University of Otago MFA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your University of Otago username and password sign you in to Microsoft 365, StudentMail, Wi-Fi and other University systems (Otago). Multifactor authentication (MFA) is required to reach Microsoft 365, Aoroa, Staff Web Kiosk and the VPN from outside the eduroam network, and to reset your password. You're asked to set it up the first time you sign in to a service that uses it (Otago).
Students can use an authenticator app or a passkey. Staff can also get a Token2 physical key if neither of those suits. The app doesn't have to be Microsoft's: AskOtago lists "Other Authenticator app" as its own method, such as one you already use for the IRD website (Otago). Its step-by-step articles only follow Microsoft Authenticator (Otago). This guide fills that gap with Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the University of Otago steps come from the AskOtago knowledge base, linked below, which we read on October 20, 2026. Its articles don't show the point where you switch to another app. We haven't tested the steps on an Otago account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Set up Novaz the first time you sign in
These steps follow AskOtago's off-campus article, updated in September 2026 (Otago). Use a computer if you can, so the QR code isn't on your iPhone.
- Open a new browser window with no other tabs, or a private window. You don't need the VPN.
- Go to the Microsoft 365 sign-in page (office.com) and select Sign in. Enter your University email address and select Next, then your University username and password and Sign in. If you're asked which account to use, pick Work or School account.
- In the More Information required window, select Next.
- The Keep your account secure window opens. Otago's article continues with Download now for Microsoft Authenticator. For Novaz, choose the option for a different authenticator app instead; Otago doesn't name that link.
- When a QR code appears, open Novaz, tap +, then Scan QR code. If the code is on your iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
- Otago's pages don't mention a text key. If the screen offers one, tap +, then Enter key manually in Novaz, and paste it as the Setup key. See What is a 2FA setup key?
- Type the code Novaz shows, then follow the remaining screens. When the page says your security features are set up, select Done.
Otago doesn't say how often its codes change, so scan the QR code if you can: it carries the code settings into Novaz.
Already set up MFA another way? Add Novaz on Microsoft's Security Information page, aka.ms/mfasetup, where AskOtago says to set up or change your methods (Otago).
Why you want a second method
AskOtago doesn't mention backup codes, but it requires two working MFA methods before you can reset a forgotten password yourself (Otago). With only one, a forgotten password means calling AskOtago.
The reset article names the Microsoft Authenticator app, email or text messages; the newer methods page lists neither email nor texts. Neither page says whether another authenticator app, or a passkey, works for a reset.
Novaz keeps its keys on your iPhone, with a copy elsewhere only if you make a Novaz backup, so pick a second method that still works without that phone, such as a passkey: Otago says passkeys can sync through Apple iCloud Keychain or Google Password Manager (Otago).
When Otago asks for a code
Off the eduroam network, expect a prompt for the services listed above and whenever you reset your password, so keep your registered device handy (Otago). On your own computer, you can tick the box to stay signed in to Microsoft 365 (Otago).
If Otago rejects your code
AskOtago has no advice on rejected app codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
If a system tells you your account is locked after too many incorrect attempts, contact AskOtago. Resetting your password won't unlock it (Otago).
New iPhone or lost phone
Otago links your MFA registration to the device you chose. If you lose or replace that device, AskOtago has to unlink it from your account (Otago). After that, set Novaz up again on the new iPhone through aka.ms/mfasetup. If you're replacing the phone and have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead; without one, follow the steps above. See How to transfer your authenticator app to a new iPhone.
AskOtago answers chat and calls from 8:00am to 6:00pm, Monday to Saturday, except New Zealand public holidays: 0800 80 80 98 free within New Zealand, 1800 46 82 46 free within Australia, or +64 3 479 7000. There's also an enquiry form (Otago).
Have your username ready. It's printed on the front of your University ID card and starts your email address (Otago). Otago doesn't say what other proof it asks for or how long unlinking takes. More in Lost the phone with your authenticator app?
