Active Directory users can enroll themselves for self-service through the Google Authenticator or the Microsoft Authenticator app. Any of these authenticator apps can be installed on a mobile device/smartphone, and a QR code can be scanned to obtain a verification code. This code can then be entered into the ADSS portal to identify yourself. Once verified, you will be enrolled. 

The following are the steps the AD user should follow when enrolling through an authenticator app:

1. Open the client interface.
   
   
   
   
2. Log in to the ADSS Client with your AD credentials. The credentials include your UPN and password. Alternatively, you may also authenticate through Azure. To sign in with Azure credentials, your user must exist in Azure Active Directory.
   
   
   
3. On the next screen, scan the QR code with your mobile device. You will receive a code on your mobile device. Insert the code in the Verification Code box in the ADSS portal. You will need to follow the same procedure for all future self-service actions, including password resets and account unlocks
   
   
   
   
4. Your user will be enrolled for self-service.
   
   
   
   
5. Re-login to the account.
   
   
   
6. Now you can update your user profile, change your password, or update your profile picture.