Enable Multifactor Authentication

Multifactor authentication can also be enabled for Azure® Active Directory® servuce users on an individual basis. This authentication method is optional.

To enable multifactor authentication:

  1. Log in to the Azure Active Directory portal.
  2. Navigate to Azure Active Directory > MFA.

    3. Azure Active Directory Page – MFA

    Azure Active Directory Page – MFA

  3. Under Configure, select Additional cloud-based MFA settings.

    4. Multi-factor Authentication Page

    Multi-factor Authentication Page

  4. Select users in the multi-factor authentication dialog box that is displayed.

    5. multi-factor authentication Dialog Box

    multi-factor authentication Dialog Box

  5. Select the check box next to the user(s) that require multifactor authentication.
  6. Select Enable.

    7. multi-factor authentication – users Dialog Box

    multi-factor authentication – users Dialog Box

  7. Select enable multi-factor auth in the message window that is displayed.

    8. Enable Multifactor Authentication Message Window

    Enable Multifactor Authentication Message Window

  8. A success message is displayed. Select Close to exit the message window.

Sign in with Multifactor Authentication

Once multifactor authentication is enabled for an Azure Active Directory user. The user must use the following procedure to log on to the Crestron Fusion® software server.

  1. Navigate to the organization’s Crestron Fusion server address (for example, “https://yourserver.crestronfusion.com/Fusion/WebClient/default.aspx”). The user is redirected to a Microsoft login page.
  2. Enter a username in the Sign in text field.

    3. Microsoft Login Page – Sign in

    Microsoft Login Page – Sign in

  3. Enter the user password in the Enter password text field.

    4. Microsoft Login Page – Sign in

    Microsoft Login Page – Sign in

  4. Select Sign in. A message window stating that more information is required is displayed.

    5. More information required Message Window

    More information required Message Window

  5. Select Next. An Additional security verification page is displayed.

    6. Additional security verification Page

    Additional security verification Page

    To complete multifactor authentication, users can choose to provide additional verification via phone or the Microsoft Authenticator app.

Phone Verification

To verify user credentials via phone:

  1. Choose the Authentication phone contact method:
    1. Select Authentication phone from the drop-down menu.
    2. Enter the user’s mobile phone number in the text field next to the drop-down menu.
    3. Select the Send me a code by text message radio button.

    Additional security verification Page

    Additional security verification Page

  2. Select Next. A message is displayed stating that a verification code has been sent to the mobile phone number provided.

    3. Additional security verification Page – Verification Code

    Additional security verification Page – Verification Code

  3. Enter the verification code in the text field, and then select Verify.
  4. Once the code is verified, select Done. A message window asking whether the user account should stay signed into the Crestron Fusion server is displayed.

    5. Stay signed in? Message Window

    Stay signed in? Message Window

  5. Select Yes or No. The user is now redirected to the main Crestron Fusion page regardless of the selection.

    6. Crestron Fusion Page

    Crestron Fusion Page

Mobile App Verification

To verify user credentials via the Microsoft Authenticator app:

NOTE: This procedure requires the Microsoft Authenticator app to be installed on a mobile device. Download the Microsoft Authenticator app from the Google Play® online store (for Android® OS devices) or from the App Store® online store (for iOS® devices)

  1. Choose the Mobile app contact method.
  2. Select Set Up.

    3. Additional security verification Page – Mobile App

    Additional security verification Page – Mobile App

    After the Azure portal retrieves the information necessary for configuration, a Configure Mobile App dialog box is displayed.

    Crestron mobile app Dialog Box

    Crestron mobile app Dialog Box

  3. Follow the instructions presented in the dialog box to add the user account to the Microsoft Authenticator app.

    4. If the user is added successfully, the app displays a six-digit code underneath the user account.

    Microsoft Authenticator App – Accounts

    Microsoft Authenticator App – Accounts

  4. Select Next. The Additional security verification page displays a “Checking Activation” status next to the Set up button.

    5. Microsoft Authenticator App – Accounts

    Microsoft Authenticator App – Accounts

    The account is successfully set up once a “Mobile app has been configured for notifications and verification codes” message is displayed and the Set up button becomes grayed out.

  5. Select one of the following verification methods to use for the mobile app:
    • Select Receive notifications for verification to receive notifications in the Microsoft Authenticator app to verify login.
    • Select Use verification code to use a verification code for login.

    Microsoft Authenticator App – Accounts

    Microsoft Authenticator App – Accounts

  6. Select Next. The remaining procedures differ depending on the selected verification method.

Receive Notifications for Verification

If Receive notifications for verification was selected, an Approve sign-in? notification is sent to the Microsoft Authenticator app.

Approve sign-in? Notification

Approve sign-in? Notification

  1. Select APPROVE in the app.
  2. On the Additional security verification page, enter a security phone number.

    3. Additional security verification Page – Phone Verification

    Additional security verification Page – Phone Verification

  3. Select Next.
  4. Select Done on the next page.

    5. Additional security verification Page – Existing Applications

    Additional security verification Page – Existing Applications

    Once the account is verified, a message window asking whether the user account should stay signed into the Crestron Fusion server is displayed.

    Stay signed in? Message Window

    Stay signed in? Message Window

  5. Select Yes or No. The user is now redirected to the main Crestron Fusion page.

    6. Crestron Fusion Page

    Crestron Fusion Page

Use Verification Code

If Use verification code was selected, the six-digit verification code created in step 3 of “Mobile App Verification” is used for authentication.

  1. Navigate to the Accounts tab in the Microsoft Authenticator app.
  2. Copy the six-digit code listed underneath the appropriate user account.

    3. Microsoft Authenticator App – Accounts

    Microsoft Authenticator App – Accounts

  3. On the Additional security verification page, enter the verification code from the app in the provided text field.

    4. Additional security verification Page – Verification Code

    Additional security verification Page – Verification Code

  4. Once the account is verified, select Done. A message window asking whether the user account should stay signed into the Crestron Fusion server is displayed.

    5. Stay signed in? Message Window

    Stay signed in? Message Window

  5. Select Yes or No. The user is now redirected to the main Crestron Fusion page regardless of the selection.

    6. Crestron Fusion Page

    Crestron Fusion Page

Subsequent Logins

Depending on the verification method selected, the following information is required for subsequent logins into the Crestron Fusion server through Azure Active Directory.

  • If a verification code was selected, enter the verification code shown under the user account in the Microsoft Authenticator app into the provided text field, and then select Verify.

    • Enter Code Message Window

    Enter Code Message Window

  • If receiving notifications for verification was selected, respond to the notification in the Microsoft Authenticator app to continue to log in.

    • Enter Code Message Window

    Enter Code Message Window