Two-Step Verification
 

Two-step verification is a proven way to protect your email account against the use of stolen passwords.Verify your identity with a device in your possession, commonly a mobile phone, as part of your HMS and Microsoft Office 365 login. If you are new to HMS you do not need to enable two-step for Office 365, it is automatically enabled for new users in March, 2020.  Existing HMS users will be opted in to two-step verification.

Learn more about two-step verification at an upcoming Two-Step Tech Talk. 
 

 

Requirements
  • You have an Office 365 email account 
  • You must be using a supported client (see below)

Desktop 

Mobile 

  • Microsoft Office 2016 for Windows or MacOS
  • Native mail client with MacOS 10.14+ (Mojave)
  • Microsoft Outlook from the iTunes or GooglePlay store
  • Native mail client with iOS 11.0+

For web-based access to email and Office 365, you must use a modern web browser. Mail clients that do not use the Outlook Web Access (OWA) protocol are not supported and will no longer work after the change is made. Email clients that utilize POP or IMAP protocols, such as Thunderbird, are not supported. Additionally, Microsoft is discontinuing support for POP and IMAP with O365 in October 2020.

 
Setup

Harvard University uses an application called DUO, that makes the two-step verification process quick and easy. 

 
What to expect after activating two-step for Office 365
  • Your work will not be interrupted when DUO two-step verification for Office 365 is enabled. If you are online and working in any of your O365 applications, you should not notice anything at the time we turn it on.
  • After we initially activate two-step, it typically takes 24 to 48 hours for you to notice any change, because your credentials will be cached. Using an incognito or private browsing window, or browser with cleared cache, should allow you to see the change immediately for web-based access to email (OWA) and O365 (e.g. OneDrive, Sharepoint).
  • Once activated, you can configure your desktop and mobile device.  Instructions to follow soon...
If you use: 
Then you can expect: 
The Office 365 website and apps (e.g. OneDrive, Teams, SharePoint) To occasionally see the Duo screen when you login
Microsoft Outlook (2013, 2016) app on your computer

To occasionally see the Duo screen when you login

Built-in Mail on your iPhone or iPad (iOS 11 or later) To occasionally see the Duo screen when you login. Note: When enabling Duo for Office 365, iOS devices will often require a removal and re-addition of the Harvard account from the phone in order to sync the account. This applies to devices running iOS 11 and above. The issue will present itself in the form of a credential pop-up screen.  Click here for more information on how to remove and re-add an exchange account from iOS devices.
Microsoft Outlook app on your mobile device (Android or iPhone)  To occasionally see the Duo screen when you login. Note: When enabling Duo for Office 365, iOS devices will often require a removal and re-addition of the Harvard account from the phone in order to sync the account. This applies to devices running iOS 11 and above. The issue will present itself in the form of a credential pop-up screen.  Click here for more information on how to remove and re-add an exchange account from iOS devices.
 
Training

Learn more about two-step verification at an upcoming Two-Step Tech Talk.