From Duo to Microsoft MFA

After careful consideration, the University of Illinois System has decided not to renew its contract with Duo and will instead move to Microsoft Multi-factor Authentication (MFA) by March 2027.

 

This transition introduces passkeys – a faster and more secure way of logging in without a password – representing a significant improvement to both client experience and account security. This page serves as your central resource for the migration to Microsoft MFA.

What is happening?

UIC is beginning its transition from Duo 2FA to Microsoft multifactor authentication (MFA).

When is this happening?

As of Wednesday, September 23, Technology Solutions has updated how Duo integrates with the university’s authentication system. As a result, you will see an additional UIC login screen before the Duo authentication prompt. Preview the updated sign-in experience in What do the official university login pages look like?.

Throughout the Fall 2026 semester, Technology Solutions will transition students, faculty, and staff, including UI Health employees, to Microsoft MFA in phases. When it is your turn to transition, you will receive a notification and have two weeks to register for Microsoft MFA. You will continue to have access to Duo during this transition period.

UIC VPN users: The UIC VPN currently requires Duo authentication. Microsoft MFA support will be added later this semester. Duo access will not be removed until the VPN supports Microsoft MFA.

Why is this happening?

We recognize that the UIC community has experienced several significant technology changes recently, including the transition from Gmail to Microsoft Exchange; moving from Blackboard to Canvas; and the transition to Zoom Phone. The decision to transition to Microsoft MFA was made with these other changes in mind.

Moving to Microsoft MFA provides several benefits:

  • Improved security: Microsoft MFA supports modern authentication methods, including passkeys, which provide stronger protection against phishing and credential theft.
  • A simpler sign-in experience: Passkeys can provide a faster and easier way to securely access university resources.
  • Reduced costs: Microsoft MFA is included in the university’s existing Microsoft agreement, eliminating the need to maintain a separate Duo contract.
  • Greater integration: Using Microsoft MFA more closely aligns authentication with the university’s Microsoft services and security tools.

Learn more about Microsoft MFA, authentication options, and passkeys in What do I need to know about Microsoft MFA?.

What do I need to do?

No action is required right now.

Technology Solutions will contact you directly when it is time to transition and provide your individual registration deadline and instructions.

If you would like to start using Microsoft MFA now, you can enroll early by following the instructions in How do I get started with Microsoft MFA?.

The registration process is designed to be quick and straightforward, and you will continue to have access to Duo while you transition.

In batches over the course of the Fall 2026 semester, Technology Solutions will prompt students, faculty, and staff to register for Microsoft MFA. Each individual will have two weeks to complete their registration in Microsoft MFA and will maintain access to Duo during the transition. More details will be shared in the coming weeks.