All faculty and students have multi-factor authentication (MFA) enabled on their Microsoft account. If you encounter a message upon logging into your account that says, "Let's keep your account secure", you have to set up MFA. See the Initial MFA Setup Process accordion below for assistance with setting up MFA for the first time. If you've already set up MFA and simply need help with the login process, see the Logging in with MFA section below. Initial MFA Setup Process Sign in to the GCU Portal with your GCU email address and password. If you're prompted with a message that says, "Let's keep your account secure", click Next. Once you are the "Install Microsoft Authenticator" screen, click Other options. Then, you will have the option to choose either Microsoft Authenticator or Phone for your sign-in method. You can choose Microsoft Authenticator, but GCU Technical Support has a limited scope of service for Microsoft Authenticator; therefore, it is recommended that you use the Phone option. NOTE If you would like to set up the Microsoft Authenticator option as your sign-in method, follow the steps listed in the Add a Method accordion below. Now it will require you to input your phone number. Once input, click Next. A verification code will be sent to your phone number. Enter the verification code that was sent, and then click Next. After a successful verification, you will receive the "Phone number added" screen. Click Done to log in. You should now be successfully logged in. Multi-factor authentication will be required anytime you log into a Microsoft application from a new device, and it may be required periodically on devices that have already been recognized. Logging in with MFAAfter completing the initial setup process for multi-factor authentication (MFA), you'll be prompted to enter an authentication code periodically when you log into your account. After entering your GCU email address and password, you'll be asked to authenticate using an authentication code that was sent to the authentication method you used during the initial setup process. This could be a verification code sent to your phone number or authentication via the Microsoft Authenticator app. MFA will be required every 45 days based on conditional access, so you may receive multiple MFA notifications through your time with GCU.If you have the phone number option set up, you just wait for the verification code to be sent to your phone number. Once you receive the code, enter the code in the box provided and click Verify. If the correct code was entered, you will be logged in immediately afterwards.Managing Your Authentication MethodsIn order to change your authentication methods, which are used for both MFA and password recovery, you'll first need to access your GCU email inbox. You can access your GCU email inbox through the Email app in the GCU Portal, or by signing in directly at outlook.office.com. Once you are in your inbox, click your initials in the upper right corner and then click View account. From the left-side menu, click Security Info. From the Security info page, you can add, delete, and change authentication methods. NOTE You cannot set an email address as a multi-factor authentication (MFA) method; therefore, MFA requires a mobile device. If you do not have a mobile device to set up MFA, please contact GCU Technical Support. Expand/Collapse All Add a Method To add a sign-in method, click Add sign-in method. You will now have option to add either Microsoft Authenticator or Phone as a sign-in method. NOTE You can only set up one phone number for MFA, and you can have up to five different devices connected via the Microsoft Authenticator app for MFA. Based on the option you decided to add, open the matching accordion below. Microsoft Authenticator Option NOTE While the Microsoft Authenticator app can be used as an authentication method, GCU Technical Support has a limited scope of service when it comes to supporting it. We cannot assist with troubleshooting your mobile device if the application does not work. For this reason, we don't recommend that students select the Microsoft Authenticator as their primary authentication method. On the Install Microsoft Authenticator page, depending on your type of mobile device, click the applicable app store download button to install the Microsoft Authenticator app on your mobile device. Then, click Next. Keep the Set up your account page open while you set up the Microsoft Authenticator app on your mobile device. Once the app is downloaded, open it and click Accept to agree with the privacy statement. Click Continue if you prefer not to share your app usage data with Microsoft. Next, you can either click Add work or school account and sign in with your GCU email address and password or Scan a QR code with your mobile device. If you clicked Scan a QR code, return to the Set up your account page and click Next. This will make a QR code appear. NOTE If you are doing this entire setup process on your mobile device, it will prompt you to Pair your account to the app by clicking this link instead of showing a QR code. After scanning the QR code, click Next. NOTE If you receive any error messages when the QR code is scanned, check out the relevant accordions at the bottom of the FAQ section below. After adding your account, a notification will be sent to your mobile device from the Microsoft Authenticator app to test your account. You can approve the notification by entering the number shown on the screen into the box on your mobile device and clicking Yes. Once complete, you will see the confirmation that the Microsoft Authenticator method has been added. Click Done to exit this window. Whenever the Microsoft Authenticator method is added, it will become your default sign-in method. To change your default sign-in method, check out the Change the Default Method accordion below If you have any trouble setting up the Microsoft Authenticator app, check out Microsoft's support article for more detailed steps on the process. Phone Option To start, input your phone number. Once input, click Next. A verification code will be sent to your phone number. Enter the verification code that was sent, and then click Next. After a successful verification, you will receive a "Phone number added" screen. Click Done to exit this window. Delete a Method Click Delete on the method you would like to remove. Click Ok to delete the method from your account. Change a Method Click Change next to the authentication method you want to change. NOTE You are only able to change the phone number method. If you would like to change the Microsoft Authenticator method, delete the method and add the method back with the change. Now you will be asked to input your new phone number. Once input, click Next. A verification code will be sent to your phone number. Enter the verification code that was sent, and then click Next. After a successful verification, you will receive a "Phone number added" screen. Click Done to exit this window. Change the Default