As a student or faculty/staff member at Southern Illinois University Carbondale, you have access to a variety of services and resources that cyber-criminals also want. To keep the campus community digitally secure, SIUC adopted Multi-Factor Authentication (MFA) in 2020. Now, we are updating the MFA tool that we use from DUO to Microsoft Authenticator.
Microsoft Authenticator operates exactly as you are already used to. Periodically, when you login to certain SIU systems or access specific resources, you will be prompted to verify your identity. Instead of using DUO and entering a three-digit code, you will use Microsoft Authenticator and enter a two-digit code. This new tool has the additional benefit in which you can choose to setup passwordless sign-in for your SIU account. If you are accessing an SIU resource, this would allow you to simply enter your email address and verify your identity via the randomized code; this is particularly beneficial since SIU passwords are required to be longer in length and can be more difficult to remember.
To get started with Microsoft Authenticator, view the information below. If you need assistance, please contact SalukiTech at 618-453-5155 or salukitech@siu.edu.
Note: Regardless of the instructions you follow below, please do NOT remove the DUO app from your mobile device at this time. During the transition period, there may still be services that require you to use DUO until the campus has been entirely transitioned. We will update this page again when DUO can be uninstalled.
Prepare for the Change
Switch Today!
If you don't opt in early...
Schedule
FAQ's
1. In your browser, go to the Microsoft Security Info webpage. (If prompted, sign in with your SIU credentials). 2. Click on Add Sign-in Method.
3. Click on the Choose a Method drop-down menu and select Authenticator app
4. Click Add.
5. You will be prompted to download/install the Microsoft Authenticator app on your mobile device. Click the blue, hyperlinked words: Download Now.
Note: If you have Microsoft Authenticator already installed, you can skip Steps 5-6.
6. A new window will appear with two seperate QR codes (one for Apple/iOS devices and one for Androids). Scan the QR code that matches your device.
Note: If you are unable to scan the QR code, click the corresponding "Get the app" button beneath the QR code that matches your device.
7. Once installed, open the Microsoft Authenticator app on your mobile device.
8. In the top right corner of the screen, tap the "+" icon to add a new account.
9. Select the Work or School Account option.
10. Select the Scan a QR Code option.
Note: You may need to choose "Allow" to grant Microsoft Authenticator access to use your camera (in order to scan the QR code).
11. In your browser, click Next to begin your account setup.
12. A QR code that is specific to your SIU account will appear on screen. Using the Microsoft Authenticator app, scan the QR code.
13. A notification will briefly appear on your phone that says "Account added successfully." Once you have received this notification, the words Southern Illinois University and your SIU email address will be listed in the Microsoft Authenticator app.
After you have successfully completed these steps, your SIU account is prepared for the transition to Microsoft Authenticator. Once it is pushed out across campus, you will be able to start using the Microsoft Authenticator app without needing to complete these initial setup steps; you will automatically be ready.
If you decide that you want to get even more of a head start and begin using the app now, follow the instructions under the "Switch Today" section whenever you are ready (between now and the scheduled transition dates)!
Switching to Microsoft Authenticator now will prevent interruptions in your access to SIU resources and services in the future.
Although we are mindful of class schedules and other university needs, there is a possibility that the transition schedule will lead to temporary disruptions, as users will be required to setup Microsoft Authenticator at the time that the transition occurs. Completing these steps now means that the scheduled transition will have no impact on you—your setup will already be complete! It is for this reason that (although not required), we highly encourage you to complete the setup now.
To get started...
1. Complete this brief form confirming that you would like to begin using Microsoft Authenticator early. Within an hour of submitting the form, your SIU account will be switched to the new Microsoft Authenticator verification process wherever it is possible. This means that you will be signed out from all SIU services/resources that require your credentials. Upon signing in again, you will be prompted to verify your identity using the Microsoft Authenticator app.
To setup the Microsoft Authenticator app and begin using it...
Note: if you previously completed the steps under the "Prepare for the change," section, skip to Step 18.
2. Wait a few minutes after submitting the form in Step 1. Then, in your browser, go to office.siu.edu.
3. Sign-in with your SIU credentials. You will be prompted to provide more information (as shown in the screenshot below).
4. Click Next.
5. You will be prompted to download/install the Microsoft Authenticator app on your mobile device. Click the blue, hyperlinked words: Download Now.
Note: If you have Microsoft Authenticator already installed, you can skip Steps 5-6.
6. A new window will appear with two seperate QR codes (one for Apple/iOS devices and one for Androids). Scan the QR code that matches your device.
Note: If you are unable to scan the QR code, click the corresponding "Get the app" button beneath the QR code that matches your device.
7. Once installed, open the Microsoft Authenticator app on your mobile device.
8. In the top right corner of the screen, tap the "+" icon to add a new account.
9. Select the Work or School Account option.
10. Select the Scan a QR Code option.
Note: You may need to choose "Allow" to grant Microsoft Authenticator access to use your camera (in order to scan the QR code).
11. In your browser, click Next to begin your account setup.
12. A QR code that is specific to your SIU account will appear on screen. Using the Microsoft Authenticator app, scan the QR code.
13. A notification will briefly appear on your phone that says "Account added successfully." Once you have received this notification, the words Southern Illinois University and your SIU email address will be listed in the Microsoft Authenticator app.
