Multifactor Authentication FAQs
Right now, students and employees use Duo to authenticate across systems such as my.sc.edu, myaccount.sc.edu and PeopleSoft. Beginning Feb. 12, 2020, UofSC students and employees will need to use Duo in order to access Outlook, OneDrive, Microsoft Teams, and Azure Cloud.
Multifactor authentication (MFA), sometimes referred to as two-step or two-factor authentication, is an overly technical-sounding term for a very simple solution. Think of it as “password plus.” It operates on the assumption that just because someone knows your password, that doesn’t necessarily mean they are who they claim to be. It is an easy way to make sure that the only one using your credentials is you. It also helps prevent data breaches.
MFA is currently being used by UofSC students, faculty and staff for sites like my.sc.edu, PeopleSoft and myaccount.sc.edu. The Division of Information Technology will be turning on MFA for certain Office 365 applications for additional security.
MFA adds an additional layer of protection to your accounts and the data you access through them. Because MFA requires something only you have, if your password gets stolen, it will be much more difficult for someone to access your account and subsequently compromise university data.
On February 12, 2020, MFA will be turned on for Outlook, OneDrive, Microsoft Teams and Azure Cloud.
- Microsoft Teams
- Azure Cloud
iPhone owners who use the Mail app that was installed on the phone at the time of purchase may need to re-add their account in order to be compatible with the modern authentication. Users can also download the free Outlook for email app. Instructions are available here.
- Open Outlook client
- Select the Outlook icon for the UofSC mailbox
- Select the 3-line icon (upper left corner)
- Select Settings icon (the gear symbol in the lower left corner)
- Select the email account associated with Office 365
- Go to the Sync Contacts setting and turn it on (right slide button)
- Exit the settings screen back to the email account and messages to resume use
Yes. Duo is still the provider of MFA services for the University of South Carolina system.
Users can set a time-out schedule that allows your device to remember your credentials for 30 days. When you are asked to authenticate, click on check box that says, “Remember me for 30 days.” You will automatically be asked to reauthenticate after 30 days have passed.
If you receive a Duo authentication prompt (push, text, or phone call) on your device without logging into a corresponding service that requires Duo, decline the Duo prompt and immediately change your UofSC password. This means that your credentials have been compromised and attackers are attempting to login to your Duo-protected account. Contact the Service Desk at 803-777-1800 for further instructions.
If you have already registered for Duo services, the only thing you need to do is make sure your computer is using the latest version of Office 365 (2016 or higher). Instructions on how to update your computer are available here or you can call the Service Desk at 803-777-1800 for assistance.
Due to security restrictions of older devices, individuals using an iPhone that is older than an iPhone 5s or an iPad that is older than a 5th generation will not be able to use the email app on their devices. Instead, they must open an internet browser and check email at outlook.office365.com.
Android users may not be able to use Touchdown or other mail applications that comes automatically installed with their phone. It is suggested that they download the free Outlook app in order to view email and work calendar(s) on their phones. For detailed instructions, click here.
To register for Duo:
- Install the Duo Mobile app on your smartphone
- Log in to myaccount.sc.edu and select Update Account Settings. Log in using your Network Username and password, answer your security question, and then select the Multifactor tab
- Enter your mobile phone number, select mobile, choose your platform, then press submit
- Select Activate beside your mobile phone number. A QR code will be displayed. (You will scan this code in a later step.)
- Open the Duo Mobile app on your smartphone
- On the app, press + at the top of the screen
- Scan the QR code displayed on your computer
You’re enrolled! Students, faculty and staff will use Duo Mobile for websites with confidential information and for Office 365 applications such as Outlook for Email.
Computers should be updated to the latest version of Office 365 (2016 or higher) in order to be compatible with the MFA process. Instructions on how to update your computer are available here or you can call the Service Desk at 803-777-1800 for assistance.
Certain devices and software are NOT compatible with the MFA process. A full list of all compatible devices and softwareis available for review.
It depends. Due to security restrictions of older devices, individuals using an iPhone that is older than an iPhone 5s or an iPad that is older than a 5th generation will not be able to use the email app on their devices. Instead, they must open an internet browser and check email at outlook.office365.com. Android users will need to use the Outlook app or an internet browser to check email on their devices. The minimum requirements for mobile devices are listed below:
The apple environment requires (recommended minimums):
- Mail on iOS 11 or higher
- iPhone 5s or newer (with iOS12.4.3 or higher)
- iPad 5th generation or newer
- or Outlook for Apple client
The Android environment requires:
- Outlook for Android
PC environment requires:
- Office 365 Professional
Users can also use Outlook Web Access (web client for email) in lieu of the above, if their devices do not meet the minimum requirements.
We strongly urge you to download the free Duo Security app on your smart phone. It is fast, convenient, and the most secure way to verify your identity. Instructions can be found here. The app uses very little data. The data used to receive roughly 500 Duo pushes is equivalent to loading only one webpage on your smartphone.
Not much at all. Users can set a time-out schedule that allows your device to remember your credentials for 30 days. When you are asked to authenticate, click on check box that says, “Remember me for 30 days.” The overall goal is to ensure that the person logging in is a legitimate user while at the same time, not being overly burdensome.
Duo offers multiple options to meet your needs when traveling. You may be able to use your regular Duo two-factor option if you need to log in to a two-factor protected system while traveling. Or you may, however, need to use alternative options depending on your preferred option and your travel plans.
- Plan options. Before your trip, plan which Duo options you will use and enroll in them if needed
- Enroll additional devices. If possible, enroll two devices in case your primary device is unavailable (lost, stolen, not available, dead battery, malfunctioning, etc.)
- Remember the IT Service Desk. Contact the IT Service Desk at 803-777-1800 if you need assistance
If you don’t have a mobile phone, you can use a home or work phone to access a Secure Authentication passcode through the Call Me feature. Any phone used for this purpose must be a direct line uniquely assigned to you. Make sure the number is one you can access quickly to receive the phone call providing a single-use passkey.