On Friday, August 20, 2021, your Office 365 (O365) email accounts will begin using UCLA single sign-on (SSO) with multi-factor authentication (MFA). This means your UCLA Logon ID (jbruin@ucla.edu) will now be utilized when signing into your email accounts. You will still continue to use your departmental email address (jbruin@dept.ucla.edu) when sending and receiving email.
Reason for Email MFA
This is a critical initiative, as we have seen active exploits of email accounts across the UC system. Email MFA will add a layer of protection to our accounts to prevent these activities from occurring.
What to Know
We are working to implement Email MFA across campus starting with the ITS managed Office 365 environment.Email MFA uses Duo Single Sign-On (SSO) Two-Factor Authentication to verify the identity of users attempting to access any Office 365-managed application, such as Outlook, OneNote, or OneDrive.You will be required to authenticate your Office 365 account with SSO only the first time you log onto a new device or when you change the password for your account.Email MFA will go live for your account on 8/20/21, as you have passed an examination for any conflicts.
What to Expect
Your Office 365 accounts will be converted to use SSO overnight on Thursday 8/19/21. This will mean that you will see a change in how you access Office 365 on Friday morning.
What to Do
Pre-migration steps (Thursday, 8/19, at end of day): Log out of Office 365, OneNote, and OneDriveBe aware that your SSO will be enabled for Office 365 by the morning on 8/20/21.Sign in to OWA (portal.office.com) as a first step in the morning to ensure that you can access Office 365 email and calendaring immediately.Follow the instructions on the Office365 MFA Implementation website for steps to configure access on each of your devices (laptop/workstation, smartphone, tablet).Remember to use your UCLA Logon ID (jbruin@ucla.edu) where indicated in the instructions.Additional documentation can be found in our Knowledge Base: Multi-Factor Authentication for Email.
Resources
If you experience email access issues that you are unable to troubleshoot using the support documentation, the IT Support Center will be available via email at help@it.ucla.edu or phone at (310) 267-HELP (4357). Support analysts will address questions, resolve if possible, and route to other teams as needed for further assistance. Our after-hours phone support service will be available to assist you 24/7.
Helpful Links:
Refer to the links below for more information about accessing Outlook for Web and migrating Windows, macOS, iOS, and Android applications to use Single Sign-On.
Tip: If you have problems accessing your Outlook email on Windows or macOS, remember that you can always access Outlook for Web (see the first link below).
Outlook for Web
How to log into Outlook for Web using Single Sign-OnMicrosoft Windows
How to migrate Microsoft Outlook for Windows to use Single Sign-OnHow to migrate Mozilla Thunderbird for Windows to use Single Sign-OnmacOS (Macintosh)
How to migrate Microsoft Outlook for macOS to use Single Sign-OnHow to migrate the Apple Mail application to use Single Sign-OnHow to migrate Mozilla Thunderbird for macOS to use Single Sign-OniOS (iPhone/iPad)
How to migrate the iOS Mail app to use Single Sign-OnHow to migrate Microsoft Outlook for iOS to use Single Sign-OnAndroid (Smartphones and Tablets)
How to migrate the native Android Email app to use Single Sign-OnHow to migrate Microsoft Outlook for Android to use Single Sign-On
Frequently Asked Questions (FAQs):
Why are emails sent to my uclalogonid@ucla.edu email address now being delivered to my departmental email Inbox instead of my Google Apps for UCLA mailbox (e.g. uclalogonid@g.ucla.edu)?Email message routing may change for some users after the migration. Please refer to the following KB article for more information about changes in message routing:Emails sent to my uclalogonid@ucla.edu email address are now delivering to my departmental Inbox I am trying to migrate Microsoft Outlook 2016 for Windows to use Single Sign-On and I am stuck at the “Add Account” window (step #7d). How can I complete this process?Please be sure to follow the directions step-by-step on How do I migrate Microsoft Outlook for Windows to use Single Sign-On. Make sure that the email address you enter at step #7d is your departmental email in the following format: username@dept.ucla.edu. If you continue to have problems at this step please contact your local IT department for assistance. I was able to create a new profile in Outlook for Windows, however, I am still getting prompted to enter my old username/password. How can I fix this?Please be sure to follow the directions step-by-step. If you are absolutely sure you have followed the directions and are still having problems, it could be an issue with a cached credential (Windows) or a credential stored in your Keychain (macOS). Please contact your local IT department for further assistance. My email client is still working even though I didn’t set up a new profile. What should I do?This occurs because some email clients will maintain an open session with the server for a period of time. We highly recommend following the steps in the KB articles in order to avoid a surprise interruption of service in the future. How can I tell if my account has been successfully migrated?Follow the instructions found at How to log into Outlook for Web using Single Sign-On. If you sign in successfully using Single Sign-On (UCLA Logon ID and Password), your account has been migrated. The issue I am having is not listed in the articles found at the MFA for Email knowledge base. What should I do?If you cannot find a resolution to your issue at the MFA for Email knowledge base, please contact your local IT department for further assistance. Why are we doing this? And why now?The Office of the Chief Information Security Officer (OCISO) is working on deploying a number of initiatives aimed at further protecting the systems, data, and reputation of UCLA.One important initiative involves the implementation of an Email Multi-Factor Authentication (MFA) solution, which will improve the security of our Office 365 accounts. This is a critical initiative, as we have seen active exploits of email accounts across the UC system. Email MFA will add a layer of protection to our email accounts to prevent these types of activities from occurring.