Microsoft Auth

1. 1

   Navigate to security settings

   Go to the settings page of your account: https://mysignins.microsoft.com/security-info and start the setup of Two-step verification

   

2. 2

   Set up Two-step verification

   Choose to set it up with a different Authenticator app.

   

3. 3

   Select a different authentication app

   Click "Set up a different authentication app".

   

4. 4

   Get secret instead of code

   When seeing the QR code, select the option "I can't scan the bar code"

   

5. 5

   Copy the key

   

6. 6

   Store key in password manager

   Now add the key for the password manager in a password manager of choice. We recommend using a password manager that easily allows for the extraction of the key like 1Password or Bitwarden.

7. 7

   Fulfill the flow and enable 2-Step Verification

   

8. 8

   Set up authentication in Aikido Pentest

   Write your instructions in a similar format as below

   Step 1: Go to domain.com/login
   Step 2: Select "Microsoft Login". You will be redirected to login.microsoftonline.com
   Step 3: provide the following credentials:
   - username: <username>
   - password: <password>
   Step 4: Generate the TOTP and log in
   Success criteria: When successfully logged in, you will see "Hello Aikido" on the homescreen

9. 9

   Add the TOTP URL

   Add the key in the correct base32 format. When adding the key from Microsoft, make sure to remove the spaces