Set Up a FIDO2 Token for MFA Use

Summary

This article explains how to register a FIDO2 token so you can log in to your Middlebury account securely without having to enter your username and password. These devices are useful for individuals who don't have a cell phone. Compatibility resources are also included that list which browsers and devices are supported by the various operating systems.

Body

This article explains how to register a FIDO2 token so you can log in securely to your Middlebury account without having to enter your password or use a cell phone authenticator app or text message. Compatibility resources are included that list which browsers and devices are supported during setup.

How to Register a FIDO2 Token

Important: Don't plug the token into the computer until instructed.

Visit the Microsoft security info page for your account.
On the Security Info page, click Add sign-in method.

When asked Which method would you like to add?, choose Security Key, then click Add.
Choose USB Device when asked to choose the type of security key, then click Next.
The following screen should appear -- click Next to continue:
Insert your security key in the computer now!
You will receive a series of prompts to set up your key. These will differ slightly based on your computer's operating system and the browser you're using. Follow the prompts to finish setting up the key.
- Please note that not all browsers can register YubiKeys and they often have trouble registering using Incognito (or Private) windows. Refer to Compatibility Resources below for more information.
Choose Security Key when asked where to save this passkey, then click Next.
Provide a 4-digit PIN and confirm it when prompted.
Provide a short name for your key -- this will appear on your list of MFA options.
When you see "You're all set!" you'll know your registration has completed successfully. Click Done to complete the process.