CU Secure and Multi-Factor Authentication (MFA)

Protect our campus systems and your personal information

 

Phase Three - Remote Access to Microsoft 365 Applications including Email

As OIT outlined last year, the next phase for multi-factor authentication (MFA) implementation is to protect our Microsoft 365 data and email when working off-campus. Using multi-factor authentication makes it more difficult for an identity thief to steal your personal information or access the university’s systems. Duo Security will be your second proof of identification. 

Beginning Tuesday, May 26, the university will implement the use of Duo with email and other Microsoft 365 applications from off-campus. 

A vast number of people have compromised their email accounts by unwittingly clicking on a fraudulent or phishing email, oftentimes causing major losses financially and of personal information. With many of us continuing to work and learn from home, it is more important than ever that we all work toward helping safeguard both personal information and university private data.

Please know that many university faculty, students and staff across the country have already been through the MFA process — and made it through successfully — you've got this! At CU for example, access to the UCDAccess Portal for content such as our tax information, benefits summary and direct deposit information, are already protected by Duo Security. To access these pages on the portal, you are asked to authenticate your identity using your password and your phone. Students may recognize the same extra step of showing proof that you are who you say you are as it's similar to what many banks and other businesses are doing to help secure your account. 

If you have not already installed and registered for Duo Security, please do so as soon as possible so that you will have uninterrupted service to your email and Microsoft 365 applications. Those of you who are accessing the CU Denver or Anschutz Medical Campus virtual private network (VPN) or remote desktops and applications are already using Duo for MFA and no additional action is needed.

Note: Microsoft has changed the Office 365 brand name to Microsoft 365.

CU Secure and Multi-Factor Authentication (MFA)

Protect our campus systems and your personal information

 

Remote Access to Microsoft 365 Applications including Email

Modern authentication was turned on with multi-factor authentication (MFA) for Microsoft 365, on Tuesday, May 26, as planned. If you are experiencing an issue with authenticating, please be sure you are using supported devices and operating systems and Outlook for your university email.

If you are using an outdated version of Microsoft Office (versions prior to Office 2016, Office 2019 or Office365) please uninstall Microsoft Office and reinstall the full office package on your desktop. All faculty, staff and students have full access to the Microsoft 365 suite of products, free of charge, to install on 5 PCs or Macs, tablets (Windows, iPad and Android), and phones. 

Please note: Microsoft has recently changed the Office 365 brand name to Microsoft 365. Only the name has changedthere are no changes to the applications. 

What do I need to do?

If you are already accessing the CU Denver or Anschutz Medical Campus virtual private network (VPN) or remote desktops and applications using Duo for MFA, then no additional action is needed for Duo. Your next steps are to be sure you're using an updated version of Outlook for email (2019 and above) and that your systems and browsers are up-to-date.

If you have not already installed and registered for Duo Security, please do so at this time so that you will have uninterrupted service to your email and Microsoft 365 applications.

#1: Install and Register for Duo

Steps:

  1. Download the Duo app on your preferred mobile device. OIT highly recommends doing this on your smartphone.
  2. Register for Duo from your laptop or desktop computer. In your browser, type in: https://passport.ucdenver.edu/cusecure.php and click enter. Remove your university email address and type in your user name. (Installation instructions are also available as a pdf to download.)
    • Be sure to log in using your university username (not your email address) and your password.
    • The Duo Authentication “Start setup” message will appear. (If you're already registered for Duo, you'll receive a ready to start using CU Secure message.)
    • Troubleshooting: If you have an issue accessing the https://passport.ucdenver.edu/CUSecure.php link, clear your browser data, then close your browser and reopen a new session. You must enter your user name (generally your last name and first initial or a combination of your last and first name).

Contact the OIT Service Desk if you need assistance installing and registering for Duo.

#2: Install Outlook for Email

Steps:

  1. InsMS Outlook icontall Microsoft Outlook on your mobile device and laptop for best functionality. Other applications (such as your mobile device's native mail application) will not be supported. Look for the Outlook logo on the Apple App Store or Google Play Store.
    • Faculty, students and staff can download the entire suite of Microsoft 365 applications at no cost from https://office.com using your university credentials. If you already have Outlook and Microsoft 365 apps installed, be sure you are using an updated version - either Office 2016, Office 2019 or Office365. If you are having difficulty with Office 2016, OIT recommends uninstalling Microsoft Office and reinstalling the full office package using Office 2019 and above.
    • It is best to use the Microsoft desktop applications instead of a web browser so that after you are prompted to authenticate initially, you will only be prompted for authentication about once every 90 days. If you use a web browser for email, you will be prompted for authentication with each new browser session.

