Guide to moving from DUO to Microsoft Authenticator MFA

To streamline account support, the college is moving current students and employees from Duo to Microsoft Authenticator for Multi-Factor Authentication (MFA). 

On Tuesday, Oct. 28, the option to use Microsoft Authenticator will be turned on for all college accounts. 

On Tuesday, Dec. 2, Duo will be turned off, and Microsoft Authenticator will be required for MFA. 

All students and employees currently using Duo must manually review and update their Microsoft Authenticator sign-in methods between Oct. 28 and Dec. 2. 

How to review your Microsoft Authenticator settings

  1. In a web browser on any device, navigate to: https://aka.ms/mfasetup and log in with your college email and password.
  2. When prompted to Verify your identity, select Approve with HVCC Duo.
    Microsoft login Verify your Identity screen
  3. Respond to the Duo verification as you normally would.
  4. You should now be on the My Sign-Ins Security Info page.
    • If for some reason you have not been directed to this page, please select Security Info from the left side menu.
      Microsoft Security Info Menu
  5. On the Security Info page, all accounts will have the Password method by default. You may have Phone or Microsoft Authenticator sign-in options already set up. Please take the time to confirm that those are correct. You may change or delete existing sign-in options.
    Microsoft Security Info Sign-ign Methods
  6. If you do not have any additional methods set up or would like to add more, you may proceed in these instructions to add Microsoft Authenticator app or add a Phone text or call sign-in methods.

How to add Microsoft Authenticator app as a sign-in method

If you would like use the Microsoft Authenticator app as a sign-in method (recommended if you currently use the Duo app), before starting these instructions please go to your mobile device app store and download the free Microsoft Authenticator app from the Apple App Store or the Google Play Store.

We recommend following these instructions on a computer or tablet so that your mobile device is free to scan the QR code to connect.

Beginning from the Security Info page you accessed at that start of this guide:

  1. On the main page under Security Info, select + Add sign-in method.
    Microsoft Security Info Sign-ign Methods
  2. A pop-up window will display a list of authentication options. For this guide, select the third option down the list, Microsoft Authenticator
    • Add a sign-in method list of options
  3. Select Next through the prompts until you are at the QR Code prompt.
    • Note: If you are using the same mobile device to set this up as you will be using for the Microsoft Authenticator app, you may select Can't scan image. This will display a code and URL for you to enter instead of scanning the QR code on step 8.
  4. Open the Microsoft Authenticator app on your mobile device.
  5. In the app, select the + icon at the top right of the app to add a new authentication key.
  6. Select Work or School account.
  7. Select Scan QR Code.
  8. The app will open your device's camera. Align the QR Code from your other device in the box on your camera.
    • Note: If you selected Can't scan image on Step 3, then now you should select the Enter code manually button below the camera box. Enter the code and URL.
  9. Select Finish.
  10. You will be returned to the home screen of the Microsoft Authenticator app where you will see your new authenticator key listed with your college email.

From now on, when signing into HVCC applications that previously required Duo, you will be prompted to verify your identity with one of your sign-in methods.

If you have multiple sign-in methods set up, you will be prompted to select the method you wish to use for MFA when you login.

How to add Phone text or call as a sign-in method

Before starting, please be sure that you will have reliable call or text access to the phone number you are setting up.

Beginning from the Security Info page you accessed at that start of this guide:

  1. On the main page under Security Info, select + Add sign-in method.
    Microsoft Security Info sign-in methods
  2. A pop-up window will display a list of authentication options. For this guide, select the Phone option from the list.
    Add a sign-in method list of options
  3. Enter your full 10 digit phone number
    Phone setup screen
  4. Choose how you wish to verify then select Next.
    • "Receive a code" will set this number up for text messages.
    • "Call me" will set this number up for voice calls.
  5. Microsoft will text or call your phone number with a verification code. Enter the code and select Next.
    Phone 6-digit verification screen
  6. Verification is complete!

From now on, when signing into HVCC applications that previously required Duo, you will be prompted to verify your identity with one of your sign-in methods.

If you have multiple sign-in methods set up, you will be prompted to select the method you wish to use for MFA when you login.

How to add a Hardware Token or Security Key as a sign-in method

If you already have a Duo token, IIT will be reaching out to you to move you to a new token. 

If you do not already have a token but require one please email helpdesk@hvcc.edu.