Before Starting, Open WinAuth from the SafeOS Landing Page (applications on the tab at the top) this will be used shortly.
Once your 2FA has been enabled by a member of the 2nd Line IT Team upon next log in with the user you will be presented with the following
Step 1 - Sign into Office 365
If the user you are with has had WinAuth set up previously but forgotten their password please use the following link : https://aka.ms/MFASetup (please follow the guide from the above picture if this is the case)
Step 2 - Once you sign in, this will challenge you and advise you that more information is required. Please confirm and move on to the next screen in which you will be selecting how you will be authenticating.
Step 3 - Select the drop-down menu for how we should contact you, and change this to Mobile app, then check the radio button "Use verification code". Finally click the Set up button.
Step 4 - Office 365 will present you with a screen with the QR Code, on this screen click the link next to the code where it says "Configure app without notifications". Once this is open, do not press next as we will require this for the upcoming steps.
Step 5 - Now that we have Office 365 details for two factor authenication, open up WinAuth from SafeOS Applications tab, then click the "add" button and add a "Microsoft" Authenticator.
Step 6 - Using the information from Office 365 and your email address as the name of the authenticator at the top, Copy the secret key into the requested field for WinAuth, then press Verify Authenticator.
Once completed it will show a 6 digit number that will change on a timer, leave this open as you will require this within the next steps.
Step 7 - Click Next on the "Configure Mobile App" on Office 365, until this asks for the 6 digit PIN from WinAuth. Enter the Pin and then click Next again.
Step 8 - Click Ok on WinAuth to confirm your changed. This will create your entry within WinAuth with your Email address as a name, Please add a password to secure WinAuth and Encrypt on the PC as per below. When you have set a password and Encrypted as shown below click OK to continue.
Once completed WinAuth will change to the above image. Please note by clicking the Refresh icon here, WinAuth will not cycle PINS you need to generate it everytime using this icon on the right side of WinAuth.
Step 9 - Office 365 will ask you for a backup devise for you to use incase you lose your WinAuth Install. Please use the agents mobile number for this step (this will require you to ask the agent their mobile number so we can keep this up to date) This will only be used to recover WinAuth and nothing else.
Once the user has confirmed their number and you are happy with this please hit next. You will now have set up WinAuth and at this point you will need to ask a member of the 2nd Line IT Team to Enforce the user on the backend system.
A video of this being performed has also been attached to this solution.