2FA Setup Guide

Overview

2-Factor Authentication (2FA) is now required for most university accounts. Learn how to set up Microsoft Authenticator app or use a supported alternative method to securely sign in.

 

CAUTION  - IT Services staff will never ask you to provide your password or authentication code. Do not provide such information to anyone who asks for it.

Table of Contents


What you'll need to begin

NOTEIf you have already registered 2FA but are currently locked out, please attempt a self-service password recovery or read the common issues section.

 

Requirement *
If you don't have it...
...you will need this instead
ECU username * Follow our self-service username recovery instructions. Access to the personal email address you used to register at ECU (to receive automated messages).
ECU password * Create a ticket or visit Service Desk (B1116) for assistance. Access to the personal email address you used to register at ECU (to correspond with IT Services). Photo ID and/or student card may be required to validate your identity.
Modern iOS, Windows or Android smartphone capable of running Microsoft Authenticator Use one of the supported alternatives to Microsoft Authenticator. Access to an internet-connected macOS, Windows or ChromeOS computer (to receive 2FA prompts).
A personal laptop or desktop computer * Use a school or shared computer instead A private browser tab that can be closed when the process is complete (to erase your history and prevent unintended access by another computer user).

Microsoft Authenticator for 2FA

ECU strongly recommends using Microsoft's 2FA authenticator to safeguard your personal data.

NOTE

  • Microsoft Authenticator is completely free (be cautious to avoid similar-looking, paid authenticator apps).
  • It requires iOS 14.0 or later (available for iPhone 6 and above) or Andriod 6.0 or later.
  • If your mobile device does not meet these requirements, please see our supported alternatives.
  • IT Services provides only limited support for other authentication products

 

How to set up Microsoft Authenticator

 Uploaded Image (Thumbnail)

Step 1:

Open the 2FA registration page on your computer and enter your ECU username and password:

https://aka.ms/mfasetup

Your username will be the same format as your email address (e.g., ecarr1234@ecuad.ca).

Step 2:

Skip past the More Information Required screen.

This screen simply indicates that you have not yet registered 2FA.

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 3:

Install the Microsoft Authenticator App on your mobile device.

  • You can download the app directly from your devices app store (e.g., Apple App Store, Google Play).
  • Click Next once it is installed on your mobile device.

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 4:

Click Next to proceed to the Set up your account screen

Keep your computer paused at this step and turn your attention to your mobile device.

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 5:

Open the Microsoft Authenticator App on your mobile device and tap the Scan a QR Code option

If prompted, allow notifications from the App, click Accept and Continue.

 

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 6:

Using your mobile device, scan the QR code displayed on your computer and then click Next.

 

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 7:

The process on your computer will initiate a test notification.

  • Make note of the number that appears on your computer
  • On your mobile device, you should also receive a notification from the Microsoft Authenticator App .

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 8:

Enter the number from the message on your laptop or desktop computer and tap Yes.

If you do not receive the notification, check the notification settings on your phone to ensure notifications for the Microsoft Authenticator app are allowed.

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 9: 

Your computer will indicate that approval has been received.

  • Please allow a few moments for the approval step to complete.
  • Then, click Next to continue.

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 10: 

Click Done to complete the process.

You should now see Microsoft Authenticator listed as the default sign-in method. 

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 11:

To add an optional secondary method, click Add method and enter the method details as prompted.

  • Recommended in case your default method is unavailable. 
  • e.g., if you lose access to your mobile phone

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 12:

Modify your methods at any time https://aka.ms/mfasetup

 

Back to Table of Contents


Common setup issues for Microsoft Authenticator

More information coming soon.


How to sign in using 2FA

Once 2FA setup is complete you can sign into all ECU systems and accounts for which you are eligible.

PLEASE NOTE

  • The 2FA sign in process will look the same for all digital services.
  • Remember to keep your phone nearby, whenever you are accessing university accounts.
  • Never share your two digit code with anyone, not even IT Services staff.

 

Instructions

 

Step 1:

Enter your username at the Emily Carr University sign-in page. 

 

This will be the same as your ECU email address e.g., ecarr8018@ecuad.ca.

Step 2:

Enter your current ECU password.

 

This will be the same password that you use for email.

Step 3:

You will now be presented with a 2-digit code.

 

If you do not have cell service, or if you are using the 2Stable Authentication app you must use the 6-digit code method instead.

Step 4:

Open the Microsoft Authenticator app on your 2FA-registered phone and enter the 2-digit code.

 

  • This process is time sensitive.
  • You must send a new 2-digit code if you run out of time.

Step 5:

Wait a few seconds for the authentication process to complete.

 

You should now have access.

 

Back to Table of Contents

 


Troubleshooting common issues

More information coming soon


Self-service Username Recovery

If you don't recall your username, you may be able to recover access without assistance from IT Services.

NOTE  - To recover your username, you need access to the personal email address you used to register at ECU.

 

Instructions

 Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 1:

Visit our self-service Forgot User Name page.

 

 

Uploaded Image (Thumbnail)

Step 2:

Enter your First Name, Last Name, and your personal Email Address.

This must be the same personal email address you used to register for ECU.

Step 3:

Click Submit.

If this email address is on record, we will send you further instructions.

 

Back to Table of Contents


Self-service Password Recovery

If you are locked out, you may be able to recover access without assistance from IT Services.

