Summary
A passkey lets you sign in to your Solano account with your phone's PIN, fingerprint, or face. A passkey works only on real Microsoft sign-in pages, so it protects you even if you click a fake link. This guide explains how to create a passkey in Microsoft Authenticator to meet the multifactor authentication (MFA) requirement for employees and students.
Use this when: You added your Solano account to Microsoft Authenticator, or Microsoft asks you to create a passkey when you sign in.
Audience: Faculty, staff, and students.
Time required: About 5 minutes.
This is part 2 of 2. If you have not added your Solano account to Microsoft Authenticator yet, start with Set up Microsoft Authenticator.
Before you begin
Make sure you have:
- Microsoft Authenticator with your Solano account added. See Set up Microsoft Authenticator.
- A supported phone. An iPhone with iOS 17 or later, or an Android phone with Android 14 or later.
- A screen lock on a phone that only you use. For example, a PIN, fingerprint, or face recognition. Don't share your phone's PIN. Anyone who can unlock your phone can use your passkey.
Important: Start setup only from the Microsoft Authenticator app on your phone. The District will never send you a link or QR code by email, text message, or Teams to set up MFA. Help Desk staff will never ask for your password or a verification code.
Follow these steps
- Open your account in the app.
Open Microsoft Authenticator and tap your Solano account. If the app already shows a prompt to create a passkey, skip to step 3.
- Create a passkey.
Tap Create a passkey, and then follow the prompts.
- Confirm it's you.
Use your phone's PIN, fingerprint, or face when asked. If your phone does not have a screen lock, tap Settings when prompted, set one up, and return to the app.
- Turn on Authenticator as a passkey provider.
When the app asks, tap Settings and turn on Authenticator using the steps for your phone below.
- Finish.
Return to the app and tap Done.
If your screen looks different: Settings names vary by phone and software version.
iPhone
- iOS 18 or later: go to Settings > General > AutoFill & Passwords.
- iOS 17: go to Settings > Passwords > Password Options.
- Turn on AutoFill Passwords and Passkeys, then select Authenticator.
Android
- Go to Settings > Passwords & accounts. Under Additional providers, turn on Authenticator.
Confirm it worked
- Open Microsoft Authenticator and tap your Solano account. Check that Passkey is listed as a sign-in method.
- Sign in to a District service. Employees can use Outlook on the web. Students can use student email or Canvas. When asked, choose to sign in with your face, fingerprint, PIN, or security key, and confirm on your phone.
Success: Your Solano account accepts your passkey and completes the sign-in.
Everyday sign-in with your passkey
- On your phone: Sign in as usual. When asked, confirm with your phone's PIN, fingerprint, or face.
- On a computer: Choose to sign in with your face, fingerprint, PIN, or security key, and then select the option to use a phone. Scan the QR code shown on the computer with your phone's camera and confirm on your phone. Bluetooth must be on for both devices.
Never approve an unexpected request: Scan a sign-in QR code only when it appears on a screen where you just started signing in. Never scan one sent to you by email, text, or message. If you get an MFA prompt you did not start, deny it, change your password, and report it to the Help Desk.
If it does not work
You do not see Create a passkey
What to do: Update your phone's software and the Microsoft Authenticator app, then try again. If the option still does not appear, contact the Help Desk.
Signing in on a computer does not connect to your phone
What to do: Turn on Bluetooth on both the computer and the phone, keep them near each other, and scan the QR code again. If the computer does not have Bluetooth, contact the Help Desk.
You do not have a supported phone
What to do: Contact the Help Desk. Employees can receive a hardware security key. Students can discuss other sign-in options.
You got a new phone
What to do: Your account and passkey stay on the phone where you set them up. Follow Set up Microsoft Authenticator and this article again on your new phone. If your old phone was lost or stolen, contact the Help Desk right away so staff can remove it from your account.
Do not continue if: You reached a sign-in page from a link in an email or text message. Close the page and contact the Help Desk.
To undo the change: If you lose your phone or no longer want to use this passkey, contact the Help Desk right away. Staff can remove it from your account so you can set up a new one.
Related articles and guidance
Get help
If you still need help, submit a Password or Login Help request. Choose:
- Account or System: College Computer or Network Account
- Login Problem Type: MFA, verification code, or phone problem
- MFA Issue Type: Passkey setup
Protect your information: Never include your password, verification codes, QR codes, Temporary Access Pass, recovery codes, or other secrets in the request.