CU Secure and Multi-Factor Authentication (MFA)

Protect our campus systems and your personal information

 

Phase Three - Remote Access to Microsoft 365 Applications including Email

As OIT outlined last year, the next phase for multi-factor authentication (MFA) implementation is to protect our Microsoft 365 data and email when working off-campus. Using multi-factor authentication makes it more difficult for an identity thief to steal your personal information or access the university’s systems. Duo Security will be your second proof of identification. 

Beginning Tuesday, May 26, the university will implement the use of Duo with email and other Microsoft 365 applications from off-campus. 

A vast number of people have compromised their email accounts by unwittingly clicking on a fraudulent or phishing email, oftentimes causing major losses financially and of personal information. With many of us continuing to work and learn from home, it is more important than ever that we all work toward helping safeguard both personal information and university private data.

Please know that many university faculty, students and staff across the country have already been through the MFA process — and made it through successfully — you've got this! At CU for example, access to the UCDAccess Portal for content such as our tax information, benefits summary and direct deposit information, are already protected by Duo Security. To access these pages on the portal, you are asked to authenticate your identity using your password and your phone. Students may recognize the same extra step of showing proof that you are who you say you are as it's similar to what many banks and other businesses are doing to help secure your account. 

If you have not already installed and registered for Duo Security, please do so as soon as possible so that you will have uninterrupted service to your email and Microsoft 365 applications. Those of you who are accessing the CU Denver or Anschutz Medical Campus virtual private network (VPN) or remote desktops and applications are already using Duo for MFA and no additional action is needed.

Note: Microsoft has changed the Office 365 brand name to Microsoft 365.

CU Secure and Multi-Factor Authentication (MFA)

Protect our campus systems and your personal information

The CU Secure Project Team is rolling out the final phase of multi-factor authentication (MFA) on both campuses beginning Tuesday, June 1. MFA provides a layer of protection against an unauthorized person gaining access to your information. This next phase adds MFA to the employee and student portals at https://my.cu.edu/ to access CU system resources, such as timesheets, tax documents and direct deposit information. Be sure to have the device that you authenticate into Duo for multi-factor with handy when accessing the portal beginning June 1. 

MFA has been implemented with:

  • GlobalProtect, the university's virtual private network (VPN)
  • VMWare Horizon, access to university resources through a remote desktop (often referred to as VDI)
  • Microsoft 365 applications including Outlook for university email
  • Employee and Student portals beginning June 1, 2021

Steps to take

Install and Register for Duo

  1. Download the Duo app on your preferred mobile device. OIT highly recommends doing this on your smartphone.
  2. Register for Duo from your laptop or desktop computer.
    • In your browser, type in: https://passport.ucdenver.edu/cusecure.php and click enter. Remove your university email address and type in your user name. (Installation instructions are also available as a pdf to download.) Be sure to log in using your university username (not your email address) and your password.
    • The Duo Authentication “Start setup” message will appear. (If you're already registered for Duo, you'll receive a ready to start using CU Secure message.)
    • Troubleshooting: If you have an issue accessing the https://passport.ucdenver.edu/CUSecure.php link, clear your browser data, then close your browser and reopen a new session. You must enter your user name (generally your last name and first initial or a combination of your last and first name).

Contact the OIT Service Desk if you need assistance installing and registering for Duo.

MFA with Microsoft 365 (including Outlook for university email)

Install Outlook on your mobile device and laptop for best functionality. Other applications (such as your mobile device's native mail application) is not university-supported. Look for the Microsoft Outlook logo on the Apple App Store or Google Play Store. 

As a reminder: Faculty, students and staff can download the entire suite of Microsoft 365 applications at no cost from https://office.com using your university credentials! If you already have Outlook and Microsoft 365 apps installed, be sure you are using an updated version - either Office 2016, Office 2019 or Office365. If you are experiencing an issue with authenticating, please check that you are using supported devices and operating systems.

