As OIT outlined last year, the next phase for multi-factor authentication (MFA) implementation is to protect our Microsoft 365 data and email when working off-campus. Using multi-factor authentication makes it more difficult for an identity thief to steal your personal information or access the university’s systems. Duo Security will be your second proof of identification.
Beginning Tuesday, May 26, the university will implement the use of Duo with email and other Microsoft 365 applications from off-campus.
A vast number of people have compromised their email accounts by unwittingly clicking on a fraudulent or phishing email, oftentimes causing major losses financially and of personal information. With many of us continuing to work and learn from home, it is more important than ever that we all work toward helping safeguard both personal information and university private data.
Please know that many university faculty, students and staff across the country have already been through the MFA process — and made it through successfully — you've got this! At CU for example, access to the UCDAccess Portal for content such as our tax information, benefits summary and direct deposit information, are already protected by Duo Security. To access these pages on the portal, you are asked to authenticate your identity using your password and your phone. Students may recognize the same extra step of showing proof that you are who you say you are as it's similar to what many banks and other businesses are doing to help secure your account.
If you have not already installed and registered for Duo Security, please do so as soon as possible so that you will have uninterrupted service to your email and Microsoft 365 applications. Those of you who are accessing the CU Denver or Anschutz Medical Campus virtual private network (VPN) or remote desktops and applications are already using Duo for MFA and no additional action is needed.
Note: Microsoft has changed the Office 365 brand name to Microsoft 365.
The CU Secure Project Team is rolling out the final phase of multi-factor authentication (MFA) on both campuses beginning Tuesday, June 1. MFA provides a layer of protection against an unauthorized person gaining access to your information. This next phase adds MFA to the employee and student portals at https://my.cu.edu/ to access CU system resources, such as timesheets, tax documents and direct deposit information. Be sure to have the device that you authenticate into Duo for multi-factor with handy when accessing the portal beginning June 1.
MFA has been implemented with:
Contact the OIT Service Desk if you need assistance installing and registering for Duo.
Install Outlook on your mobile device and laptop for best functionality. Other applications (such as your mobile device's native mail application) is not university-supported. Look for the Microsoft Outlook logo on the Apple App Store or Google Play Store.
As a reminder: Faculty, students and staff can download the entire suite of Microsoft 365 applications at no cost from https://office.com using your university credentials! If you already have Outlook and Microsoft 365 apps installed, be sure you are using an updated version - either Office 2016, Office 2019 or Office365. If you are experiencing an issue with authenticating, please check that you are using supported devices and operating systems.
Troubleshooting: If you are having difficulty with Office 2016, OIT recommends uninstalling Microsoft Office and reinstalling the full office package using Office 2019 and above.
Tip: It is best to use the Microsoft desktop applications instead of a web browser so that after you are prompted to authenticate initially, you will only be prompted for authentication about once every 90 days. If you use a web browser for email, you will be prompted for authentication with each new browser session.
Be sure you are using the most up-to-date browser and updated operating systems on all your devices. Refer to the table below for assistance. Contact the OIT Service Desk with any questions you may have about compatibility:
|DEVICE||REQUIREMENTS||DUO SECURITY NOTES|
Operating Systems (OS):
Microsoft system specs include:
Mac system specs include:
|Linux||Install the most recent browser for Linux. If you have questions, the OIT Service Desk will try to help as they are able but, the team does not have access to the Linux OS to troubleshoot.||Keep your browser open or you will be required to authenticate at the beginning of each new session.|
|Supports iOS 11.0 and greater.|
Android Phones and Chromebook:
|Supports Android 7.0 and greater.|
|Blackberry OS||OIT recommends upgrading to a newer smartphone for MFA capability.||No, Duo Mobile for Blackberry is no longer available or supported.|
Outlook for iOS
|Requires iOS version 12.0 or higher.||Supports iOS 11.0 and greater.|
Outlook for Android
|Requires Android version 5.0 or higher.||Supports Android 7.0 greater.|
|Native mail client for iPhone||Possibly supported, on iOS 11 or higher; however, OIT recommends installing the Microsoft Outlook app available from the Apple Store.|
|Native mail client for Android||Possibly supported, on Android OS 4.4 or higher; however, OIT recommends installing the Microsoft Outlook app available from the Google Play Store.|
|Web-based Microsoft 365 applications|
Microsoft 365 web applications are available at https://office.com by clicking the waffle app launcher icon in the left-hand corner.
|Supported using the web-based apps; however, MFA will be required for each new browser session.|
|Microsoft Outlook 2019||Modern Authentication is supported.|
|Microsoft Outlook 2016||Modern Authentication is supported.|
|Microsoft Outlook 2013||Can be enabled on Windows devices. Contact your school, college or department technical team for assistance.|
|IMAP and POP3||Microsoft Outlook will not support connection to emails through the IMAP client or POP account.|
|Chrome, Firefox, Safari, Internet Explorer, Microsoft Edge||Office 365 and Office 2019 are supported with the current versions of these browsers.|
For CU, multi-factor authentication is:
Not sure if you've already registered for Duo?
That worked! You are now ready to start using CU Secure.