How Will Two-Step Login Work with Office 365?

Two-Step Login for Office 365 provides an additional layer of authentication to your email and Office 365 data. Currently, this added protection is required by some departments for their users and optional for others. In either case, it uses the verification method that you can enable at the Manage Your Two-Step Login site when you sign in to an Office 365 application.

Can I Choose which Office 365 Applications Use Two-Step Login?

No, once you opt in or are required to use it, Two-Step Login will be required for all Office 365 applications.

Which Clients Can I Use with Office 365 and Two-Step Login?

 Two-Step Login for Office 365 works with:

• Outlook and other Microsoft Office applications on:
  • Windows
  • macOS
  • iOS
  • Android
• Apple’s Mail and Calendar apps in:
  • MacOS 10.14 (Mojave) and later
  • iOS 11 and later
• Outlook on the Web (outlook.cornell.edu).

Can I Use Two-Step Login for Office 365 on the Web Only?

No. Limiting Two-Step Login to Office 365 on the web would allow an attacker to bypass Two-Step Login's extra protection simply by using a desktop or mobile client instead of web access.

Two-Step Login for More ADFS Applications

My area has an application that uses ADFS for login. Will my customers who opt in to use Two-Step Login with Office 365 also need to use it with my site? Will this be an option?

Two-Step Login will only apply to Office 365 and not any other service using ADFS. Other applications or websites integrated with the ADFS sign-in page will not be affected. CIT has not determined whether, or when, to extend Two-Step Login to other services using ADFS.