What is Duo MFA?
Duo Multi-Factor Authentication (MFA) adds an extra verification step when you sign in to your University of Montana Microsoft 365 account. Even if someone learns your password, they can't get into your account without approving the Duo request on your device. This helps protect against phishing and password theft.
Is Duo MFA required for me?
The Information Security Office (ISO) requires Duo MFA for Microsoft 365 accounts that:
- Belong to certain job roles
- Have elevated access
- Are used for higher-risk or regulated work
If MFA is required for you, ISO will notify you directly.
If it isn't required, you can still opt in. Individual employees and departments can request it for some or all of their staff at no charge.
How to request Duo MFA for Microsoft 365
Before you start, make sure you are already enrolled in Duo for your NetID.
- Open the service request: Opt-In Duo Multi-Factor Authentication (MFA) for Microsoft 365.
- Enter your UM Microsoft account UPN (your UM email address, in the format first.last@umt.edu).
- Submit the request. ISO reviews requests on business days and will enroll your account.
Departments can use the same request to protect some or all of their staff. Submit one request and enter the UPN for each employee.
What to expect after enrollment
Once your account is enrolled, you will see a Duo prompt when you sign in to any Microsoft 365 service. You can approve it with the Duo Mobile app, a phone call, or a passcode. Duo can remember trusted devices for a limited time, so after setup most sign-ins take only a few extra seconds.
Step 1. Enter your UM account username and password.
Figure 1: Signing in with your UM username and password.
Step 2. Approve the Duo request.
Figure 2: Approving the Duo request.
Need help?
Contact the UM IT Helpdesk or the UM Information Security Office.
See also: