UNIVERSITY PARK, Pa. — Penn State IT is reminding students who have not enrolled in Microsoft Multifactor Authentication (MFA) to do so immediately at accounts.psu.edu/mfa to maintain safe, secure access to Penn State sites and services.

Microsoft MFA is replacing Duo as Penn State’s identity verification system. Enrollment in Microsoft MFA is mandatory for most students by May 8. Enrollment deadlines for other student groups and faculty and staff members are outlined below. Students not enrolled in Microsoft MFA by their deadline will not be able to register for classes, retrieve grades or access any secure University-affiliated sites and services such as Outlook email, Canvas and LionPATH until they enroll in Microsoft MFA.

• The Microsoft MFA enrollment deadline date for students in Penn State Dickinson Law, Penn State Law and Penn State School of International Affairs has been extended to May 17 to accommodate their two-week final exam period.
• Students in the College of Medicine will transition to Microsoft MFA along with the College’s faculty and staff members later this year. More information about the College of Medicine transitions will be provided later.
• Students and other Penn State Account holders traveling abroad this summer should enroll before their planned trip or by May 5, whichever comes first. The enrollment deadline for those currently abroad will be communicated to them via direct email after their return.
• Students graduating in May are not required to enroll.
• Faculty and staff members will also be required to enroll in Microsoft MFA and will be contacted by their unit IT department for transition dates and enrollment support. 

Enrolling in Microsoft MFA is easy and takes about 15 minutes. Go to accounts.psu.edu/mfa and click on the “Enroll in MFA” button to access the enrollment form and begin the enrollment process. Once you start the process, you will need to complete it, or you will be prompted to do so the next time you try to sign into your Penn State Account. 

After you add and register your MFA device(s), you will be able to select a verification sign-in method from a range of authentication options such as Microsoft’s Authenticator app, which is the preferred MFA method and is available via the App Store for iOS devices or Play Store for Android devices. Other sign-in methods include an alternate phone for calling or a security key/hardware token. Once enrolled, you will be prompted to verify your identity each time you log into a University-affiliated site or service through a notification sent to your enrolled device.

The new Microsoft MFA authentication is different from Duo, but its purpose and functionality remain the same. Although Microsoft MFA is the University’s primary authentication method moving forward, do not uninstall Duo now, as there may be some systems and services within the University that still require it. You may also be using Duo for other non-Penn State instances outside the University. 

Transitioning to Microsoft MFA enables the University to reduce costs by aligning with other Microsoft tools it’s already using, streamline service management and enhance Penn State’s security posture.  

Step-by-step enrollment instructions are available on the Knowledge Base at MFA: Microsoft Authenticator Enrollment. 

Frequently asked questions are available on the Knowledge Base at MFA: Common and Frequently asked questions about Microsoft MFA.

To learn more, visit MFA: Finding Help with Multifactor Authentication – Master List of Knowledge Base Articles.   

For help, contact the IT Service Desk via chat, submit a Get Help ticket, phone at (814) 865-4357, or email at ITservicedesk@psu.edu.