NOTE

  • To use self-service password recovery you must have already registered a 2-Factor-Authentication (2FA) method
  • Changing your ECU password will also change your password for all systems, including ECU email, MyEC, Moodle, Adobe, Wi-Fi and VPN.
  • Please remember to update any cached passwords on your devices e.g., campus Wi-Fi.

 


Instructions

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 1:

Complete the Microsoft self-service Forgot Password page.

 

  • Enter your ECU username / email address, complete the CAPTCHA challenge and then click next.
  • If you are unable to proceed, retry the CAPTCHA challenge or ensure that you have the correct username.

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 2:

Choose I forgot my password to proceed to the verification steps.

 

If you have simply been locked out due to too many incorrect attempts, choose I know my password, but still can't sign in. This will allow you to keep your current password.

 

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 3:

Choose Approve a notification on my authenticator app (recommended) and click next.

 

Or choose the second option and enter the 6-digit code currently displayed in your Microsoft Authenticator app.

Uploaded Image (Thumbnail)

*click on the image to zoom in*

Step 4:

Enter your new password into both fields and click Finish.

 

The passwords entered must match.

Uploaded Image (Thumbnail)

Step 5:

Your password has now been reset for all ECU systems.

 

Make sure to update your Wi-Fi settings and any browsers where the old password was cached.

 

Back to Table of Contents

 


What if I don't have a modern smart phone?

Use Cases

Use
Explanation
macOS computer iCloud Keychain Apple computers now support an OS-native solution for 2FA
Windows computer iCloud for Windows Windows also supports the use of the Apple iCloud 2FA solution.
Chromebook computer Bitwarden Devices running ChomeOS will need to use a 3rd party alternative. We have tested and recommend Bitwarden.

Apple iCloud for 2FA

 

What you'll need to begin

 

NOTEIf you have already registered 2FA but are currently locked out, please attempt a self-service password recovery or skip to the troubleshooting section.

 

Requirement *
If you don't have it...
...you will need this instead
ECU username * Follow our self-service username recovery instructions. Access to the personal email address you used to register at ECU (to receive automated messages).
ECU password * Create a ticket or visit Service Desk (B1116) for assistance. Access to the personal email address you used to register at ECU (to correspond with IT Services). Photo ID and/or student card may be required to validate your identity.
A personal laptop or desktop computer running macOS, Windows, Linux or ChromeOS* Create a ticket or visit Service Desk (B1116) for discuss alternatives. n/a
An existing Apple account Create a free Apple account. A new Apple account created using your personal or @ecuad.ca email address.

Back to Table of Contents


Should I use a personal or ECU Apple Account?

Either option will work the same for 2FA, but you can consider the following:

  • if you have an existing Apple account, you can simply proceed to the next step
  • if set up with your personal email address, your Apple account + ECU passwords will be different
  • if set up using your ECU email address (e.g., ecarr1925@ecuad.ca), your Apple password will be the same as used across all other ECU systems

Back to Table of Contents


How to enable iCloud Keychain (macOS)

Uploaded Image (Thumbnail)

*image coming soon*

Step 1:

Decide to use either a personal or managed Apple account from ECU:

  • Personal Apple Account: If you already have a personal Apple Account set up on your device, and you are signed into to iCloud, you can simply use your existing account. 
  • Managed Apple Account from ECU: If you don’t have (or don’t want) to use a personal Apple Account, you can access a university Apple account using your @ecuad.ca credentials. 

 

*image coming soon*

Step 2:

Navigate to Apple menu \ System Settings \ Apple Account. 

 

For older macOS devices go to  System Preferences \ Apple Account.

Uploaded Image (Thumbnail)

*image coming soon*

Step 3:

Sign in with your preferred Apple account.

You may use a personal account, or one connected to your ECU email address.

*image coming soon*

Step 4:

Under iCloud settings, enable iCloud Keychain. 

 

 

Back to Table of Contents


How to enable iCloud Passwords (Windows)

Uploaded Image (Thumbnail)

Step 1:

Decide to use either a personal or managed Apple account from ECU:

  • Personal Apple Account: If you already have a personal Apple Account set up on your device, and you are signed into to iCloud, you can simply use your existing account. 
  • Managed Apple Account from ECU: If you don’t have (or don’t want) to use a personal Apple Account, you can access a university Apple account using your @ecuad.ca credentials. 

 

Step 2:

Install iCloud for Windows (from Microsoft Store or apple.com). 

 

For older macOS devices go to  System Preferences \ Apple Account.

Uploaded Image (Thumbnail)

Step 2:

Sign in with your preferred Apple account.

You may use a personal account, or one connected to your ECU email address.

Step 3:

Enable iCloud Passwords in the iCloud app. 

 

Step 4:

Install one of the official iCloud Passwords Browser Extensions 

Back to Table of Contents


How to sign in with iCloud Keychain (macOS)

More information coming soon.


How to sign in with iCloud Passwords (Windows)

More information coming soon.


Bitwarden

More information coming soon.

Was this helpful?
25% helpful - 20 reviews
Create Ticket Print Article

Related Articles (3)

Frequently asked questions about Microsoft 365 2-Factor Authentication (2FA) and its relation to University services.
How to access your Service Desk account.
Steps for changing a temporary password or improving the strength of an older password.

Related Services / Offerings (2)

Can't sign in? Get assistance with usernames, passwords & 2-Factor Authentication wherever self-service is not possible.
Need additional assistance with technology? Place a request with IT Services.