#3: Check for Supported Devices and Operating Systems

Steps:

  1. Be sure you are using the most up-to-date browser and updated operating systems on all your devices.
    • OIT has tested several operating systems and devices for functionality with Microsoft's move to end support of Basic Authentication. Microsoft has stated that both Outlook for Windows and Mac will be impacted in the fall as they move to the more secure Modern Authentication.
    • OIT is staying ahead of the game and switching to Modern Authentication in tandem with our implementation of multi-factor authentication for Microsoft 365 applications in advance of Microsoft's upcoming changes. Refer to the table below for assistance and contact the OIT Service Desk with any questions you may have about compatibility:
Microsoft 365 and Duo Security Supported Clients and Browsers
DEVICEREQUIREMENTSDUO SECURITY NOTES

Operating Systems (OS):

  

Microsoft system specs include:

  • Memory - 2GB RAM (64-bit)
  • Disk Space - 3GB 
  • Monitor Resolution - 1024x768

Microsoft Windows:

  • Windows 10
  • Windows 8.1
  • Windows 8
 

Mac system specs include:

  • Memory - 4GB RAM 
  • Disk Space - 10GB
  • Monitor Resolution - 1280x800

Apple/Mac:

  • macOS 10.13 High Sierra and later (including Mojave and Catalina)
  • Earlier operating system versions are no longer supported and need to be updated
 
LinuxInstall the most recent browser for Linux. If you have questions, the OIT Service Desk will try to help as they are able but, the team does not have access to the Linux OS to troubleshoot.Keep your browser open or you will be required to authenticate at the beginning of each new session.
iOS (Apple)

Apple iPhone:

  • iOS 12.0 or later for iPhone and iPad
  • iOS 11.0 or later for iPad Pro
Supports iOS 11.0 and greater.
Android OS

Android Phones and Chromebook: 

  • Versions 7.0 through 10.0
  • Earlier versions are no longer supported and need to be updated
    Supports Android 7.0 and greater.
    Blackberry OSOIT recommends upgrading to a newer smartphone for MFA capability.No, Duo Mobile for Blackberry is no longer available or supported.
    Email Clients:  

    Outlook for iOS

    Notes:

    • Outlook is recommended for Modern Authentication
    • Supported by the OIT Service Desk
    Requires iOS version 12.0 or higher.Supports iOS 11.0 and greater.

    Outlook for Android

    Notes:

    • Outlook is recommended for Modern Authentication
    • Supported by the OIT Service Desk
    Requires Android version 5.0 or higher.Supports Android 7.0 greater.
    Native mail client for iPhonePossibly supported, on iOS 11 or higher; however, OIT recommends installing the Microsoft Outlook app available from the Apple Store.
    Native mail client for AndroidPossibly supported, on Android OS 4.4 or higher; however, OIT recommends installing the Microsoft Outlook app available from the Google Play Store. 
    Web-based Microsoft 365 applications

    Microsoft 365 web applications are available at https://office.com by clicking the waffle app launcher icon in the left-hand corner.

    Supported using the web-based apps; however, MFA will be required for each new browser session.
    Microsoft Outlook 2019Modern Authentication is supported. 
    Microsoft Outlook 2016Modern Authentication is supported. 
    Microsoft Outlook 2013Can be enabled on Windows devices. Contact your school, college or department technical team for assistance.  
    IMAP and POP3Microsoft Outlook will not support connection to emails through the IMAP client or POP account. 
    Browsers:  
    Chrome, Firefox, Safari, Internet Explorer, Microsoft EdgeOffice 365 and Office 2019 are supported with the current versions of these browsers. 

     

     


    For CU, multi-factor authentication is:

    • Something you know (your user name and password)
    • Something you have (your mobile device or landline phone)
    • Somewhere you are (on-campus vs. off-campus)
    MFA infographic


    Not sure if you've already registered for Duo?

    • You can check! From your computer, go to the login page
    • Login with your CU network username (not your email address) and password.
    • If you have already registered, you will receive the following message:

    Duo confirmation image