Duo logo  

 

Duo is a form of two-factor authentication that uses a mobile device, phone, passcode or token to verify that the person logging into your account is actually you. Duo adds a second layer of defense against unauthorized logins to your NetID account.

Multifactor authentication protects access to your NetID accounts even if your password is guessed or stolen.  Duo increases the security of university systems, data, and resources. Duo protects against cybercrimes and identity theft

All faculty, staff, and students are encouraged and welcome to begin using Duo now. 

On July 5, 2022 it will become mandatory for faculty and staff. 

During the Fall 2022 semester (date to be determined) Duo will become mandatory for students.

UIT recommends using Duo Mobile app  Push Notification method for best performance.

Visit the UIT How-To page to view the Adding new devices or manage existing devices

No. While using the Duo Mobile app is the suggested method of using Duo, it is not required.
You can have a passcode sent as an SMS message to your cell device, or you can have Duo call a phone number and provide the passcode. Visit the Duo Authentication methods page for more information on how to authenticate.

You can also use a landline(desk or home phone) or tablet. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, a landline and a hardware token, two different mobile devices, etc. Visit the UIT How-To page and click on the Duo icon for more instructions.

There is a self enroll button on the Duo homepage. This button will direct you to the enrollment page. For instructions about setup after enrolling, you can view this How-To video.

You will need to authenticate with Duo for each service that you log-in to that requires your NetID or MSU-UPN (Microsoft login)  In the future, some data sensitive applications will require authentication each time you log-in, like the VPN or MyInfo.

Duo authentication will not be necessary to logon to Student Labs computers.  However, accessing email via web or other services that use Duo authentication after logon to the computer will still require Duo authentication.

Duo authentication will not be necessary to logon to work computers.  However, accessing email via web or other services that use Duo authentication after logon to the computer will still require Duo authentication.

Once you authenticate into the Office application or O365 web access you will have access to any mailboxes you have delegated permissions on without having to authenticate again

It is recommended that multiple devices be setup to authenticate with Duo in case one is lost or forgotten.  If you do not have access to another device and you are unable to authenticate, please call the UIT ServiceDesk at 406-994-1777 for assistance with a temporary passcode.

Absolutely, in fact it is recommended to have at least two devices enrolled. This could be your mobile device and your office phone.

 

A frequent issue after enrolling in Duo is the change in how the email client is required to authenticate. The preferred method is using the Microsoft Outlook app for mobile devices. Alternatively, removing the email account from the device and re-adding often solves the issue. This article, Changes coming for the way you might be connecting to your MSU email provides additional information about the change in connecting to your MSU Microsoft email account.

After enrolling in Duo, Gmail’s send as feature will no longer function due to this feature not supporting Modern Authentication with Montana State University’s Microsoft 365 email. Google has, to date, not implemented support the OAuth2 modern authentication protocol for this feature. Its lack of support for this industry standard is not something within the control of the university.
 
The change from basic authentication to modern authentication has been on Microsoft’s roadmap for several years and will be fully implemented by Microsoft in the Fall of 2022. The Duo implementation moves this requirement from the fall to July 5th.
 
A question that often follows the Gmail send mail as question is regarding the use of Application Passwords from Microsoft to allow the Gmail send mail as feature to work. Again, Montana State University’s Microsoft 365 configuration will not support the use of Application passwords.