Google Authenticator app & Office 365 MFA

%3CLINGO-SUB%20id%3D%22lingo-sub-377308%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-377308%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EGoogle%20Authenticator%20app%20works%20with%20Office%20365%20MFA%20too.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblog.paranoidpenguin.net%2F2018%2F06%2Foffice-365-multi-factor-authentication-with-google-authenticator%2F%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblog.paranoidpenguin.net%2F2018%2F06%2Foffice-365-multi-factor-authentication-with-google-authenticator%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-358128%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-358128%22%20slang%3D%22en-US%22%3EI%20just%20used%20the%20QR%20code%20with%20the%20Google%20Authenticator.%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20for%20the%20procedure%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-320339%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-320339%22%20slang%3D%22en-US%22%3E%3CP%3EBut%2C%20I'm%20unable%20to%20scan%20the%20barcode%20using%20google%20authenticator.%3C%2FP%3E%3CP%3EGetting%3A%20%22cannot%20interpret%20QR%20code%22.%3C%2FP%3E%3CP%3ESeems%20that%20the%20QR%20code%20only%20works%20with%20MS%20authenticator...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-285866%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-285866%22%20slang%3D%22en-US%22%3EIndeed%2C%20that%20is%20the%20way%20to%20use%20Authy!%3CBR%20%2F%3EMany%20thanks%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265417%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265417%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97091%22%20target%3D%22_blank%22%3E%40Przemyslaw%20W%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CP%3ENo%20true%2C%20you%20are%20not%20forced%20to%20install%20MS%20Authenticator%2C%20You%20can%20without%20problem%20use%20Google%20Authenticator%2C%20but%20you%20need%20to%20display%20the%20%22Secret%22%20key%3A%3C%2FP%3E%3CP%3EIn%20screen%20with%20QRCode%20to%20scan%20there%20is%20a%20small%20blue%20link%20%22Setup%20application%20without%20notifications%22%20(sorry%20don't%20exactly%20know%20if%20this%20is%20proper%20translation%20for%20it)%20%2C%20click%20it%20and%20you'll%20get%20the%20secret%2C%20then%20just%20type%20it%20into%20G%20Authenticator%20and%20you're%20set%20%3A)%3C%2Fimg%3E%20(You%20don't%20have%20to%20type%20the%20full%20account%20name%2C%20this%20is%20for%20you%20to%20identify%20it%20only).%3C%2FP%3E%3C%2FBLOCKQUOTE%3E%3CP%3EThank%20you%2C%20that%20was%20the%20key%20for%20me.%20For%20anyone%20else%20wondering%2C%20this%20is%20the%20process%20for%20setting%20up%202%2FMFA%20with%20any%20OTP%20app%20(I%20use%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FandOTP%2FandOTP%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EandOTP%3C%2FA%3E%3A(%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3EOpen%20the%20security%20verification%20page%20for%20your%20user%3A%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FMFASetup%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2FMFASetup%3C%2FA%3E%3C%2FLI%3E%3CLI%3ECheck%20the%20%3CSTRONG%3EAuthenticator%20app%3C%2FSTRONG%3E%20box%2C%20and%20click%20the%20Configure%20button.%3C%2FLI%3E%3CLI%3EClick%20the%20%3CEM%3EConfigure%20app%20without%20notifications%3C%2FEM%3E%20URL%3C%2FLI%3E%3CLI%3ENow%20scan%20the%20QR%20code%20with%20your%20app%20and%20configure%20like%20normal.%3C%2FLI%3E%3C%2FOL%3E%3CP%3EIt%20seems%20like%20Microsoft%20really%20go%20out%20of%20their%20way%20to%20obscure%20the%20fact%20that%20you%20don't%20actually%20need%20%3CEM%3EMicrosoft%20Authenticator%3C%2FEM%3E%20to%20use%20this%20factor%20for%20authentication.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-263997%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-263997%22%20slang%3D%22en-US%22%3E%3CP%3ETruth%20is%2C%20Office%20365%26nbsp%3B%3CSTRONG%3Eshould%3C%2FSTRONG%3E%20support%20a%20variety%20of%20multi-factor%20authentication%20options%20-%20Google%20Authenticator%2C%20Duo%2C%20Yubico%20etc.%26nbsp%3B%20MFA%20for%20O365%20wont%20get%20wide%20spread%20adoption%20until%20they%20support%20more%20than%20just%20their%20own%20multi%20factor%20option.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-263971%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-263971%22%20slang%3D%22en-US%22%3ECan%E2%80%98t%20find%20the%20edit%20button%2C%20ihrer%3Dother%2C%20Brocken%3Dbroken%3CBR%20%2F%3Esent%20with%20mobile%20device%26lt%3B%E2%80%94%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-263968%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-263968%22%20slang%3D%22en-US%22%3EOn%20the%20ihrer%20Hand%2C%20there%20is%20something%20missing.%20What%20if%20you%20never%20want%20to%20loose%20access%2C%20wouldn%E2%80%98t%20it%20be%20clever%2C%20to%20add%20another%20totp%20provider%2C%20like%20keePassXC%20or%20just%20a%20second%20device%20with%20a%20totp%20app%3F%20If%20you%20consider%20your%20phone%20at%20risk%20of%20getting%20lost%20or%20Brocken%2Funaccessable%3F%20MS%20only%20supports%20phone%20numbers%20as%20backup%20there...