Overview
If you currently use Duo Mobile on your phone to approve UIC sign-ins and want the simplest way to transition to Microsoft MFA, we recommend setting up Microsoft Authenticator.
Microsoft Authenticator gives you several ways to securely sign in with your UIC account, including:
- Passkey – Sign in using your phone's face recognition, fingerprint, or PIN without entering your UIC password.
- Push notification – Receive a notification on your phone, enter the two-digit number displayed on the sign-in screen, and approve the request.
- One-time passcode – Enter the verification code displayed in Microsoft Authenticator when another method is unavailable.
If you want a straightforward replacement for the way you currently use Duo Mobile, Microsoft Authenticator provides all three options in a single app.
Table of Contents
Before You Begin
Have the following available:
- Your smartphone
- Your UIC email address and password
- Access to the Apple App Store or Google Play Store
Important: Do not delete Duo Mobile while UIC is transitioning services to Microsoft MFA. Duo may still be required to access some university services during the transition.
Set Up Microsoft Authenticator
- Install Microsoft Authenticator (aka.ms/mobileauthenticator) on your phone from the Apple App Store or Google Play Store.
- When first opening the Authenticator app, decide whether to share additional data to Microsoft and select Continue.
- Select Add Work or School account in the Authenticator app to continue.
- Sign in to your UIC account, verifying your identity with Duo.
- On the following screen in the Authenticator app, select Continue.
Note: you will not see Passkey listed if your device is below Android 14 or iOS 17. You can still proceed with the setup of the other Authenticator methods.
- If you are prompted to do so, enable Autofill and Push Notifications for the Authenticator app. The Authenticator app will generate your MFA configuration and then show you an Account Added screen. Select Done.
- Visit aka.ms/mfasetup to confirm your new methods are listed.
[SCREENSHOT: Security Info showing Microsoft Authenticator methods]
Use Microsoft Authenticator
After Microsoft Authenticator is set up, the UIC login process may present different authentication options depending on what you are signing in to and which device you are using.
Passkey Authentication
A UIC passkey stored in Microsoft Authenticator is tied to your device. Instead of entering your UIC password and then completing a separate MFA prompt, the passkey can securely verify your identity using your phone and its face recognition, fingerprint, or PIN.
Note: A passkey in Microsoft Authenticator is stored on the phone where you created it. It cannot sync to your other devices.
Using Your Passkey on Your Phone
-
Open the university application or website you want to use and begin signing in with your UIC account.
-
If you are not automatically prompted to use your passkey, select Other ways to sign in or Sign-in options, and then select Face, fingerprint, PIN, or security key.
-
Select the passkey associated with your UIC account.
-
Verify your identity using the method requested by your phone, such as face recognition, fingerprint, or your device PIN.
-
After your identity is verified, the sign-in completes automatically.
Using Your Authenticator Passkey on Another Computer
You can also use the passkey in Microsoft Authenticator to sign in on another computer, such as a classroom, computer lab, or shared computer.
Note: Cross-device passkey sign-in requires Bluetooth and an internet connection on both the phone and the computer. The devices must be near each other, but they do not need to be connected to the same network.
-
On the computer, begin signing in with your UIC account.
-
If necessary, select Other ways to sign in or Sign-in options, and then select Face, fingerprint, PIN, or security key.
-
When asked where your passkey is located, select Use a phone, tablet or security key.
-
A QR code will appear on the computer. Scan the QR code using your phone.
-
Follow the prompts on your phone to use the passkey and verify your identity using face recognition, fingerprint, or your device PIN.
Push Notification
If you are on logging in on another device, you can use the Push notification option instead. This is most similar to the Duo Mobile experience.
- When you log in, you may be prompted to use a passkey; simply Cancel that prompt.
- You will then need to choose to use your password
- After entering your password, you will be provided a list of options to verify your identity. Select Approve a request on my Microsoft Authenticator app.
- A two-digit number will appear on the device where you are signing in. Open Microsoft Authenticator on your phone, enter the number shown on the sign-in screen, and approve the request.
One-Time Passcode
If you cannot use a passkey or receive a push notification (for example, if you don't have internet connection on your phone), you may be able to use the one-time verification code displayed in Microsoft Authenticator.
- When you log in, you may be prompted to use a passkey; simply Cancel that prompt.
- You will then need to choose to use your password
- After entering your password, you will be provided a list of options to verify your identity. Select Use a verification code.
- Open Microsoft Authenticator on your phone, find the One-time password code, and enter that code on the login screen.
Traveling or have limited connectivity? Microsoft Authenticator can generate one-time verification codes without an internet connection or cellular service.
How Is This Different from Duo?
If you currently approve Duo notifications on your phone, Microsoft Authenticator can feel familiar. Both applications allow your phone to be used to verify your identity.
There are a few important differences:
- Microsoft Authenticator will ask you to enter a two-digit number before approving a push notification.
- Microsoft Authenticator can store a passkey that allows you to sign in using your phone's face recognition, fingerprint, or PIN.
- Microsoft Authenticator can generate a one-time passcode that can be used even when your phone does not have an internet connection.
Which Method Should I Use?
When you have a choice, we recommend using the following order:
-
Passkey – Recommended when using your phone
Use your Microsoft Authenticator passkey when on your phone. Passkeys provide a fast, phishing-resistant way to sign in.
-
Push notification
If a passkey is not available, use the Microsoft Authenticator notification and enter the two-digit number displayed during sign-in.
-
One-time passcode
Use the verification code in Microsoft Authenticator when the other methods are unavailable, especially when your phone does not have an internet connection.
Should I Remove Duo?
No, not yet. During UIC's transition to Microsoft MFA, some university services may continue to use Duo.
Keep Duo Mobile installed and continue to use it whenever a university application specifically asks you to authenticate with Duo.
Want to Use Something Other Than Microsoft Authenticator?
You are not required to use Microsoft Authenticator as your Microsoft MFA method.
UIC also supports other authentication options, including synchronized passkeys stored in password managers and device-bound passkeys such as Windows Hello.
For information about the available options and instructions for setting them up, see How do I get started with Microsoft MFA?
Related Articles