The purpose of this document is to help you set up multi-factor authentication to use Cisco AnyConnect in order to VPN.  These two applications (MFA and AnyConnect) work together to allow you to connect to the CWF computer network through a Virtual Private Network (VPN) while at home or traveling.

MFA is a multi-factor authentication application. It will be used to verify your credentials while you connect to the CWF_VPN network.  MFA will consist of "something you know" (password) and "something you have" (your phone app).

AnyConnect is the application used to connect to the VPN. It will require MFA before it will connect you. Cisco AnyConnect is installed on CWF laptops before they are issued.

Installing the Microsoft Authenticator on your phone

  1. You will find the Microsoft Authenticator in your App Store or Google Play Store. 




2.  Install the app on your phone and click Open.  If you receive a request for the Authenticator to send you notifications, please click Allow. 


     Skip any intro requests.  When you reach the screen that allows you to add an account, click the ADD ACCOUNT button.      


                         NOTE: If you are using an iPhone, you might receive a window informing you

                                     of the usage data and/or a backup.  Please click OK/Continue.


                       




                                                     

                                                                                       

3. You will be asked to pick between three options (Personal account, Work or school account or Other). Choose Work or school account.

                                    


4. Allow the Authenticator to take pictures and send notifications.

           iPhone example:                                                                       Android example:

                                     



5. The QR Code reader will come up. At this time, you can put your phone down until Step 10 of Initial Configuration of Microsoft Multi-Factor Authentication.

NOTE:  Some mobile phones might receive the below message after taking the picture.  If you do not receive

             the message at this time,  you will more than likely receive it further along in the setup.

                                    



Initial Configuration of Microsoft Multi-Factor Authentication

  1.  Open a web browser on your computer and log into Office.com.
  2. This screen will popup asking for your email address.  Type your CWF email and click Next.

            


3. The Colonial Williamsburg Federated Sing-On screen will look like this.  Ensure your username is correct, type your CWF password and click Sign in. 

            



4.  When your account comes up, look for the picture (or your initials) on the top right-hand side of the screen. 

     Click the picture/initials and you will see the My account.  Click My account to open your account overview.  


                          



5. Click the Security Info option on the far left menu.


6. Next, you will want to click + Add method.




7. The Add a method window pops up.  Arrow down to Authenticator app as show below.


8.  The Start by getting the app window will pop up.  Since you already installed the application on your phone at the beginning of these instructions, you will click Next and grab your phone.


9.  The following window will ask you to perform the action on your phone, which you have already completed.  Click Next.


10.   You will be shown a window with a QR code.  Pick up your phone and unlock it.  You should be at the point that it want this QR code. 

Hold the phone so that you can see the code through the camera lens.  The phone will automatically take the picture.  You will not have to press anything.


Once your phone successfully take the picture, click NEXT.


11.  At this time it will be looking for your phone and setting up the authentication.  There are a few ways this might happen.  Below are a few windows that might appear.

Please follow the screen instructions.

You might see this window on your screen. It will change from “Checking activation status” to “Please respond to the notification on your device.”


12. At this time, please look at your phone and you will receive a pop up to Deny or Approve.

NOTE: The “Please respond to the notification on your device” window on the computer

           will not change until you confirm the app on your phone.  Click Approve.


13. Once you have approved the app on the phone, click Save on the Additional Security verification window. 

Your computer will come up with the below window asking to verify your preferred option. Click Verify preferred option

and look at your phone for the push notification to Approve.


14. Once that is complete, this Updates successful window will appear. You can close this.