Sign in to Surface Hub with Microsoft Authenticator

People in your organization can sign in to a Surface Hub without a password using the Microsoft Authenticator app, available on Android and iOS.

Organization prerequisites

To let people in your organization sign in to Surface Hub with their phones and other devices instead of a password, you’ll need to make sure that your organization meets these prerequisites:

  • Your organization must be a hybrid or cloud-only organization, backed by Azure Active Directory (Azure AD). For more information, see What is Azure Active Directory?

  • Make sure you have at minimum an Office 365 E3 subscription.

  • Configure Multi-Factor Authentication. Make sure Notification through mobile app is selected.

    multi-factor authentication options.

  • Enable content hosting on Azure AD services such as Office, SharePoint, etc.

  • Surface Hub must be running Windows 10, version 1703 or later.

  • Surface Hub is set up with either a local or domain-joined account.

Individual prerequisites

  • An Android phone running 6.0 or later, or an iPhone or iPad running iOS9 or later

  • The most recent version of the Microsoft Authenticator app from the appropriate app store


    On iOS, the app version must be 5.4.0 or higher.

    The Microsoft Authenticator app on phones running a Windows operating system can't be used to sign in to Surface Hub.

  • Passcode or screen lock on your device is enabled

How to set up the Microsoft Authenticator app


If Company Portal is installed on your Android device, uninstall it before you set up Microsoft Authenticator. After you set up the app, you can reinstall Company Portal.

If you have already set up Microsoft Authenticator on your phone and registered your device, go to the sign-in instructions.

  1. Add your work or school account to Microsoft Authenticator for Multi-Factor Authentication. You will need a QR code provided by your IT department. For help, see Get started with the Microsoft Authenticator app.
  2. Go to Settings and register your device.
  3. Return to the accounts page and choose Enable phone sign-in from the account dropdown menu.

How to sign in to Surface Hub during a meeting

  1. After you’ve set up a meeting, go to the Surface Hub and select Sign in to see your meetings and files.


    If you’re not sure how to schedule a meeting on a Surface Hub, see Schedule a meeting on Surface Hub.

    screenshot of Sign in option on Surface Hub.

  2. You’ll see a list of the people invited to the meeting. Select yourself (or the person who wants to sign in – make sure this person has gone through the steps to set up their device before your meeting), and then select Continue.

    screenshot of list of attendees in a meeting.

    You'll see a code on the Surface Hub.

    screenshot of code for Approve Sign in.

  3. To approve the sign-in, open the Authenticator app, enter the four-digit code that’s displayed on the Surface Hub, and select Approve. You will then be asked to enter the PIN or use your fingerprint to complete the sign in.

    screenshot of the Approve sign-in screen in Microsoft Authenticator.

You can now access all files through the OneDrive app.