Method NOTE While the Microsoft Authenticator app can be used as an authentication method, GCU Technical Support has a limited scope of service when it comes to supporting it. We cannot assist with troubleshooting your mobile device if the application does not work. For this reason, we don't recommend that students select the Microsoft Authenticator as their primary authentication method. If you have multiple authentication methods, you can change the default sign-in method. Click Change next to Default sign-in method. Select your default sign-in method from the options available in the dropdown. After selecting your default, click Confirm. NOTE If you have the Microsoft Authenticator app method enabled, you will have two App based authentication options that you can select for your default methods: "App based authentication – notification" – With this option as the default, a number will appear on the authentication page, and you will receive a push notification from the Microsoft Authenticator app to sign in. "App based authentication or hardware token – code" – With this option as the default, you will need to enter a code from the Microsoft Authenticator app into the box that appears on the authentication page. Resetting Your Methods You may need to reset your multi-factor authentication (MFA) methods if you've lost your mobile device, you lost access to your phone number, or you lost access to the Microsoft Authenticator app. If you're prompted to authenticate with a code sent to your authentication method and you are not receiving it, please contact GCU Technical Support so that we can reset it for you. FAQ When am I required to use MFA? You will be required to use MFA every 45 days. However, if you switch devices or Wi-Fi connections you will be asked to complete MFA again. Once you have completed MFA in one system, like signing into the GCU Portal, you will not have to do MFA again to open another system, like your Halo Learn classroom or your student email, as long as you stay on the same device and Wi-Fi connection. What can I do if I lose access to my authentication device? There may be times when you lose access to your device or you are unable to receive the authentication code. If this happens to you, please contact GCU Technical Support so that we can get you logged in as soon as possible. We can temporarily allow you access your account when you lose access to your device. Why can't I authenticate through a phone call? Due to security concerns, we removed the option to authenticate using a phone call. However, some students need to authenticate with a phone number that can't receive texts. If you need to authenticate with a phone call, please contact GCU Technical Support to re-enable that option. How can I log in if I'm not receiving the code to my phone number / my phone number has changed? If the verification code has not arrived within a few minutes or the phone number listed is no longer correct, try to follow the steps below to log in. IMPORTANT If there are no alternative methods set up, we recommend completing basic troubleshooting and trying to use the text code option again. If you still cannot get into your account, please contact GCU Technical Support for assistance with getting into your account. To start, click Sign in another way. If you have the Microsoft Authenticator method set up, you will have the available options below. Click either Approve a request on my Microsoft Authenticator app or Use a verification code to continue. Based on the option you decided to use to log in, open the matching accordion below. Approve a request on my Microsoft Authenticator app After clicking this option, a notification will be sent to your mobile device from the Microsoft Authenticator app to approve your sign in request. You can approve the notification by entering the number shown on the screen into the box on your mobile device and clicking Yes. After completing this, you should be logged in! Use a verification code After clicking this option, you will be prompted to enter the code displayed in the Microsoft Authenticator app. Navigate to your Microsoft Authenticator app on your mobile device. After navigating to the Microsoft Authenticator app, open your added Grand Canyon University account. The verification code is under One-time password code. Enter this code into the box on the login page. After entering the code, click Verify to log in. When I try to log in, I receive an error, "You cannot access this right now." If you are in a foreign country or have a VPN set to any of the below countries, you may receive the error message, "You cannot access this right now". If you are in one of the below countries for travel or work purposes, please contact GCU Technical Support so that we get you logged into your account. Belarus Kenya Russia China Lebanon Sudan Hong Kong Nigeria Syria Iran North Korea Tanzania Iraq Pakistan Vietnam Kazakhstan Romania When I try to log in, I receive an error, "Sorry, we're having trouble verifying your account." If you try to verify yourself multiple times in quick succession, you may receive the error message, "Sorry, we’re having trouble verifying your account. Please try again." If you have alternative methods set up, attempt to use those to log in. If you receive this error and you do not have alternative methods set up, we recommend attempting basic troubleshooting to solve this issue. If you continue to receive this error, please contact GCU Technical Support so that we can reset your authentication methods. When I scan the QR code, I receive an error, "No Usable Data Found." When setting up the Microsoft Authenticator app you will receive a QR code to scan with the Microsoft Authenticator app. If you use your mobile device's default camera to scan this QR code, you may receive the error message, "No Usable Data Found." If you receive this error, you can attempt to scan the QR code with the Microsoft Authenticator app Scan a QR code button or you can attempt to set up the Microsoft Authenticator app with their Add work or school account option. If you continue to experience problems with setting up the Microsoft Authenticator method and you are unable to set up the phone number method, please contact GCU Technical Support for further assistance. When I scan the QR code, I receive an error, "You've already used this QR Code." You may receive the error, "You've already used this QR Code", for multiple reasons. Some of those reasons are that the QR code was not scanned completely, or something happened during the set-up process. We recommend attempting basic troubleshooting to solve this issue. If you continue to experience problems, please contact GCU Technical Support so that we can reset your authentication methods. We can remove all of the authentication methods using the authenticator app so that you can try again. May 19, 2026 18:18 Updated Related articles Password Reset Process How Do I Change My GCU Username? Zoom FAQ My Apps in the GCU Portal Third-Party App Approval