Getting ready to make the switch from Duo to Microsoft Authenticator? Read through these tips so you know what to expect and what things might need to be dealt with after the switch.
...
Duo: Do I save it or ditch it after I move to Microsoft Authenticator?
It’s probably best to keep Duo on your phone at least through the summer while Central IT irons out any wrinkles that come up before fall semester. Once Central IT announces their deadline for switching over, you’ll know all the wrinkles have been dealt with. LIT will let you know the deadline once we get word.
Test any and all sign-in sites you need for your work. If all work great with Microsoft and you feel confident you don’t need Duo anymore, feel free to get rid of it.
Zoom: Do you use Zoom? (Ha!)
You might need to clear the cache in your web browser before using SSO for Zoom so it will let go of your old Duo credentials and use your Microsoft credentials instead.
Also, remember to sign out of Zoom when you are done if you are using a shared computer anywhere in the library.
Phone stuff: Do you use your smartphone to check your email or look things up in Box or Airtable, etc.?
Clear the cache in your web browser on your phone before switching if possible.
It might take a few times of signing into USU sites before your phone recognizes this is going to be a regular thing you do and it relaxes its security stance. There might also be settings on your phone you can change to make things work better, but you might need to figure that part out on your own - LIT is amazing, but we don’t know every smartphone configuration out there and can only help so much.
Apple Watch: Have an Apple Watch and want to use it instead of your iPhone?
☹️ Sorry. That option is not available at this time. An Apple update to watchOS made it impossible to keep the Authenticator app compliant with Microsoft security standards so they had to remove the app from the Apple Store earlier this year. There is hope, however - if Apple updates their watchOS to meet security standards again, Microsoft might rebuild their Authenticator app for Apple Watch in the future.
Duo currently still has an Apple Watch option, but rumor has it they will also be dropping that option sometime this year for similar reasons. So, holding on to the Duo app on your Apple Watch won’t help you for much longer.
Security keys (aka fobs): Don’t have a smartphone? Need a security key instead?
LIT is currently testing security keys to make sure they will work properly with our systems. If a smartphone is not an option for you, please hold off on making the switch until we have finished our testing and can help you get the correct security key.
Need an alternative way to authenticate: Having a hard time authenticating in time? Follow these instructions:
After the authentication in browser/app displays the 2-digit number
Click the first line of blue text:I can't use my Microsoft Authenticator app right now
If the previous windows has already timed out ( 1minute ), you can click the Enter a security code instead
Click “Use a verification code”
Open the Microsoft Authenticator app
Navigate to the Authenticator tab
Click the USU profile
Enter the 6-digit number under “One-time password code” into your browser/app that asks for “Enter Code”
Click Verify
...