How Do I - Set up Multi-factor Authentication (MFA)

Who can use this feature?

Everyone. We recommend setting up more than one MFA option. This will allow you to choose an alternative method if you can’t access your preferred option (e.g. your mobile phone isn’t working or you’re away from your landline).

You will be prompted to set up your MFA the first time you log in to GovTEAMS, or following an MFA reset by GovTEAMS Support. After entering your username and password, you will be presented with a screen that says ‘More information required’. When you see this message, select Next.

Microsoft Authenticator app

To use this method, you must set up the Microsoft Authenticator app on a mobile phone. You will also need to log in to GovTEAMS on a different device (not your mobile phone) to complete this process. The following steps will refer to that device as ‘computer’.

On your phone:

Download the app for android or iOS on your mobile phone.
Open the app and tap the + (plus) icon, located at the top right of the screen.
Select Work or school account and allow the app to send you notifications and to access your camera.

On your computer:

Open your web browser and go to the GovTEAMS login page.
Enter your GovTEAMS OFFICIAL account credentials (ending in @govteams.gov.au) and click Sign In.

On your Phone:

A QR code will appear on your computer screen; use your mobile phone to scan the QR code.

On your computer:

Click Next on your computer. Take note of the number displayed on your computer.
A test notification will be sent to your phone. Enter the number displayed on your computer in Step 6 and tap Yes.
Select Next on your computer screen.

Video:

Video: Set Up Multi-Factor Authentication (MFA) using Microsoft Authenticator (no audio)

Downloadable Resources:

Update your Multi-Factor Authentication (MFA) options.

You will be prompted to set up your MFA the first time you log in to GovTEAMS, or following an MFA reset by GovTEAMS Support. After entering your username and password, you will be presented with a screen that says ‘More information required’. When you see this message, select Next.

Phone authentication (call or text)

Use a mobile phone number if you prefer a text, or choose between a mobile phone or landline number if you prefer a call.

Select "I want to set up a different method"
Select Phone and click Confirm.

select different method link

Select your country or region (e.g. Australia +61) and enter your preferred phone number.
Select the method:
- Send me a code by text message (mobile phone)
  - Enter the code supplied.
  - Select Verify and Done.
OR
- Call me (mobile, landline or VoIP number)
  - An automated service will call you and ask you to press the hash (#) key.
  - Select Done.

You will be taken to the security information screen where you can set an additional authentication method (recommended in case you lose access to your primary method)

Downloadable Resources:

Update your Multi-Factor Authentication (MFA) options.

Hard tokens can be set up as an additional authentication method once your account is established.

Purchase Your Hard Token:
- Ensure you have a compatible hard token. Common options include Token2, YubiKey, and Feitian ePass K9.
Log In to GovTEAMS:
- Open your web browser and go to the GovTEAMS login page.
- Enter your GovTEAMS OFFICIAL account credentials (ending in @govteams.gov.au) and click "Sign In".
- Once logged in, navigate to your security info page.
Add a New Sign-In Method:
- Select "+ Add sign-in method" and choose "Security key" or the equivalent option for hard tokens.
Follow the Prompts:
- Follow the on-screen prompts to register your hard token. This may involve using an app like Token2 NGC Burner for Token2 tokens or following specific instructions for other brands.
Test Your Hard Token:
- Once set up, test the hard token by logging out and then logging back in to ensure it works correctly.

By following these steps, you can add any hard token to your GovTEAMS MFA and ensure secure access to your account. Log into your account and visit the GovTEAMS Academy for information.

Frequently Asked Questions (FAQ)

What happens if I don’t have access to my primary authentication method?

You will not be able to log into your account but our support team can help you regain access. Please contact us for assistance.

After your MFA has been reset, please follow these instructions to add an additional authentication method:

Add a New Device:

Go to your security info page and sign in with your GovTEAMS OFFICIAL account (ending in @govteams.gov.au).
Select "+ Add sign-in method".
Choose the new method you want to add and follow the prompts.

What Authentication methods are available?

GovTEAMS offers several authentication methods to ensure secure access to your account:

Microsoft Authenticator App: This method involves using the Microsoft Authenticator app on your mobile phone. You will need to scan a QR code and follow the prompts to complete the setup.
Phone Call (Mobile or Landline): You can receive a phone call with a verification code. This method is useful if you have access to a landline or desk phone.
Text (SMS): This method involves receiving a verification code via SMS on your mobile phone.
Hard Tokens: These are physical devices that generate a unique code for each login attempt. Hard tokens are highly secure and do not rely on network connectivity. Common options include Token2, YubiKey, and Feitian ePass K9.

I work in a secure location and can't have a mobile device with me, how do I set up MFA?

If you work in a secure location and can't use a mobile device, there are several other MFA methods you can use for GovTEAMS.

1. Hard Tokens

Hard tokens are physical devices that generate a unique code for each login attempt. They are highly secure and do not rely on network connectivity.
You can find more information at the top of this page in the "Adding a Hard Token to GovTEAMS MFA" section

2. Phone Call (Landline/VoIP Phone)

If you have access to a landline or a VoIP phone (Skype, Teams or Webex phone), you can use it as an MFA method. This involves receiving a phone call with a verification code and you can use a Skype

By setting up multiple MFA methods, you can ensure continuous access to your GovTEAMS account even in secure locations. If you need any assistance, feel free to contact GovTEAMS Support.

Is there a way to transfer MFA settings without losing access?

Before you switch devices, make sure you have at least two different MFA methods set up. This can include phone calls to a mobile or fixed number, email, or hard tokens. This ensures you have an alternative method available if your primary method is inaccessible.

Add a New Device:

Go to your security info page and sign in with your GovTEAMS OFFICIAL account (ending in @govteams.gov.au).
Select "+ Add sign-in method".
Choose the new method you want to add and follow the prompts.

Remove the Old Device:

Once the new device is set up, you can remove the old device from your list of MFA methods.

Contact Support if Needed:

If you encounter any issues or need assistance, you can contact GovTEAMS Support for help.

By setting up multiple MFA methods and following these steps, you can ensure that you won't lose access to your account when transferring MFA settings to a new device.