IUP utilizes Microsoft Authenticator multi-factor authentication for users accessing online services.

Microsoft Authenticator LogoMulti-factor authentication (MFA) is a technology that requires the user to provide two or more verification factors to gain access to an application. Instead of asking only for a username and password, MFA requires one or more additional verification factors, which decreases the likelihood of a successful account compromise.

IUP has switched to Authenticator

IUP has switched from Duo to Microsoft Authenticator for multi-factor authentication. 

Since Monday, October 21, you will be prompted to use Microsoft Authenticator instead of Duo. 

  • Log in with any browser to any IUP computing services (MyIUP, D2L, email, etc.).
  • Enter your username (username@iup.edu) and password.
  • Next, the following screen will be displayed on your computer/device: Example of Authenticator sign in numbers
  • Open the notification from the Authenticator app on your phone. It will look like this:Example of Authenticator sign in request.
  • Enter the number that is displayed on the login screen into the Authenticator app and select Yes.

Why do I need this?

Passwords are easy to compromise. They can be stolen, guessed, or hacked—you might not even know someone is accessing your account.

Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Microsoft Authenticator, you'll be alerted right away (on your phone) if someone is trying to log in as you.

This second factor of authentication is separate and independent from your username and password.

How it Works

When accessing an IUP service, you will need to authenticate with Authenticator after you enter your credentials. When the prompt appears, you will automatically receive a notification to your devices. Enter the numbers shown on the sign-in screen in the Authenticator app.

When to Deny Pushes

If you are not trying to sign in when you receive an Authenticator notification, choose "No, it's not me" to stop the login. You might also want to reset your password. 

Because Authenticator requires you to enter the numbers on the sign-in screen, if you aren't trying to log in it is virtually impossible for the attacker to get access to your account. 

IT Services will never ask you to enter numbers into the Authenticator app. Anyone claiming to work for IT Services asking you to approve an authentication in the app is a scammer. 

Download Microsoft Authenticator

Tap the badge to download Authenticator to your device.
Download on the App StoreDownload on the Play Store

Instructions for Using Authenticator 

First-Time Setup

You must have claimed your account before proceeding with these instructions.

Newly admitted students and employees must claim their IUP computing accounts. Once you've claimed the account and the initial password is set, you will be able to access services such as MyIUP, email, and ihelp.

Once your account is ready, you'll receive an email with instructions on how to claim your account. If you did not receive the email, check your junk or spam folder. If you still cannot find it, contact IT Support for assistance.

  1. Download and install the Microsoft Authenticator app.
    • Visit the Apple App Store or Google Play store on your device and install the Microsoft Authenticator app. Download on the App StoreDownload on the Play Store

       

  2. On a device other than the one you want to add to Authenticator, go to https://my.iup.edu/ and sign in with your IUP email address and password. Enter your IUP email addressEnter your IUP password
  3. Next, you will see the "More Information Required" screen. Click Next. On the "More Information Required" screen, click next.
  4. On the Start by getting the app screen, click Next. Download the Authenticator app if you haven't already.On the "Start by getting the app" screen, click next.
  5. Go to the device where you installed Authenticator. Open the app and accept any license terms.
  6. If you already have accounts set up in the Authenticator app: click the + button in the top right, then Work or school account.
  7. Click Scan a QR Code.
  8. Back on your other device: on the Set up your account screen, click Next. On the "Set up your account" screen, click next.
  9. When the QR code appears, scan it with the Authenticator app on your phone. On the "Scan the QR code" page, scan the QR code with the Authenticator app on your phone.
  10. On the Let's try it out screen: On the "Let's try it out" screen, enter the two numbers shown into the Authenticator app on your phone.
    1. Two numbers will appear on your screen.
    2. Enter those two numbers into the Authenticator app on your device and press Yes.
  11. When you see Success!, click Done. Congratulations! You're ready to use Authenticator.
  12. Now you're ready to complete your first Authenticator approval. Enter the two numbers shown into the Authenticator app on your phone.
    1. Two numbers will appear on your screen.
    2. Enter those two numbers into the Authenticator app on your device and press Yes.

Congratulations! You've completed the Authenticator setup. Now you're ready to log in and keep your account secure.

Adding a second device

You can add up to five iOS,  iPadOS, or Android devices (that support the Microsoft Authenticator app) to your account. When you log in, all of your registered devices will receive the notification. Open the notification on whatever device is closest to you. 


  1. Download and install the Microsoft Authenticator app.
    1. Visit the Apple App Store or Google Play store on your device and install the Microsoft Authenticator app. Download on the App StoreDownload on the Play Store

       

  2. Open the Authenticator app and accept any license terms. 
    1. If you already use the Authenticator app for other accounts: click the + button in the top right, then Work or school account, then Sign in. 
    2. If you do not already use the Authenticator app for other accounts, click Add work or school account.
  3. Sign in with your IUP email address and password. 
  4. On the next screen, you will see a normal Authenticator request with two numbers. Enter those two numbers into the existing Authenticator app on your other device. 
  5. On the "Sign-in with your phone" screen, tap Continue, then Register. 

Congratulations! You've completed the Authenticator setup on your second device. Now you're ready to log in and keep your account secure, no matter what device you're using.

Managing your devices

If you need to remove a device that you have added, go to the Microsoft Security Info page portal. Click Delete next to the device you want to remove.

New Phone

If you have a new phone and do not have access to the old phone or a secondary device, please contact IT Support for assistance with adding the new phone. 

Lost/Forgotten/Stolen Devices

If you forgot the device you use for Authenticator at home, you can use a second device such as a tablet if you set it up previously. 

If you do not have a second device added, you will need to call the IT Support Center at 724-357-4000 to request a temporary access pass. 

If your device is lost or stolen, contact IT Support so that we can remove the device and prevent it from being used to access your account.