Duo logo  

 

Duo is a form of two-factor authentication that uses a mobile device, phone, passcode or token to verify that the person logging into your account is actually you. Duo adds a second layer of defense against unauthorized logins to your NetID account.

Multifactor authentication protects access to your NetID accounts even if your password is guessed or stolen.  Duo increases the security of university systems, data, and resources. Duo protects against cybercrimes and identity theft

All faculty, staff, and students are required to enroll in Duo.

Duo is used to log in to all things requiring a NetID.

UIT recommends using Duo Mobile app Push Notification method for best performance.

Visit the UIT How-To page to view the Adding new devices or manage existing devices

No. While using the Duo Mobile app is the suggested method of using Duo, it is not required.
You can have a passcode sent as an SMS message to your cell device, or you can have Duo call a phone number and provide the passcode. Visit the Duo Authentication methods page for more information on how to authenticate.

You can also use a landline (desk or home phone) or tablet. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, a landline and a hardware token, two different mobile devices, etc. Visit the UIT How-To page and click on the Duo icon for more instructions.

There is a self enroll button on the Duo homepage. This button will direct you to the enrollment page. For instructions about setup after enrolling, you can view this How-To video.

Duo won't work if you are connected to mobile data or a non-MSU VPN like SurfShark or NordVPN. Try disconnecting from these and trying again before contacting the Service Desk.

If someone other than you signs you up for your Duo account, you will be required to provide visual, live confirmation that you are who is actually associated with your account in order to switch it to your devices/update your account. Contact the Service Desk to get this process started.

For different browsers, you will need to authenticate with Duo at least once per browser. Some applications will require you to do it again, depending on the level of security needed.

When you log in, you can check a box to have Duo remember you for 8 hours, and you won't have to redo your authentication for that browser for 8 hours.

Duo authentication will not be necessary to logon to Student Labs computers.  However, accessing email via web or other services that use Duo authentication after logon to the computer will still require Duo authentication.

Duo authentication will not be necessary to logon to work computers.  However, accessing email via web or other services that use Duo authentication after logon to the computer will still require Duo authentication.

Once you authenticate into the Office application or O365 web access you will have access to any mailboxes you have delegated permissions on without having to authenticate again

It is recommended that multiple devices be setup to authenticate with Duo in case one is lost or forgotten. If you do not have access to another device and you are unable to authenticate, please call the UIT ServiceDesk at 406-994-1777 for assistance with a temporary passcode.

Absolutely! In fact it is recommended to have at least two devices enrolled. This could be your mobile device and your office phone.

A frequent issue after enrolling in Duo is the change in how the email client is required to authenticate. The preferred method is using the Microsoft Outlook app for mobile devices. Alternatively, removing the email account from the device and re-adding often solves the issue. This article, Changes coming for the way you might be connecting to your MSU email provides additional information about the change in connecting to your MSU Microsoft email account.

After enrolling in Duo, Gmail’s send as feature will no longer function due to this feature not supporting Modern Authentication with Montana State University’s Microsoft 365 email. Google has, to date, not implemented support the OAuth2 modern authentication protocol for this feature. Its lack of support for this industry standard is not something within the control of the university.
 
The change from basic authentication to modern authentication has been on Microsoft’s roadmap for several years and will be fully implemented by Microsoft in the Fall of 2022. The Duo implementation moves this requirement from the fall to July 5th.
 
A question that often follows the Gmail send mail as question is regarding the use of Application Passwords from Microsoft to allow the Gmail send mail as feature to work. Again, Montana State University’s Microsoft 365 configuration will not support the use of Application passwords.