How to use Duo 2FA for Office

What is Duo 2FA?

Passwords are essential for security and privacy, but they are often not enough. Two-factor authentication requires something you know (your Clemson password) and something you have (like a mobile phone, tablet, or the Duo smart phone app) as an added layer of security to prevent anyone else from accessing your account. Two-factor authentication is the most effective method of account takeover prevention, helping to protect both you and the Clemson community.

Why do I need Duo on my email and Office 365 account? 

Implementing Duo on Office 365 and email can help prevent unauthorized access to your email and files, even if your password has been compromised. Sophisticated phishing attacks that successfully steal your credentials can automatically log in to your Office 365 account from the attacker’s location. The attacker would be unable to complete the Duo authentication and your Office 365 account would be protected from compromise.

Will this affect what email client I can use?

The support clients are as follows:

*Applications with limited support using ActiveSync technology (basic authentication) will be phased out in the future. Please make plans to use a supported email client to avoid losing email functionality.

When will I get the Duo prompt for Office 365? 

You should only be prompted for Duo authentication when not connected to a Clemson wired, wireless (eduroam), or VPN network and attempting to connect to an Office 365 application or email for the first time via phone, tablet, or computer. You may also be prompted for Duo if your device has not recently connected to an on-campus network. Some legacy clients that do not support Duo authentication will not prompt you and you can continue using them as normal.

What happens if I get the Duo prompt and I’m on-campus and not trying to log in to my email or an Office 365 app? 

If you receive a Duo authentication prompt (push or text) on your device without logging into a corresponding service that requires Duo, decline the Duo prompt (marking it as fraud) and immediately change your Clemson password. This is an indication that your credentials have been compromised and attackers are attempting to log in to your Duo-protected account. Contact the CCIT Service Desk for further instructions.  

For more information email ITHELP@clemson.edu or call 864-656-3494.