Skip to main content

Cornell University

IT@Cornell

Microsoft 365 and Two-Step Login

This article applies to: Two-Step Login

Microsoft 365 apps primarily use Microsoft Azure authentication. 

If you are installing Microsoft 365 apps on a new device or using a new browser to sign in to Outlook on the web, you may be asked to authenticate with Two-Step Login as well.

However, when you login to Microsoft 365, you can:

  • Check Don't show this again, and
  • Select Yes on the Stay Signed In screen. 

When you take these steps and use Microsoft 365 regularly, you will rarely if ever be asked to re-authenticate with either Microsoft Azure or Two-Step Login when using the same device or, in the case of Microsoft 365 web apps, browser.

Authentication Change Starting Tuesday, April 28, 2026

When this change was rolled out, people were prompted to authenticate with the Microsoft Authenticator instead of Duo as originally communicated. CIT security has rolled back the change to resolve the issue. Anyone who installed Microsoft Authenticator doesn’t need to uninstall it or take any actions, but if you are still experiencing login issues, please open a ticket. This change will be re-implemented at a later date.

On Tuesday, April 28, 2026, CIT will implement an updated, more secure version of Duo multi-factor authentication (MFA) for Microsoft applications on desktop and the web. This change enhances security for Cornell accounts by upgrading the Duo MFA protection that’s already required for all Microsoft apps.

After the change goes into effect, you will be prompted to sign-in and authenticate with the new version of Duo when opening apps such as Outlook, Teams, or OneDrive. 

Click Continue on the Verification Required window and authenticate with Duo as you normally would. 

Orange arrow pointing to "Continue" button on Duo Verification Required prompt.
Do not select “Other ways to sign in,” unless you use a Duo hardware token or have an approved exception to use phone or SMS authentication.

If you are using a personal device, check Don't show this again, and select Yes on the Stay Signed In screen.

If you are using a public or shared device, do not choose to stay signed in.

Comments?

To share feedback about this page or request support, log in with your NetID

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.