Two-factor authentication for logging in to Microsoft Copilot

(Instructions for employees of Landshut University of Applied Sciences)

1. The prerequisite for the authorised use of Microsoft Copilot is a registration for Microsoft365 in the SSO portal.

2. Open the website: https://copilot.microsoft.com/

You can already chat with Copilot here. However, we recommend logging in to be able to use the data protection functions and full integration with Microsoft 365 (e.g. Outlook, Word, Excel).

Click on the profile icon in the bottom left corner:

and then on the „Sign in“ button:

3. In the next window, select the option „Continue with Microsoft“:

5. Sign in with your Microsoft account. Your Microsoft account consists of Benutzername@az.haw-landshut.de and your password:

4. After you have entered your password, you will be guided to set up another login method:

4. In the next step, you will be asked to install a Microsoft Authenticator app on your smartphone. However, you are welcome to choose a different authenticator app:

5. A QR code will then be displayed, which you can scan into another app or alternatively enter (copy) the key data into KeePassXC:

6. Copy in KeePassXC copy the secret key (under Set up TOTP) and select the default settings:

7. Generate a one-time password in KeePassXC and enter it in the next input window at Microsoft. The setup of the default login method is then complete:

10. Open the page: https://mysignins.microsoft.com/security-info

and select „Add new login method“ with the + :

11. From the options offered, select „Security key“:

12. Select the type of key and then have your key ready:

13. Then follow the requirements in your browser. Set a PIN for the key and authorise its use in your browser:

14. Microsoft requires that the Yubikey is protected by a PIN. If you have previously deactivated the PIN function - for example because it was not required in the SSO portal - you must reactivate it in order to be able to use Microsoft Copilot. Instructions for reactivating the PIN can be found here: https://wiki.it.haw-landshut.de/doku.php?id=faq:sso:yubikey_pin

15 You can see the security key you have set up at the end in the list of login methods:

1. start the login process (click on the profile icon at the bottom left):

2. select „Continue with Microsoft“ in the second window:

3. then „Select account“ or sign in with another account:

4. in the next step, you can skip the password entry and use the Yubikey directly to log in instead of entering the password:

5. a PIN is usually required for the Yubikey:

6. you can then select „Work account“ or switch to a personal chat:

1. under https://myaccount.microsoft.com/settingsandprivacy/privacy you can delete your entire Copilot history:

2. it is also possible to delete individual sub-menus: