Home

Google Authenticator app & Office 365 MFA

%3CLINGO-SUB%20id%3D%22lingo-sub-108612%22%20slang%3D%22en-US%22%3EGoogle%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-108612%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20it%20possible%20to%20use%20the%20Google%20Authenticator%20iOS%20app%20with%20Office%20365%20MFA%20instead%20of%20the%20Microsoft%20Authenticator%20app%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20tried%20adding%20to%20Google%20Authenticator%20with%20both%20QR%20code%20and%20manually%20but%20got%20failures%20each%20time.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-108612%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-377308%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-377308%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EGoogle%20Authenticator%20app%20works%20with%20Office%20365%20MFA%20too.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblog.paranoidpenguin.net%2F2018%2F06%2Foffice-365-multi-factor-authentication-with-google-authenticator%2F%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblog.paranoidpenguin.net%2F2018%2F06%2Foffice-365-multi-factor-authentication-with-google-authenticator%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-358128%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-358128%22%20slang%3D%22en-US%22%3EI%20just%20used%20the%20QR%20code%20with%20the%20Google%20Authenticator.%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20for%20the%20procedure%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-320339%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-320339%22%20slang%3D%22en-US%22%3E%3CP%3EBut%2C%20I'm%20unable%20to%20scan%20the%20barcode%20using%20google%20authenticator.%3C%2FP%3E%3CP%3EGetting%3A%20%22cannot%20interpret%20QR%20code%22.%3C%2FP%3E%3CP%3ESeems%20that%20the%20QR%20code%20only%20works%20with%20MS%20authenticator...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-285866%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-285866%22%20slang%3D%22en-US%22%3EIndeed%2C%20that%20is%20the%20way%20to%20use%20Authy!%3CBR%20%2F%3EMany%20thanks%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265417%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265417%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97091%22%20target%3D%22_blank%22%3E%40Przemyslaw%20W%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CP%3ENo%20true%2C%20you%20are%20not%20forced%20to%20install%20MS%20Authenticator%2C%20You%20can%20without%20problem%20use%20Google%20Authenticator%2C%20but%20you%20need%20to%20display%20the%20%22Secret%22%20key%3A%3C%2FP%3E%3CP%3EIn%20screen%20with%20QRCode%20to%20scan%20there%20is%20a%20small%20blue%20link%20%22Setup%20application%20without%20notifications%22%20(sorry%20don't%20exactly%20know%20if%20this%20is%20proper%20translation%20for%20it)%20%2C%20click%20it%20and%20you'll%20get%20the%20secret%2C%20then%20just%20type%20it%20into%20G%20Authenticator%20and%20you're%20set%20%3A)%3C%2Fimg%3E%20(You%20don't%20have%20to%20type%20the%20full%20account%20name%2C%20this%20is%20for%20you%20to%20identify%20it%20only).%3C%2FP%3E%3C%2FBLOCKQUOTE%3E%3CP%3EThank%20you%2C%20that%20was%20the%20key%20for%20me.%20For%20anyone%20else%20wondering%2C%20this%20is%20the%20process%20for%20setting%20up%202%2FMFA%20with%20any%20OTP%20app%20(I%20use%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FandOTP%2FandOTP%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EandOTP%3C%2FA%3E%3A(%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3EOpen%20the%20security%20verification%20page%20for%20your%20user%3A%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FMFASetup%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2FMFASetup%3C%2FA%3E%3C%2FLI%3E%3CLI%3ECheck%20the%20%3CSTRONG%3EAuthenticator%20app%3C%2FSTRONG%3E%20box%2C%20and%20click%20the%20Configure%20button.%3C%2FLI%3E%3CLI%3EClick%20the%20%3CEM%3EConfigure%20app%20without%20notifications%3C%2FEM%3E%20URL%3C%2FLI%3E%3CLI%3ENow%20scan%20the%20QR%20code%20with%20your%20app%20and%20configure%20like%20normal.%3C%2FLI%3E%3C%2FOL%3E%3CP%3EIt%20seems%20like%20Microsoft%20really%20go%20out%20of%20their%20way%20to%20obscure%20the%20fact%20that%20you%20don't%20actually%20need%20%3CEM%3EMicrosoft%20Authenticator%3C%2FEM%3E%20to%20use%20this%20factor%20for%20authentication.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-263997%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-263997%22%20slang%3D%22en-US%22%3E%3CP%3ETruth%20is%2C%20Office%20365%26nbsp%3B%3CSTRONG%3Eshould%3C%2FSTRONG%3E%20support%20a%20variety%20of%20multi-factor%20authentication%20options%20-%20Google%20Authenticator%2C%20Duo%2C%20Yubico%20etc.%26nbsp%3B%20MFA%20for%20O365%20wont%20get%20wide%20spread%20adoption%20until%20they%20support%20more%20than%20just%20their%20own%20multi%20factor%20option.