Division of Medicaid Services: MyWisconsin ID Multi-Factor Authentication Information

Learn about the multi-factor authentication (MFA) options for MyWisconsin ID, including how to install and log in using your organization’s approved MFA method.

The Wisconsin Department of Health Services (DHS) recommends you set up more than one MFA for your account. Setting up multiple MFA methods for MyWisconsin ID enables you to log in if you lose access to one of your authentication methods (i.e. you lose your phone you have a Phone MFA set up on) or forget answers to one authentication method.

Check with your employer about which MFA method is approved for use at your organization.

Google Authenticator

Google Authenticator is a mobile app that generates a six-digit code for you to type into your MyWisconsin ID login screen. You have 30 seconds to input the code before it generates another. If you miss the window, use the next code to log in.

Install the Google Authenticator app on your cell phone or tablet

Download the app on your cell phone or tablet:

• Google Authenticator app in the Apple App Store
• Google Authenticator app in Google Play

Set up Google Authenticator

1. Using your browser, navigate to the MyWisconsin ID homepage.
2. Enter your MyWisconsin ID (email address) and select Next.
3. Enter your MyWisconsin ID password.
4. If you are an existing user, navigate to your Settings page and select Set Up under Google Authenticator and follow the instructions below. If you are a new user also follow the instructions below.
5. You will see a prompt on your device to Set up security methods.
6. Select Setup in the Google Authenticator section.
7. Select Next. A barcode will appear on your screen. Scan the code with either your camera or Google Authenticator app and select Next.
8. Enter the code you receive from Google Authenticator on the next screen and select Verify.

Prefer a video walkthrough?

Okta Verify

Okta Verify is a mobile app that verifies your identity. It works similarly to other authenticator apps in which you verify your identity by scanning a QR code through the Okta verify app.

Install Okta Verify

Download the app on your cell phone or tablet:

• Okta Verify app on the Apple App Store
• Okta Verify app on Google Play

Set up Okta Verify

1. Navigate to the MyWisconsin ID homepage.
2. Enter your MyWisconsin ID (email address) and select Next.
3. Enter your MyWisconsin ID password.
4. If you are an existing user, navigate to your Settings page and select Set Up under Google Authenticator and follow the instructions below. If you are a new user also follow the instructions below.
5. You will see a prompt on your device to Set up security methods.
6. Select Setup in the Okta Verify section.
7. Open the Okta Verify app on your phone and scan the QR that appears in your browser or directly scan the code from your camera.
8. Once the QR code is scanned, you will be verified through the Okta Verify app.

Prefer a video walkthrough?

Text message/SMS authentication

Text message/SMS authentication uses the text messaging service on your cell phone or tablet to send you a one-time login code. Alternatively, you can receive a voice call with the one-time login code.

Set up text message/SMS authentication

1. Using your browser, navigate to the MyWisconsin ID homepage.
2. Enter your MyWisconsin ID (email address) and select Next.
3. Enter your MyWisconsin ID password and select Verify.
4. If you are an existing user, navigate to your Settings page and select Set Up under Google Authenticator and follow the instructions below. If you are a new user also follow the instructions below.
5. You will see a prompt on your device to Set up security methods.
6. Select Setup in the Phone section.
7. On the Setup: SMS screen, enter your phone number. Alternatively, you can receive a voice call with the one-time login code.
8. Select Send code.
9. Type the SMS code you receive on your mobile device into the Receive a Code via SMS to Authenticate screen in your browser.
10. Select Verify.

Prefer a video walkthrough?

Biometric Authenticator—Web authentication

The Biometric Authenticator allows you to use your Windows Hello Recognition setup on a computer with a Microsoft operating system or Apple Touch ID on an Apple computer to login to your MyWisconsin ID applications. If your Windows Hello recognition is set up, you can use your PIN, fingerprint, or facial recognition to login. Below are the steps to first set up Windows Hello, followed by instructions on how to set up the biometric authenticator.

Set up Windows Hello

Set up Windows Hello before configuring your multi-factor enrollment option.

To add Windows Hello as a sign in method for your Microsoft account:

1. Navigate to Accounts, and then Sign-in options on your Windows computer.
2. Select which way you would like to sign in. For this example, we will use the PIN set up.
3. Select Set up under PIN.
4. Create a PIN.
5. Once your PIN is entered, you can now sign in with your PIN.
6. Return to the Sign-In Options page to set up either your facial recognition or fingerprint.
   1. For facial recognition, select Set up.
      1. Your computer will scan your face through your webcam, allowing you to log in with facial recognition moving forward.
   2. For fingerprint, select Set up.
      1. Place your finger on the fingerprint scanner on your computer
      2. Once your fingerprint is scanned, you will be able to login with your fingerprint.

Prefer a video walkthrough?

Biometric Authenticator

Once signed you have a Windows Hello biometric authentication, please follow the below steps to use Biometric Authenticator as an MFA.

New MyWisconsin ID user

1. Using your browser, navigate to the MyWisconsin ID homepage.
2. Sign up for MyWisconsin ID. For help, follow the Create Account (PDF) guide or MyWisconsin ID Video Video Guide.
3. Enter your MyWisconsin ID password and select Verify.
4. Once registered, enter your MyWisconsin ID (email address) and select Next.
5. Under Set up security methods, choose Set Up under Security Key or Biometric Authenticator.
6. On the Set up security key or biometric authenticator screen, choose Set Up.
7. Based on what recognition settings you have set up on your Windows computer, you will be prompted to either enter your PIN or scan your face to authenticate your method of signing in.
8. Once one of the methods is complete, you will be able to sign in with all of the recognition methods you have set up on your Windows computer.

Prefer a video walkthrough?

Existing MyWisconsin ID user

1. Using your browser, navigate to the MyWisconsin ID homepage.
2. Enter your MyWisconsin ID (email address) and select Next.
3. Enter your MyWisconsin ID password and select Verify.
4. From your home dashboard, select Settings.
5. Select the Set up button for Security Key or Biometric Authenticator.
6. Verify with an existing method, either a password or an existing factor that you set up previously.
7. Complete the verification, and select Set up for the next two steps.
8. Select Continue on the Windows Security pop-up to save your Passkey in your windows device.
9. After successfully setting up the MFA, you will be sent back to the application with a "Successful" notification pop up.

Prefer a video walkthrough?

Security key

A security key (such as YubiKey) is a small hardware device used as an MFA method. To use it, you insert the key into a USB port and confirm authentication when logging in. Security keys help protect accounts from phishing and unauthorized access.

Security key setup

1. Using your browser, navigate to the MyWisconsin ID homepage.
2. Enter your MyWisconsin ID (email address) and select Next.
3. Enter your MyWisconsin ID password and select Verify.
4. If you are an existing user, navigate to your Settings page, select Set Up under Google Authenticator, and follow the instructions below. If you are a new user you should also follow the instructions below.
5. Under Set up security methods, choose Set Up under Security Key or Biometric Authenticator.
6. On the Set up security key or biometric authenticator screen, choose Set Up.
7. On the pop-up screen, select Use another device.
8. Select Security Key.
9. Insert your security key (such as a YubiKey) once prompted.
10. If it is a verified device, it will allow access to your application and serve as one of your MFAs moving forward

Prefer a video walkthrough?