%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-219894%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-219894%22%20slang%3D%22en-US%22%3E%3CP%3ESo%2C%20it%20appears%20that%20you%26nbsp%3Bcan%20use%20Google%20Authenticator%20or%20Authy%20with%20Office%20365%20but%20only%20if%20you%20choose%20to%20%22Use%20verification%20code%20from%20app%22%20instead%20of%20the%20much%20more%20convenient%20%22%3CSPAN%3EReceive%20notifications%20for%20verification%22%20which%20pushes%20a%20notification%20to%20the%20authenticator%20app%20on%20your%20device.%26nbsp%3B%20Shame%20Authy%2FGoogle%20Authenticator%20can't%20handle%20the%20push%20notification%20from%20Office%20365%20because%20most%20people%20only%20want%20one%20authenticator%20app%20on%20their%20phone.%20I%20wonder%20whose%20at%20fault%20here%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-212626%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-212626%22%20slang%3D%22en-US%22%3E%3CP%3EGlad%20I%20saw%20this%20thread.%20Man%2C%20they%20really%20make%20it%20difficult.%20%22Set%20up%20app%20without%20notifications%22%20(whatever%20that%20means)%20instead%20of%20%22Use%20another%20app%20besides%20Microsoft%20Authenticator%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGrrr.....%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187323%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187323%22%20slang%3D%22en-US%22%3E%3CP%3EWorks%20perfect.%20Saved%20me%20from%20one%20more%20app%20installation.%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-183427%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-183427%22%20slang%3D%22en-US%22%3E%3CP%3Eits%20there.%20(hope%20you%20arent%20looking%20in%20the%20google%20app).%20Setup%20works%20like%20a%20charm!%20Thanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-146985%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-146985%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20this%20still%20work%3F%20I%20don't%20see%20any%20link%20to%20%22%3CSPAN%3ESetup%20application%20without%20notifications%22.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-130415%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-130415%22%20slang%3D%22en-US%22%3E%3CP%3ENo%20true%2C%20you%20are%20not%20forced%20to%20install%20MS%20Authenticator%2C%20You%20can%20without%20problem%20use%20Google%20Authenticator%2C%20but%20you%20need%20to%20display%20the%20%22Secret%22%20key%3A%3C%2FP%3E%0A%3CP%3EIn%20screen%20with%20QRCode%20to%20scan%20there%20is%20a%20small%20blue%20link%20%22Setup%20application%20without%20notifications%22%20(sorry%20don't%20exactly%20know%20if%20this%20is%20proper%20translation%20for%20it)%20%2C%20click%20it%20and%20you'll%20get%20the%20secret%2C%20then%20just%20type%20it%20into%20G%20Authenticator%20and%20you're%20set%20%3A)%3C%2Fimg%3E%20(You%20don't%20have%20to%20type%20the%20full%20account%20name%2C%20this%20is%20for%20you%20to%20identify%20it%20only).%3C%2FP%3E%0A%3CP%3E---%20edit%20after%2015min%20---%3C%2FP%3E%0A%3CP%3EPs.%20I%20just%20set-up%20on%20my%20new%20phone%20GAuthenticator%20for%203%20company%20O365%20accounts%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-113728%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-113728%22%20slang%3D%22en-US%22%3E%3CP%3EYet%20both%20should%20just%20implement%20%3CA%20href%3D%22https%3A%2F%2Ftools.ietf.org%2Fhtml%2Frfc6238%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3ERFC6238%20%3C%2FA%3Eand%20%3CA%20href%3D%22https%3A%2F%2Ftools.ietf.org%2Fhtml%2Frfc4226%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3ERFC4226%3C%2FA%3E.%20Does%20either%20Microsoft%20or%20Google's%20app%20add%20anything%26nbsp%3Bproprietary%20to%20the%20TOTP%20and%20HMAC%20standards%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-108751%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-108751%22%20slang%3D%22en-US%22%3E%3CP%3ENo%2C%20as%20it%20only%20supports%20Google's%20MFA%2C%20afaik.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1335140%22%20slang%3D%22en-US%22%3ERe%3A%20Google%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1335140%22%20slang%3D%22en-US%22%3EThank%20you%20this%20solved%20it%20for%20me!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-108612%22%20slang%3D%22en-US%22%3EGoogle%20Authenticator%20app%20%26amp%3B%20Office%20365%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-108612%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20it%20possible%20to%20use%20the%20Google%20Authenticator%20iOS%20app%20with%20Office%20365%20MFA%20instead%20of%20the%20Microsoft%20Authenticator%20app%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20tried%20adding%20to%20Google%20Authenticator%20with%20both%20QR%20code%20and%20manually%20but%20got%20failures%20each%20time.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-108612%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
New Contributor