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-263971%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-263971%22%20slang%3D%22en-US%22%3ECan%E2%80%98t%20find%20the%20edit%20button%2C%20ihrer%3Dother%2C%20Brocken%3Dbroken%3CBR%20%2F%3Esent%20with%20mobile%20device%26lt%3B%E2%80%94%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-263968%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-263968%22%20slang%3D%22en-US%22%3EOn%20the%20ihrer%20Hand%2C%20there%20is%20something%20missing.%20What%20if%20you%20never%20want%20to%20loose%20access%2C%20wouldn%E2%80%98t%20it%20be%20clever%2C%20to%20add%20another%20totp%20provider%2C%20like%20keePassXC%20or%20just%20a%20second%20device%20with%20a%20totp%20app%3F%20If%20you%20consider%20your%20phone%20at%20risk%20of%20getting%20lost%20or%20Brocken%2Funaccessable%3F%20MS%20only%20supports%20phone%20numbers%20as%20backup%20there...%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-219894%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-219894%22%20slang%3D%22en-US%22%3E%3CP%3ESo%2C%20it%20appears%20that%20you%26nbsp%3Bcan%20use%20Google%20Authenticator%20or%20Authy%20with%20Office%20365%20but%20only%20if%20you%20choose%20to%20%22Use%20verification%20code%20from%20app%22%20instead%20of%20the%20much%20more%20convenient%20%22%3CSPAN%3EReceive%20notifications%20for%20verification%22%20which%20pushes%20a%20notification%20to%20the%20authenticator%20app%20on%20your%20device.%26nbsp%3B%20Shame%20Authy%2FGoogle%20Authenticator%20can't%20handle%20the%20push%20notification%20from%20Office%20365%20because%20most%20people%20only%20want%20one%20authenticator%20app%20on%20their%20phone.%20I%20wonder%20whose%20at%20fault%20here%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-212626%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-212626%22%20slang%3D%22en-US%22%3E%3CP%3EGlad%20I%20saw%20this%20thread.%20Man%2C%20they%20really%20make%20it%20difficult.%20%22Set%20up%20app%20without%20notifications%22%20(whatever%20that%20means)%20instead%20of%20%22Use%20another%20app%20besides%20Microsoft%20Authenticator%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGrrr.....%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187323%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187323%22%20slang%3D%22en-US%22%3E%3CP%3EWorks%20perfect.%20Saved%20me%20from%20one%20more%20app%20installation.%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-183427%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-183427%22%20slang%3D%22en-US%22%3E%3CP%3Eits%20there.%20(hope%20you%20arent%20looking%20in%20the%20google%20app).%20Setup%20works%20like%20a%20charm!%20Thanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-146985%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-146985%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20this%20still%20work%3F%20I%20don't%20see%20any%20link%20to%20%22%3CSPAN%3ESetup%20application%20without%20notifications%22.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-130415%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-130415%22%20slang%3D%22en-US%22%3E%3CP%3ENo%20true%2C%20you%20are%20not%20forced%20to%20install%20MS%20Authenticator%2C%20You%20can%20without%20problem%20use%20Google%20Authenticator%2C%20but%20you%20need%20to%20display%20the%20%22Secret%22%20key%3A%3C%2FP%3E%0A%3CP%3EIn%20screen%20with%20QRCode%20to%20scan%20there%20is%20a%20small%20blue%20link%20%22Setup%20application%20without%20notifications%22%20(sorry%20don't%20exactly%20know%20if%20this%20is%20proper%20translation%20for%20it)%20%2C%20click%20it%20and%20you'll%20get%20the%20secret%2C%20then%20just%20type%20it%20into%20G%20Authenticator%20and%20you're%20set%20%3A)%3C%2Fimg%3E%20(You%20don't%20have%20to%20type%20the%20full%20account%20name%2C%20this%20is%20for%20you%20to%20identify%20it%20only).%3C%2FP%3E%0A%3CP%3E---%20edit%20after%2015min%20---%3C%2FP%3E%0A%3CP%3EPs.%20I%20just%20set-up%20on%20my%20new%20phone%20GAuthenticator%20for%203%20company%20O365%20accounts%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-113728%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-113728%22%20slang%3D%22en-US%22%3E%3CP%3EYet%20both%20should%20just%20implement%20%3CA%20href%3D%22https%3A%2F%2Ftools.ietf.org%2Fhtml%2Frfc6238%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3ERFC6238%20%3C%2FA%3Eand%20%3CA%20href%3D%22https%3A%2F%2Ftools.ietf.org%2Fhtml%2Frfc4226%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3ERFC4226%3C%2FA%3E.%20Does%20either%20Microsoft%20or%20Google's%20app%20add%20anything%26nbsp%3Bproprietary%20to%20the%20TOTP%20and%20HMAC%20standards%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-108751%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-108751%22%20slang%3D%22en-US%22%3E%3CP%3ENo%2C%20as%20it%20only%20supports%20Google's%20MFA%2C%20afaik.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Bryan Callicott
New Contributor

