Technology Services is moving the university’s multifactor authentication from Duo to Microsoft Authenticator. Starting October 19, users will begin to see the new secure sign-in portal by Microsoft Authenticator. All Illinois users will eventually need to make the switch, but users will be phased in over time starting on October 19.
Make the switch as soon as you can. Setting up Microsoft Authenticator now, on your own schedule, helps you avoid interruptions. When you receive the first Microsoft Authenticator prompt, you will have 14 days to complete the move. You can choose “snooze” to postpone setup each time you authenticate during the 14-day period. Complete setup before the 14-day deadline to avoid disruption to your account access. After the 14 days, you’ll be required to complete Microsoft MFA enrollment before you can access university services.
How to set up Microsoft Authenticator
Follow the step-by-step guide to enrolling in Microsoft Authenticator in our Answers KnowledgeBase.
Add a second authentication method
Besides Microsoft Authenticator, it is recommended to have a second method of Multifactor Authentication. This backup method keeps you from getting locked out if your first method fails, or if you lose or replace your phone. It’s also a best practice to have two methods, according to the Cybersecurity and Infrastructure Security Agency and Microsoft.
We recommend a passkey or YubiKey security key as another method. Setting up a second authentication method now is the most reliable way to stay signed in. If you are ever unable to access your primary method, the second one will already be in place.
FAQ
Why is the university replacing Duo?
Microsoft Authenticator is part of the Microsoft 365 suite the university already uses, and it aligns with our password-less strategy.
What other methods can I use instead of Microsoft Authenticator?
Passkeys and YubiKey security keys are also supported.
Why do I need two methods?
A second method is your backup. If you lose your phone, get a new one, or forget your device, you can still sign in. Using two methods is also a best practice recommended by the Cybersecurity and Infrastructure Security Agency and Microsoft.
Where can I get help?
Contact the IT Service Desk for assistance.