Once MFA has been turned on for the user, upon logging into the DMS for the first time since this was enabled in Administration, the user will then be prompted with the following screen:
The user will then need to download the Authenticator App on either the App Store or Google Play,
dependent on which Operating System their mobile device uses, alternatively the QR code can be
scanned with the mobile device’s camera to download the Authenticator App.
The Authenticator App must be downloaded on a mobile device and cannot be downloaded on a PC.
If the user already has the Authenticator app downloaded on their device, this will add the new account
within here and the codes needed will be listed under ‘Azure AD’ and ‘Pinewood DMS’.
The 6-digit codes will automatically update in the Authenticator App every 30 seconds.
Once this has been done and the Authenticator is generating the 6-digit codes, click Next and the code
shown currently will need to be entered in the box:
Click Verify and a pop-up will display to say the process has been completed.
Click Finish and the user will be signed in as normal.
When logging into the system again, the user will then be prompted with the below pop-up:
The Authenticator App on their mobile device will then need to be opened and the 6-digit code it has
generated will need to be entered in the box. Once done, click Verify and the user will be signed in as
usual.
The ‘Trust This Device?’ box can be ticked and allows the device to recognise the user, so an
authentication code doesn’t need to be entered every time the user logs in to the DMS. This option
should only be used where the user is the only person with access to the PC.
We recommend backing up account credentials on the Authenticator App so users can recover the details on a new device or after a device reset. Instructions for backing up the Microsoft Authenticator App can be found here.