Is it possible to use the Google Authenticator iOS app with Office 365 MFA instead of the Microsoft Authenticator app?

 

I tried adding to Google Authenticator with both QR code and manually but got failures each time.

16 Replies

No, as it only supports Google's MFA, afaik.

Yet both should just implement RFC6238 and RFC4226. Does either Microsoft or Google's app add anything proprietary to the TOTP and HMAC standards? 

No true, you are not forced to install MS Authenticator, You can without problem use Google Authenticator, but you need to display the "Secret" key:

In screen with QRCode to scan there is a small blue link "Setup application without notifications" (sorry don't exactly know if this is proper translation for it) , click it and you'll get the secret, then just type it into G Authenticator and you're set :) (You don't have to type the full account name, this is for you to identify it only).

--- edit after 15min ---

Ps. I just set-up on my new phone GAuthenticator for 3 company O365 accounts :)

Does this still work? I don't see any link to "Setup application without notifications".

its there. (hope you arent looking in the google app). Setup works like a charm! Thanks

Works perfect. Saved me from one more app installation.

Thanks.

Glad I saw this thread. Man, they really make it difficult. "Set up app without notifications" (whatever that means) instead of "Use another app besides Microsoft Authenticator"

 

Grrr.....

So, it appears that you can use Google Authenticator or Authy with Office 365 but only if you choose to "Use verification code from app" instead of the much more convenient "Receive notifications for verification" which pushes a notification to the authenticator app on your device.  Shame Authy/Google Authenticator can't handle the push notification from Office 365 because most people only want one authenticator app on their phone. I wonder whose at fault here?

On the ihrer Hand, there is something missing. What if you never want to loose access, wouldn‘t it be clever, to add another totp provider, like keePassXC or just a second device with a totp app? If you consider your phone at risk of getting lost or Brocken/unaccessable? MS only supports phone numbers as backup there...
Can‘t find the edit button, ihrer=other, Brocken=broken
sent with mobile device<—

Truth is, Office 365 should support a variety of multi-factor authentication options - Google Authenticator, Duo, Yubico etc.  MFA for O365 wont get wide spread adoption until they support more than just their own multi factor option.


@Przemyslaw W wrote:

No true, you are not forced to install MS Authenticator, You can without problem use Google Authenticator, but you need to display the "Secret" key:

In screen with QRCode to scan there is a small blue link "Setup application without notifications" (sorry don't exactly know if this is proper translation for it) , click it and you'll get the secret, then just type it into G Authenticator and you're set :) (You don't have to type the full account name, this is for you to identify it only).

Thank you, that was the key for me. For anyone else wondering, this is the process for setting up 2/MFA with any OTP app (I use andOTP:(

 

  1. Open the security verification page for your user: https://aka.ms/MFASetup
  2. Check the Authenticator app box, and click the Configure button.
  3. Click the Configure app without notifications URL
  4. Now scan the QR code with your app and configure like normal.

It seems like Microsoft really go out of their way to obscure the fact that you don't actually need Microsoft Authenticator to use this factor for authentication.

Indeed, that is the way to use Authy!
Many thanks

But, I'm unable to scan the barcode using google authenticator.

Getting: "cannot interpret QR code".

Seems that the QR code only works with MS authenticator...

 

I just used the QR code with the Google Authenticator.

Thanks for the procedure
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
38 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies