Office 365 MFA Implementation
Important Changes to Email Accounts — Adding Authentication
On 8/20/2021, selected Office365 email accounts will begin using UCLA’s Single Sign-On (SSO) authentication method. Please note that this will require you to update configurations on your devices to make this change.
Who does this apply to?
Note: If your account is included in the 8/20/21 change, you'll have received an email from David Shaw - CISO notifying you of the upcoming change.
Refer to the links below for step-by-step instructions and more information about accessing Outlook for Web and migrating Windows, macOS, iOS, and Android applications to use Single Sign-On.
Tip: If you have problems accessing your Outlook email on Windows or macOS, remember that you can always access Outlook for Web (see the first link below).
Outlook for Web
- How to migrate Microsoft Outlook for Windows to use Single Sign-On
- How to migrate Mozilla Thunderbird for Windows to use Single Sign-On
- How to migrate Microsoft Outlook for macOS to use Single Sign-On
- How to migrate the Apple Mail application to use Single Sign-On
- How to migrate Mozilla Thunderbird for macOS to use Single Sign-On
- How to migrate the iOS Mail app to use Single Sign-On
- How to migrate Microsoft Outlook for iOS to use Single Sign-On
Android (Smartphones and Tablets)
- How to migrate the native Android Email app to use Single Sign-On
- How to migrate Microsoft Outlook for Android to use Single Sign-On
Frequently Asked Questions (FAQs):
- Why are emails sent to my email@example.com email address now being delivered to my departmental email Inbox instead of my Google Apps for UCLA mailbox (e.g. firstname.lastname@example.org)?
- Email message routing may change for some users after the migration. Please refer to the following KB article for more information about changes in message routing:
Emails sent to my email@example.com email address are now delivering to my departmental Inbox
- I am trying to migrate Microsoft Outlook 2016 for Windows to use Single Sign-On and I am stuck at the "Add Account" window (step #7d). How can I complete this process?
- Please be sure to follow the directions step-by-step on How do I migrate Microsoft Outlook for Windows to use Single Sign-On. Make sure that the email address you enter at step #7d is your departmental email in the following format: firstname.lastname@example.org. If you continue to have problems at this step please contact your local IT department for assistance.
- I was able to create a new profile in Outlook for Windows, however, I am still getting prompted to enter my old username/password. How can I fix this?
- Please be sure to follow the directions step-by-step. If you are absolutely sure you have followed the directions and are still having problems, it could be an issue with a cached credential (Windows) or a credential stored in your Keychain (macOS). Please contact your local IT department for further assistance.
- My email client is still working even though I didn’t set up a new profile. What should I do?
- This occurs because some email clients will maintain an open session with the server for a period of time. We highly recommend following the steps in the KB articles in order to avoid a surprise interruption of service in the future.
- How can I tell if my account has been successfully migrated?
- Follow the instructions found at How to log into Outlook for Web using Single Sign-On. If you sign in successfully using Single Sign-On (UCLA Logon ID and Password), your account has been migrated.
- The issue I am having is not listed in the articles found at the MFA for Email knowledge base. What should I do?
- If you cannot find a resolution to your issue at the MFA for Email knowledge base, please contact your local IT department for further assistance.
- Why are we doing this? And why now?
The Office of the Chief Information Security Officer (OCISO) is working on deploying a number of initiatives aimed at further protecting the systems, data, and reputation of UCLA.
One important initiative involves the implementation of an Email Multi-Factor Authentication (MFA) solution, which will improve the security of our Office 365 accounts. This is a critical initiative, as we have seen active exploits of email accounts across the UC system. Email MFA will add a layer of protection to our email accounts to prevent these types of activities from occurring.
For a complete list of Multi-Factor Authentication (MFA) for Email knowledge base articles, please visit the MFA for Email knowledge base.