Service Summary

Two-Factor Authentication (2FA) for Office 365 incorporates the use of the Duo 2FA tool when logging into Office 365 services, and adds an additional layer of security to all applications in employee Office 365 accounts including email, calendar, Microsoft Teams, OneDrive for Business, and Microsoft 365 Apps for Enterprise. It enables users to qualify for advanced services that are part of the Office 365 suite as they become available.

As part of this request, you will automatically be granted access to Microsoft Teams and be given the option to request access to Windows Virtual Desktop .

This service is not available for MasonLive or generic accounts.

Key Features

2FA uses two factors to verify you are who you say you are when accessing Office 365 services. 2FA makes your personal information less vulnerable and helps prevent anyone but you from accessing your accounts, even if they know your Patriot Pass Password.

  • The first factor (something you know) is the verification of the Mason NetID and Patriot Pass Password, and
  • The second factor (something you have) is generally a smartphone, but other options are available

7-Day Remember Me Option

Select this option to bypass the request for your second factor on the same device and application for seven days.

Getting This Service

To request this service, click the Request 2FA for Office 365 button above. In the future, this will be required for all Mason employees.

Requirements

  • 2FA Enrollment: Prior to enrolling in 2FA for Office 365 you must be enrolled in Duo Two-Factor Authentication (2FA) for Mason
  • Compatibility: Email clients and applications must support “modern authentication” – the web-based login used by Office 365 that provides a standard login experience regardless of application or type of device
  • 2nd Factor Options: Only Duo Push and Passcode (e.g. via Duo Mobile, printed bypass code, or Yubikey) options are available for Office 365 applications. Voice Callback and SMS Text are not available for any Mason 2FA applications except the 2FA Account Management Application at https://2faaccount.gmu.edu. See List of 2FA Authentication Options

 

Confirm Readiness for 2FA for Office 365

Prior to requesting 2FA for Office 365, ensure you are ready for the transition. Enabling the service may include resetting your email account on your desktop or mobile device to activate the service or changing to a supported Office 365 email client.

Web Browser 
Mobile Devices 
  • Outlook Mobile App for Android and Apple iOS (SUPPORTED)
  • Android Mail Client (NOT SUPPORTED)
    • This application is not compatible with the authentication requirements for 2FA
    • To receive Mason email and calendar on your Android device, use the Outlook Mobile App
  • Apple iOS Mail Client (NOT SUPPORTED)
    • Compatibility: Apple iOS 12 or higher
    • If you already have your email account set up on your iOS device, after enrolling in 2FA for Office 365, you must REMOVE your current Mason email account and re-add the account on that device
Desktop
  • Mac Outlook Desktop Client (SUPPORTED)
    • Compatibility: Office 2016 or higher is required
    • 2FA Prompt will appear the next time the application checks for your password.
    • You may need to reenter your password and 2FA multiple times in a row as your account refreshes. If there is an issue, you will need to delete and re-add your account in Outlook.
  • Windows Outlook Desktop Client (SUPPORTED)
    • Compatibility: Office 2016 or higher is required
    • 2FA Prompt will appear the next time the application checks for your password
    • You may need to reenter your password and 2FA multiple times in a row as your account refreshes. If there is an issue, you will need to delete and re-add your account in Outlook.
  • Mac Apple Mail (NOT SUPPORTED)
    • Apple Mail may work with 2FA and Office 365 for computers running OSX 10.14 (Mojave) or newer
    • You may have to perform additional steps to set this up, including deleting and re-installing your email account within the application
  • Thunderbird/Gmail/Other Clients (NOT SUPPORTED)
    • These are not compatible with 2FA, as they do NOT support the technology Microsoft requires for 2FA

Availability

This service is available 24/7, excluding planned outages, normal maintenance windows, and unavoidable events. Maintenance windows are Sundays from 7 to 11 a.m. but may be extended to 2 p.m., if needed. If maintenance is required outside of these hours, it will be announced on the Alerts & Bulletins page.