericsson portal using
Passwordless authentication following the screenshots
on the right.
• Enjoy!

Ericsson Internal | 2018-02-21

Hard Token Users - FIDO 2 Security Keys
Security Key is a device that makes two-factor authentication Passwordless and as simple as possible. Instead of a code being texted, or
generated by an app on phone, the user touch on the Security Key (YubiKey). Each device has a unique code built on to it, which is used to
generate codes that help confirm user's identity.

Users who cannot use Software based Authenticators; they can use YubiKeys. However, YubiKeys comes with the *cost* and Ericsson responsible
should be contacted for the same.

— Yubico 5 Series are the only approved keys in Ericsson.

— Keys come in multiple flavors: USB-A, USB-C, Lightning, NFC

Terms of Use (After procurement of YubiKeys)

• Enroll via the My Support order Strong Authentication Security Keys (onbmc.com)
• PIN length of the Security Key must be a minimum of 8 digits (numeric).
• Security Key must be named according to Ericsson guidelines:
• Signum_KeyType_SerialNumber EXXXXXX_Yubi5NFC_123456789
• Treat the Security Key as high value asset.
• Never leave the Security Key unattended (includes Ericsson office premises).
• Security Key would not be shared with anyone else.
Ericsson Internal | 2018-02-21