Use this article to quickly determine whether you're required to enroll in multi-factor authentication (MFA), and whether that's through Entra MFA or Duo MFA.
Detailed Information
Start Here
UMS is switching multi-factor authentication (MFA) from Duo MFA to Entra MFA. If you have used MFA before, you were most likely using Duo MFA.
MFA is one of the most effective ways to stop someone from breaking into your UMS account, even if they have your password. For more information, see What is Multi-Factor Authentication (MFA)?
Follow these 3 steps to find out what you need to do:
- Figure out what kind of account you have: a Student, an Employee (faculty/staff), a Person of Interest (POI), or an Other account (like a retiree or secondary account).
- Think about whether you already use Duo MFA to sign in. If you are not sure, see Am I Eligible for Duo Multi-Factor Authentication? and Am I Eligible for Microsoft Entra Multi-Factor Authentication? to check your eligibility for each.
- Find the box that matches you in "Find your population (visual guide)" below, and do what it says.
Find your population (visual guide)
Find the box below that matches you. Each box tells you exactly what to do.
🎓 STUDENT
Includes most student employees
Do you already use Duo MFA?
✅ YES
Nothing to do.
Keep using Duo MFA.
Student employee? If your job duties require Duo MFA (for example, certain IT or financial aid roles), follow the Employee box below instead.
💼 EMPLOYEE
Includes student employees whose job duties require Duo MFA
Do you already use Duo MFA?
✅ YES
Nothing to do.
Keep using Duo MFA.
🪪 PERSON OF INTEREST (POI)
Do you already use Duo MFA?
✅ YES
Nothing to do.
Keep using Duo MFA.
🗂️ OTHER ACCOUNT
Retirees or secondary accounts
Do you already use Duo MFA?
✅ YES
Nothing to do.
Keep using Duo MFA.
➖ NO
Not required.
You can optionally add the Microsoft Authenticator app right now, but not other Entra MFA options like passkeys. Follow Get Started with Microsoft Authenticator if you would like to enroll.
INFO: Some roles with access to certain sensitive UMS systems are required to enroll in Duo MFA even if your account type would otherwise make it optional. This can include some student employees. If you think this might apply to you, or you're still not sure which box matches your situation, contact the
IT Service Desk.
This table shows the same information as the boxes above, in a simple list.
| Who you are |
Already using Duo MFA? |
Required to enroll? |
What to do |
| 🎓 Student (most student employees) |
❌ No |
✅ Yes |
🔵 Set up Entra MFA. |
| 🎓 Student (most student employees) |
✅ Yes |
➖ Already meeting the requirement |
🟢 Nothing. Keep using Duo MFA. |
| 💼 Employee (including student employees whose job requires Duo MFA) |
❌ No |
✅ Yes |
🔵 Set up Duo MFA. |
| 💼 Employee (including student employees whose job requires Duo MFA) |
✅ Yes |
➖ Already meeting the requirement |
🟢 Nothing. Keep using Duo MFA. |
| 🪪 Person of Interest (POI) |
✅ Yes |
➖ Already meeting the requirement |
🟢 Nothing. Keep using Duo MFA. |
| 🪪 Person of Interest (POI) |
❌ No |
➖ Depends on role |
🟣 Check Duo eligibility, or ask your university contact or the IT Service Desk. |
| 🗂️ Other account (retiree, secondary account) |
❌ No |
➖ Not required |
🟡 Optional. Microsoft Authenticator app only. Set up Entra MFA if you want it. |
| 🗂️ Other account (retiree, secondary account) |
✅ Yes |
➖ Already meeting the requirement |
🟢 Nothing. Keep using Duo MFA. |
Next Steps
INFO: Still unsure? Contact the
IT Service Desk by phone or walk-up to confirm your specific status.
Additional resources
Environment
- Microsoft Entra
- Duo Security