Troubleshooting: If you are having difficulty with Office 2016, OIT recommends uninstalling Microsoft Office and reinstalling the full office package using Office 2019 and above.

Tip: It is best to use the Microsoft desktop applications instead of a web browser so that after you are prompted to authenticate initially, you will only be prompted for authentication about once every 90 days. If you use a web browser for email, you will be prompted for authentication with each new browser session.

Check for Supported Devices and Operating Systems

Be sure you are using the most up-to-date browser and updated operating systems on all your devices. Refer to the table below for assistance. Contact the OIT Service Desk with any questions you may have about compatibility:

Microsoft 365 and Duo Security Supported Clients and Browsers

DEVICEREQUIREMENTSDUO SECURITY NOTES

Operating Systems (OS):

  

Microsoft system specs include:

  • Memory - 2GB RAM (64-bit)
  • Disk Space - 3GB 
  • Monitor Resolution - 1024x768

Microsoft Windows:

  • Windows 10
  • Windows 8.1
  • Windows 8
 

Mac system specs include:

  • Memory - 4GB RAM 
  • Disk Space - 10GB
  • Monitor Resolution - 1280x800

Apple/Mac:

  • macOS 10.13 High Sierra and later (including Mojave and Catalina)
  • Earlier operating system versions are no longer supported and need to be updated
 
LinuxInstall the most recent browser for Linux. If you have questions, the OIT Service Desk will try to help as they are able but, the team does not have access to the Linux OS to troubleshoot.Keep your browser open or you will be required to authenticate at the beginning of each new session.
iOS (Apple)

Apple iPhone:

  • iOS 12.0 or later for iPhone and iPad
  • iOS 11.0 or later for iPad Pro
Supports iOS 11.0 and greater.
Android OS

Android Phones and Chromebook: 

  • Versions 7.0 through 10.0
  • Earlier versions are no longer supported and need to be updated
    Supports Android 7.0 and greater.
    Blackberry OSOIT recommends upgrading to a newer smartphone for MFA capability.No, Duo Mobile for Blackberry is no longer available or supported.
    Email Clients:  

    Outlook for iOS

    Notes:

    • Outlook is recommended for Modern Authentication
    • Supported by the OIT Service Desk
    Requires iOS version 12.0 or higher.Supports iOS 11.0 and greater.

    Outlook for Android

    Notes:

    • Outlook is recommended for Modern Authentication
    • Supported by the OIT Service Desk
    Requires Android version 5.0 or higher.Supports Android 7.0 greater.
    Native mail client for iPhonePossibly supported, on iOS 11 or higher; however, OIT recommends installing the Microsoft Outlook app available from the Apple Store.
    Native mail client for AndroidPossibly supported, on Android OS 4.4 or higher; however, OIT recommends installing the Microsoft Outlook app available from the Google Play Store. 
    Web-based Microsoft 365 applications

    Microsoft 365 web applications are available at https://office.com by clicking the waffle app launcher icon in the left-hand corner.

    Supported using the web-based apps; however, MFA will be required for each new browser session.
    Microsoft Outlook 2019Modern Authentication is supported. 
    Microsoft Outlook 2016Modern Authentication is supported. 
    Microsoft Outlook 2013Can be enabled on Windows devices. Contact your school, college or department technical team for assistance.  
    IMAP and POP3Microsoft Outlook will not support connection to emails through the IMAP client or POP account. 
    Browsers:  
    Chrome, Firefox, Safari, Internet Explorer, Microsoft EdgeOffice 365 and Office 2019 are supported with the current versions of these browsers. 

     

    MFA infographic

     


    For CU, multi-factor authentication is:

    • Something you know (your user name and password)
    • Something you have (your mobile device or landline phone)
    • Somewhere you are (on-campus vs. off-campus)


    Not sure if you've already registered for Duo?

    • You can check! From your computer, go to the login page
    • Login with your CU network username (not your email address) and password.
    • If you have already registered, you will receive a message that says:

    That worked! You are now ready to start using CU Secure.