Personal device
Implementation of Mobile Device Management and Multifactor Authentication on Your Personal Mobile Device
You need Mobile Device Management (Microsoft Intune) to access Tuni’s network and services from your device, such as Wi-Fi and email. The Microsoft Authenticator app is required for multifactor authentication when using Tuni resources.
When you implement mobile device management, the current apps and data on your phone will remain unchanged. If you fail to install Intune, you can uninstall it according to the last section of this guide and then start over.
Installation and Implementation of Mobile Device Management
Please note that only one mobile device management can be installed on the device at a time. The adoption of the mobile device management used by Tunin may require the removal of previous mobile device managements, which may affect the use of third-party resources.
If the Company Portal app is already installed on your device and enrol anyway, please follow uninstall instructions below.
Install the Intune Company Portal from the Play Store (Android) or App Store (Apple) and open it.
Apple: Delete the following apps from your phone (all Microsoft products): Word, Excel, PowerPoint, Outlook, Teams, OneDrive, OneNote, Edge.
Sign in with your TUNI email address and password.
Select Begin.
Continue forward by following the on-screen instructions.
Apple: Select Secure Work-related apps and data only, to permit only allow management and data inside work profile.
Android: You can find the app lists on a Samsung phone by swiping up from the home screen. By tapping on Personal or Work at the bottom, you can switch between your personal profile and work profile.
Installation of Microsoft Authenticator app
Next, we will install the Microsoft Authenticator app, which is necessary for setting up multifactor authentication for your TUNI account.
Open the Authenticator app from your phone’s work profile. If necessary, wait a moment for the work applications to install on your device.
Accept the terms of use.
Select Add work or school account.
Choose Scan QR code.
Give the app permission to use your phone’s camera, if asked, so it can read QR codes.
The app will now wait for the QR code that will link your TUNI account and the phone application.
Linking your TUNI account and the phone´s authentication app
Open the following URL in your computer’s browser: https://aka.ms/mfasetup (start a VPN connection if you are working remotely). If necessary, authenticate using the Authenticator app on your old device.
Log in using your TUNI email address and password.
If your TUNI-account is new:
The browser will notify you to set up additional information, select Next.
Choose “Authenticator app” and Add.
If your TUNI-account is old:
Select + Add sign-in method.
Choose Authenticator app and Add.
Proceed in the browser by clicking the Next button until the QR code appears.
Now take your phone and read the QR code in the computer’s browser with the QR code reader open in the Microsoft Authenticator app on your phone.
Once the Microsoft Authenticator phone app has read the QR code, you can click the Next button in the computer’s browser.
You will receive a test authentication request on your phone, which you must Approve.
You can move forward in the computer’s browser by clicking the Next button.
Click the Done button in the browser.
The linking of your TUNI account and the phone application is now complete.
Removing Mobile Device Management
If necessary, you can remove your phone´s Intune mobile device management.
Start the Company Portal app, open the menu in the top left corner.
Tap Remove Company Portal. OK.
This will remove the work profile from your phone along with all its applications and data. There will be no changes to your personal profile.
IT Helpdesk
0294 520 500
it-helpdesk [at] tuni.fi (it-helpdesk[at]tuni[dot]fi)
helpdesk.tuni.fi