Passkeys for MFA Setup

Microsoft Authenticator is the recommended and fastest authentication method for your Alfred State account. For instructions, see the Microsoft Authenticator Setup Guide.

If you prefer an alternative method that does not require Microsoft Authenticator, a passkey is another secure option. A passkey lets you use your device's face recognition, fingerprint, passcode, or PIN to sign in. 

Types of Passkeys:
Device Bound - Tied to a specific device, authenticator, or a hardware security keys such as a YubiKey, requirements depend on the bound device (see below)

• FIDO2 Hardware Security Keys (available at the campus store) - Typically USB-A and/or USB-C, consider where you will / wont be able to plug it in to authenticate
• Passkey Stored in Microsoft Authenticator - Requires the Microsoft Authenticator be installed and set up to your Alfred State account
• Other Authenticator Apps - We will do our best to assist with using a preferred alternative app, but Alfred State cannot guarantee functionality for unsupported applications

Cloud Synced - Requires a camera to scan a QR code and use cloud services to sync your passkey to be used from other devices, requirements depend on the service (see below)

• Google Password Manager - Android Default, requires android device and/or Google Password Manager
• Apple Passwords / iCloud Keychain - iOS Default, requires iOS device
• 3rd Party Password Managers such as Bitwarden or 1Password - Requires the browser extension and mobile app to fully utilize

The process used to register a passkey does not necessarily determine whether it is synced or device-bound. For example, you may scan a QR code with your phone and then choose to save the passkey in Apple Passwords or Google Password Manager (Synced), or you could choose Microsoft Authenticator if installed (Device Bound).

1. Go to  myaccount.microsoft.com (NOTE: This cannot be done from the same device you plan to approve your sign-ins with)
    
2. Click on "My Account" on the left-hand side of the page to open that drop down menu
    
3. Click on "Security Info" from the drop down menu you just opened
    
4. Click "Add sign-in method"
    
5. Click "Passkey"
    
6. Click "Next"
    
7. If prompted, select "iPhone, iPad, or Android device"
    
8. If prompted, you must click "Turn on Bluetooth"
    
9. Open your camera app and scan the QR code with the device you wish to approve sign-in requests with (preferably a phone, or a device you always have with you)
    
10. Choose where to save the passkey from the device, the default option for iOS (Apple) is the Passwords app, and for Android devices it will be the Google Password Manager. These are both synced Passkeys which can be used from any device as long as you are signed in with the same account.
    
    (Any installed apps that support Passkeys will also appear as an option, such as Microsoft Authenticator or password manager apps, often times these are device bound passkeys which are only usable from the device you added it to)
    
    iOS (Apple) Popup(Select your method, then click "Add Passkey", "Save in Passwords" is recommended)
    
    Android Popup(Click "Continue")
    
     
11. Look back to the myaccount.microsoft.com page from steps 1-6, the last step is to name your Passkey and then click "Next" to finish

1. Navigate to wherever you are trying to sign in with Alfred State account, for example the Alfred State portal https://experience.elluciancloud.com/asc711
    

2. Select or enter your Alfred State e-mail when signing in
    
3. If prompted, select "Face, fingerprint, or PIN" (This option will be automatically selected if you do not have alternative authentication methods)
    
4. If prompted, select "iPhone, iPad, or Android device" (This option will be automatically selected if you do not have a security key on your account)
    
5. Scan the QR code from the device you set up earlier
    
6. Approve the sign in from your phone, this will use the device sign in method (typically passcode or Face ID)
   
   iOS PopupAllow Bluetooth if prompted, click "Use Passkey", and then approve the sign in with Face ID or your device passcode
   
   Android PopupAllow Bluetooth if prompted, then approve the sign with Face ID or your device passcode
   
    
7. Look back to the device where you were trying to sign in, click either "Yes" or "No" if asked to stay signed in
    
8. You have successfully set up and used a Passkey to sign into your Alfred State account

• Ensure bluetooth is enabled on the device you are signing into, as well as the device you have saved the passkey to. If your passkey is bound to your phone and not cloud service such as Passwords for Apple devices or Google Password Manager for Android devices, bluetooth is required to approve sign ins
• If you wiped or got a new phone, and the passkey was saved there (and not on a cloud service), you may need to return to myaccount.microsoft.com to delete the old passkey and create a new one following this same guide
• If you are still having difficulty, we highly recommend using the Microsoft Authenticator (Microsoft Authenticator Setup Guide) as it is a faster and easier method to authenticate. If you have concerns regarding it, or need further assistance getting Passkeys working on your device, contact the Help Desk with their information below.

Need additional information or assistance? Contact the Alfred State Help Desk.

Phone:  (607) 587-HELP (4357)

Email:  helpdesk@alfredstate.edu