14. In your browser, click Next to pair your account. A randomly generated number will appear on screen.
15. In the Microsoft Authenticator app, enter the randomly generated number shown in your browser. Select Yes to submit the code.
16. If the number was entered correctly, your Microsoft Authenticator setup will be complete! The screen in your browser should look like the one in the image below. Click Next.
17. In your browser, click Done. You will be redirected to Outlook.
18. (If you already setup the app and skipped Steps 2-17, you now need to go to office.siu.edu in your browser). The Microsoft Authenticator app will prompt you for a code. Enter the code as shown in your browser to verify your identity and login to Outlook.
...don't worry! This simply means that when the date for your scheduled transition arrives, you will be prompted to setup Microsoft Authenticator at that time. This is when you will need to follow the steps outlined below.
1. When attempting to sign-in with your SIU credentials, you will be prompted to provide more information (as shown in the screenshot below).
2. Click Next.
3. You will be prompted to download/install the Microsoft Authenticator app on your mobile device. Click the blue, hyperlinked words: Download Now.
Note: If you have Microsoft Authenticator already installed, you can skip Steps 5-6.
4. A new window will appear with two seperate QR codes (one for Apple/iOS devices and one for Androids). Scan the QR code that matches your device.
Note: If you are unable to scan the QR code, click the corresponding "Get the app" button beneath the QR code that matches your device.
5. Once installed, open the Microsoft Authenticator app on your mobile device.
6. In the top right corner of the screen, tap the "+" icon to add a new account.
7. Select the Work or School Account option.
8. Select the Scan a QR Code option.
Note: You may need to choose "Allow" to grant Microsoft Authenticator access to use your camera (in order to scan the QR code).
9. In your browser, click Next to begin your account setup.
10. A QR code that is specific to your SIU account will appear on screen. Using the Microsoft Authenticator app, scan the QR code.
11. A notification will briefly appear on your phone that says "Account added successfully." Once you have received this notification, the words Southern Illinois University and your SIU email address will be listed in the Microsoft Authenticator app.
12. In your browser, click Next to pair your account. A randomly generated number will appear on screen.
13. In the Microsoft Authenticator app, enter the randomly generated number shown in your browser. Select Yes to submit the code.
14. If the number was entered correctly, your Microsoft Authenticator setup will be complete! The screen in your browser should look like the one in the image below. Click Next.
15. In your browser, click Done. You will be redirected to Outlook.
16. The Microsoft Authenticator app will prompt you for a code. Enter the code as shown in your browser to verify your identity and login to Outlook.
The Office of Information Technology will migrate students, faculty, and staff in small groups (based on the first letter of your last name). This will occur Tuesday through Thursday during the weeks listed below:
Students
Migration Dates
Last Names starting with A-F
3/5/2024-3/7/2024
Last Names starting with G-M
3/19/2024-3/21/2024
Last Names starting with N-Z
3/26/2024-3/28/2024
Faculty and Staff
Migration Dates
Last Names starting with A-F
4/2/2024-4/4/2024
Last Names starting with G-N
4/9/2024-4/11/2024
Last Names starting with O-Z
4/16/2024-4/18/2024
Frequently Asked Questions
Why is this change being made? To reduce overall costs to the university and minimize complexity in the logon experience, SIU is moving to Microsoft MFA. Duo has been a great partner with SIU for almost a decade, but since the addition of faculty and staff in 2020/2021, Microsoft has been the mechanism behind the scenes that prompts most users for Duo MFA.
Why do we use Multi-Factor authentication? SIU, like many other academies and organizations, is under constant cyber threat. Adding MFA to active faculty, staff, and students in 2020/2021 has helped reduce account compromise immensely. We will continue to follow industry standards and best practices to protect the SIU community.
During setup, I'm prompted for a phone number or device I no longer have access to. What do I need to do? Please contact SalukiTech at 618-453-5155 or start a live chat with us on the SalukiTech website (during business hours). We are able to remove this phone number or device from your account so that you can complete the MFA setup.
How often will I need to do this? Adding your device should be a one-time occurrence, or when you need to change phones.
I’m being prompted for Duo once per week – will that continue? Our current settings prompted for MFA once per week in Duo. In this change we will be reducing this to every 28 days instead.
Can I still use SMS texting or a phone call? For security purposes, we have removed the phone call options and heavily discourage the use of SMS texting for the second factor. We encourage you to try the Microsoft Authenticator application as that is easy to use and convenient since most people carry a mobile device nearly all the time. We have other hardware options (see below) that can be used if you do not want to use your mobile device.
What is the recommended alternative if I cannot, or wish to not, use a mobile application like Microsoft Authenticator? A hardware token like a Yubikey which easily plugs into your USB port on a computer or phone (NFC) can be used. You can buy/bring your own FIDO2 token and connect it to your account following these instructions:
I already have a Yubikey or Duo token from SIU: can I still use this? Unfortunately, the technology is not the same and you will need a new token or FIDO2 capable Yubikey. SIU-issued devices can be exchanged at SalukiTech in Morris Library on the 1st floor. Please call SalukiTech at 618-453-5155 or use the live chat option on this webpage (available during our business hours) so we can be sure a token is ready for you to pick up.
Has this been done before? Yes. During Fall 2023 all alumni and retirees began using Microsoft Authenticator for services in which they needed extra verification.
