How to setup 2FA on your
Knightec account
Datum: 2020-11-20
What is two-factor authentication (2FA)?
Two-factor authentication (2FA), sometimes referred to as two-step authentication or double-factor
authentication, is a security process in which you as a user provide two different authentication factors
to verify yourself. This process is used to better protect both your login and the information/system
that you can access. 2FA provides a significantly higher level of security than authentication methods
that only rely on usernames and password.
Why do we have 2FA?
To reduce the risk and increase our security level, we introduce 2FA to protect your Knightec account
in Office365. This significantly increases security and reduces the risk of unauthorized access.
How does it affect me?
Each time you are prompted to enter your login information (email address and password), you will
also be asked to confirm with a Microsoft Authenticator app on your phone (see the section How do I
activate 2FA in my account?).
You will be asked to confirm your login with 2FA on the following occasions:
• Each time you log in to a new service for the first, e.g. Outlook, Office365 apps or Teams.
• If you have been inactive for 30 days, you will be prompted to log in again, e.g. after you had
a long vacation.
• When changing password.
• When you log in to a new device, e.g. computer or telephone.
NOTE! 2FA requires that you have physical access to your phone in order to log in.
FAQ & Known problems
• Teamtailor Calendar integration cannot handle the 2FA activation. Solution: Disconnect the
calendar integration and reconnect it again.
• Some versions of the Outlook (iOS & Android) and the Samsung mail app cannot handle the
activation of 2FA. Solution: Remove the account on the device and then add it again.
• Are App Passwords allowed? No, app passwords break the purpose of 2FA and are not allowed.
• Evolution on Ubuntu 18.04 does not yet support modern 2FA. Solution: Use another mail client
or the web version of Outlook.
How do I activate 2FA in my account?
When you try to log in to your account for the first time, you will be prompted to log in with your
existing information (email address & password) followed by the process for how to activate 2FA.
Perform the following steps to enable 2FA (language depends on your local browser / computer
settings):
1. Go to https://outlook.office.com/ and sign in with your Knightec account (email address and
password)
1|
2. Once logged in, you will be greeted by the following view, click Next to continue.
3. You will now be greeted by a view where you can choose how you will approve the two-factor
login in the future. Here we strongly recommend using the option "Receive notification for
verification" (circled in red) as it is most convenient for you as a user. This option sends a
message to the Authenticator app on your smartphone. Click the message and, if it is
legitimate, select "Authenticate in the app".
4. Click on Set up
2|
5. You are now greeted by the following view (NOTE! The QR code in the image below is just an
example)
6. Download and install the Microsoft Authenticator on your phone:
• Android: https://play.google.com/store/apps/details?id=com.azure.authenticator
• iOS: https://apps.apple.com/app/id983156458?mt=8
7. Open the app, click the Settings icon in the top right corner and then select Add account, then
select Work or school account.
• If this is your first time configuring the Microsoft Authenticator app, you may be asked if
you want to allow the app to access the camera (iOS) or allow the app to take pictures
and record video (Android). You must select Allow so that the Authenticator app can
access the camera to scan the QR code in the next step. If you do not allow the camera,
you can still configure the Authenticator app, but you will need to add the code
information manually.
8. Use the device camera to scan the QR code from the Configure Mobile App screen on your
computer, then select Next.
9. Return to the computer and make sure you receive the message stating that the configuration
was successful and then select Next. The Authenticator app sends a message to your mobile
device as a test.
10. Select Confirm on your mobile device.
11. 2FA has now been successfully enabled.
3|
12. To verify that it works go to https://outlook.office.com and log in with your Knightec account
credentials (email address & password) just like in step 1. You will now receive a notice similar
to the test on Step 9, approve this.
13. You are now automatically logged in to the web version of Outlook.
Can I switch or add another mobile device?
Yes, go to the following link: Additional security verification and follow the instructions as above.
What happens if my phone breaks or is stolen?
No problem, just contact ServiceDesk and they will assist you with restoring your 2FA so you can log in
again.
I want to know more about this, where can I find Microsoft's
documentation?
Microsoft's instructions can be found here: https://docs.microsoft.com/sv-se/azure/active-
directory/user-help/multi-factor-authentication-setup-auth-app
4|
