Office 365 + Duo Authentication

Employees who use UCI’s Office 365/Exchange now have the option to use Duo two-factor authentication (2FA) as an added security measure to protect access to Office 365 accounts. This service provides you with a secondary means of confirming your identity via your mobile device in addition to your existing password that makes it near impossible for your account to get compromised.

You must first Opt-In to begin requiring the use of Duo-2FA for Office 365.

To use Duo-2FA with an enrolled device, you may use any of the supported Office 365 + Duo applications.

  • Office 2013 (registry key update required)
  • Office 2016 for Windows and macOS
  • Skype for Business 2016 (you can download the latest version here)
  • Native mail & calendar app on iOS (starting with iOS 11)
  • Outlook Mobile app for iOS and Android
  • UCI Outlook Web Access (OWA) at https://outlook.com/uci.edu

Note: Duo-2FA does NOT yet work with native mail & calendar apps on Android).

Please partner with your CSC for help with installing any of these applications, or if your computer is managed by OIT DSS you may open a ticket.

How do I get started using Duo with Office 365?

Download the App and Enroll in Duo

  1. Download the Duo app for your iPhone or Android phone.
  2. Once it is installed, you can go to the Duo Enrollment page and follow the steps to set up your Software Token. For additional information please visit UCI Duo Support.

Opt-in to use Duo with Office 365

Once a device is registered, you can visit the Duo Support Desk portal to Opt-In to the Duo + O365 service. Here's how you do it.

  1. Log in to the Duo Support Desk.
  2. You'll be prompted to log in with your UCInetID and password.
  3. Select the Office 365 Enroll tab. You will be asked to authenticate using your Duo token (if you haven't already done so for the existing session).
  4. Your current opt-in status will then be displayed. You can change your current opt-in status by selecting Enable or Disable and selecting the Submit button.

Enrollment in DUO-2FA is optional. You may opt-out at any time by repeating the steps above.

How does Duo work with Office 365?

2FA verification works by prompting you for two pieces of identification when you sign in: something you know (your password) and something you're physically holding (your phone).

Log in to Office 365 as your normally would with your UCInetID and Password using a supported application (see above). You will then be prompted for a secondary authentication approval from one of your enrolled devices. This will occur each time you log in.

  1. Enter your UCInetID and password.
    Office 365 Login
  2. Receive a Push notification or Enter a Passcode
    Push notification
  3. Tap "Approve" on your mobile device to be logged in to Office 365.
    Approve on Duo

Do I have to use Duo each time I open the desktop or mobile Outlook applications?

No. You only have to use Duo once (when you first enable 2FA) and if you haven't opened those applications in a while (>2 weeks).

You will have to use Duo each day if you check your email via Outlook on the Web (aka OWA) at https://outlook.com/uci.edu.

Why are the 'native' Android mail and calendar apps unsupported?

Unfortunately, the 'native' (aka built-in) Android apps do not currently support Microsoft's Modern Authentication.

I've replaced my phone and now I can't sign in to Office 365. Can you disable two-factor for me?

Yes we can. Please open a ticket. When doing so, please provide the following:

  • Your full name
  • Your UCInetID (the first part of your email address, not your ID number)
  • Your mobile number
  • A detailed description of the issue

For security reasons, we have to speak with you to verify your identity.

How do I enable Auto-Push for Web Logins?

  1. Go to https://applications.oit.uci.edu/DuoSupportDesk/enrollmentDuo.htm
  2. Click on the "My Settings & Devices" link
  3. Use Duo authentication to confirm your device
  4. Change the "When I log in" selection for your device to automatically send a Duo push (or the opposite to disable)
  5. Click Save.

How do I enable the 'Remember Me for 24 hours' feature when Auto-Push is enabled for Web Logins?

  1. Click the "Cancel" button on the web page screen where it says "Pushed a login request to your device..."
  2. The "Remember me" checkbox should now be editable.
    • NOTE: Using this feature requires your browser to accept 3rd party cookies.
  3. Change option as desired and click Push, after which it will Auto-Push again with the new setting.

I'm having trouble using Duo.

We have a comprehensive Duo Help Center page where you can troubleshoot your issue.

I've tried the steps above and I'm still having issues

We recommend you continue your search in our comprehensive ServiceNow Knowledge Base.

If you're still having trouble, feel free to open a ticket. When doing so, please provide the following:

  • Your full name
  • Your UCInetID (the first part of your email address, not your ID number)
  • Your mobile number
  • A detailed description of the issue

Failure to provide this information will delay our response.

Lots of great technical information can be found in the Duo User Guide.

Return to the OIT Help Center.

Scroll Up