Is it possible to use the Google Authenticator iOS app with Office 365 MFA instead of the Microsoft Authenticator app?

 

I tried adding to Google Authenticator with both QR code and manually but got failures each time.

17 Replies
Highlighted

No, as it only supports Google's MFA, afaik.

Highlighted

Yet both should just implement RFC6238 and RFC4226. Does either Microsoft or Google's app add anything proprietary to the TOTP and HMAC standards? 

Highlighted

No true, you are not forced to install MS Authenticator, You can without problem use Google Authenticator, but you need to display the "Secret" key:

In screen with QRCode to scan there is a small blue link "Setup application without notifications" (sorry don't exactly know if this is proper translation for it) , click it and you'll get the secret, then just type it into G Authenticator and you're set :) (You don't have to type the full account name, this is for you to identify it only).

--- edit after 15min ---

Ps. I just set-up on my new phone GAuthenticator for 3 company O365 accounts :)

Highlighted

Does this still work? I don't see any link to "Setup application without notifications".

Highlighted

its there. (hope you arent looking in the google app). Setup works like a charm! Thanks

Highlighted

Works perfect. Saved me from one more app installation.

Thanks.

Highlighted

Glad I saw this thread. Man, they really make it difficult. "Set up app without notifications" (whatever that means) instead of "Use another app besides Microsoft Authenticator"

 

Grrr.....

Highlighted

So, it appears that you can use Google Authenticator or Authy with Office 365 but only if you choose to "Use verification code from app" instead of the much more convenient "Receive notifications for verification" which pushes a notification to the authenticator app on your device.  Shame Authy/Google Authenticator can't handle the push notification from Office 365 because most people only want one authenticator app on their phone. I wonder whose at fault here?

Highlighted
On the ihrer Hand, there is something missing. What if you never want to loose access, wouldn‘t it be clever, to add another totp provider, like keePassXC or just a second device with a totp app? If you consider your phone at risk of getting lost or Brocken/unaccessable? MS only supports phone numbers as backup there...
Highlighted
Can‘t find the edit button, ihrer=other, Brocken=broken
sent with mobile device<—
Highlighted

Truth is, Office 365 should support a variety of multi-factor authentication options - Google Authenticator, Duo, Yubico etc.  MFA for O365 wont get wide spread adoption until they support more than just their own multi factor option.

Highlighted

@Przemyslaw W wrote:

No true, you are not forced to install MS Authenticator, You can without problem use Google Authenticator, but you need to display the "Secret" key:

In screen with QRCode to scan there is a small blue link "Setup application without notifications" (sorry don't exactly know if this is proper translation for it) , click it and you'll get the secret, then just type it into G Authenticator and you're set :) (You don't have to type the full account name, this is for you to identify it only).

Thank you, that was the key for me. For anyone else wondering, this is the process for setting up 2/MFA with any OTP app (I use andOTP:(

 

  1. Open the security verification page for your user: https://aka.ms/MFASetup
  2. Check the Authenticator app box, and click the Configure button.
  3. Click the Configure app without notifications URL
  4. Now scan the QR code with your app and configure like normal.

It seems like Microsoft really go out of their way to obscure the fact that you don't actually need Microsoft Authenticator to use this factor for authentication.

Highlighted
Indeed, that is the way to use Authy!
Many thanks
Highlighted

But, I'm unable to scan the barcode using google authenticator.

Getting: "cannot interpret QR code".

Seems that the QR code only works with MS authenticator...

 

Highlighted
I just used the QR code with the Google Authenticator.

Thanks for the procedure
Highlighted
Highlighted
Thank you this solved it for me!