MADEC Australia will soon be enforcing multifactor authentication (MFA) across all M365 accounts. 

MFA is a crucial extra layer of security for logging in, requiring something you know (your password), and something you have (usually your mobile device). We recommend using the Microsoft Authenticator app available on both iOS and Android, for the highest security and the convenience of push notifications. 

If, however, this is unsuitable for any reason, users have the option to choose an SMS or phone call to satisfy the second phase of authentication. 


Users with a MADEC issued, managed mobile device are permitted to use this for MFA. Users without an issued device will need to use a personal device (in the same way access to Workforce Australia requires myID using a personal device to sign in.)

The below guide is provided to assist staff with configuring their account for MFA using Microsoft Authenticator. It’s strongly advised you complete these steps as soon as possible before MFA is enforced on your account, as you will be unable to log in to any M365 services after then without having done so.


  1. Download the Microsoft Authenticator on your smartphone.
    Users with a MADEC issued mobile device may find the app already installed. If not, the app can be found in the Intelligent Hub App Catalog (MADEC issued devices only).
  2. In a web browser on your computer, go to https://aka.ms/mfasetup. If you are prompted to sign in, please use your MADEC username and login password.
  3. Upon sign-in, you should see the following window:
  4. Click "Add sign-in method" and select Microsoft Authenticator:
  5. Click 'Next':
  6. You should now see a 'Microsoft Authenticator' window with a QR Code. Leave this window open and launch the Microsoft Authenticator app on your phone.
  7. If you have not used the app previously, you can simply tap 'Scan QR Code' and move to the next step. Otherwise, press the '+' icon to add account, and choose 'Work or School Account'.
  8. Choose the 'Scan QR Code' option, and scan the QR code presented in your web browser from Step 5.
  9. Once scanned, your phone Authenticator app will show a new account with your username. Go to your web browser and click 'Next'.
  10. You should see an Approve/Deny pop up on your phone at this point. Enter the number displayed in your browser into the prompt on the mobile app:
  11. Click 'Next' until prompted with a success confirmation, and click 'Done':
  12. Once completed, you will be redirected to the following page where you can change your default application type, register a new mobile device, or add a mobile number. This page can now be closed:
  13. Once MFA is then enforced, any time Microsoft detects a new sign in you will recevie a prompt to approve:


IT Support are available to assist if you have any questions or difficulties with the enrolment/sign in process.