IT Department

Microsoft MDM Enrollment

Objective:

A requirement of the enrollment is to separate user’s Microsoft sign in from our current OKTA authentication.  The purpose of this document is to communicate those changes in such a way that the user will be prepared for the changes and has the proper training to successfully connect to their Microsoft resources.

 Subtopics

1. Changes

2. Login Process

3. First Login Account Setup

Changes

The major change that will be seen is the change in login method to Microsoft resources, and the requirement to setup Microsoft multi-factor authentication (MFA) method(s).

These changes will be seen by users on websites such as:

• outlook.com
• portal.office.com
• outlook.office.com

and mobile applications such as:

• Outlook
• Teams
• OneDrive

When signing into the above websites and apps, you will find that you are no longer redirected to an OKTA sign on page and are instead directed to a branded Microsoft sign in page asking for your password.

Also, when signing into the above websites and apps from OUTSIDE the Jet Linx network, you will be prompted to complete an MFA challenge.  This means if you login to jetlinx.okta.com, complete the MFA authentication and then select one of the Microsoft Office products, you will be required to complete the Microsoft MFA authentication as well.

Login Process

The major change that will be seen is the change in login method to Microsoft resources, First sign in page

Redirect notification

Custom branded sign in page

MFA authentication prompt (When OUTSIDE the Jet Linx network)

First Login Account Setup

After being enrolled you will be prompted to setup MFA methods(s) upon first login. 

There are 2 options for MFA method setup:

• Authentication phone – ie. Personal mobile phone
• Mobile app – Microsoft Authenticator iOS Android

It is recommended to setup the Mobile app authentication first.  Select Mobile app from the dropdown list, check the Receive notifications for verification button and select Set up.  

In the popup window, follow the instructions to download and setup the Mobile app.  Once the QR code is successfully scanned on your phone select Next.

Select Next to complete the registration and verify the MFA works by approving the prompt on your phone.  

On the next screen, enter your phone number and select Done. This will be a backup MFA method to get access to your account.