UVU is implementing new passwordless login options for students and employees in an effort to increase security and simplify the login process. Below you will learn how to opt-in and set up the Microsoft Authenticator app that will be used to approve logins to your UVU account through your mobile device.
This article will also address other passwordless options that will automatically sign you into UVU applications and websites after logging in to a UVU-owned device such as a work or lab computer.
Solution
Opt-in to Start Using Passwordless Authentication
If you have not already done so, complete this form to opt-in to start using passwordless authentication. Employees MUST opt-in to start using passwordless authentication so that they do not continue to receive DUO prompts.
Set Up the Microsoft Authenticator Mobile App and Enable Passwordless Sign-In
You should see a prompt to Improve your sign-ins by setting up the Microsoft Authenticator app. Click Next and follow the prompts to set up the Authenticator app and enable passwordless sign-in.
If you are not prompted after signing in, follow the steps below:
Set Up the Microsoft Authenticator App and Enable Passwordless Sign-In
The Microsoft Authenticator app helps you sign in to your accounts when you're using two-factor verification. Two-factor verification enables you to use your accounts more securely because passwords can be forgotten, stolen, or compromised. Two-factor verification uses a second factor like your phone to make it harder for other people to break into your account.
Follow this video tutorial or the written instructions below to download and set up the Microsoft Authenticator app for passwordless sign-in.
Download the Microsoft Authenticator App and Add Sign-In Method
To start, go to https://my.uvu.edu and click on your user in the top right corner, then click on Manage Sign-In Methods.
Click on Add Method, select Authenticator app from the dropdown menu, then click Add.
Download the Microsoft Authenticator Mobile App from your phone app store. Click Next.
Follow the instructions on the prompt and click Next.
If you have not already done so, open the authenticator app and click on Add account, then select Work or school account. Scan the QR code with your phone.
Within the Authenticator app, click on your UVU account and choose Enable/Setup phone sign-in.
Click Continue to register your device. You will need to log in again on your device and complete Multi-Factor Authentication. This does not manage your device but registers it in the Microsoft system to help prevent fraudulent access.
When logging in again on your computer, choose Use an app instead.
You will see a number on your computer and be prompted to enter that number on your phone. Moving forward, you may now use the Microsoft Authenticator app when signing into your account.
Explore Other Passwordless Options
Setting up one of the passwordless options below will not only simplify the login process but should also automatically sign you in to UVU applications and websites on UVU-owned devices such as lab or work computers. ⚠ Before proceeding below, make sure you have opted-in to start using passwordless authentication and that you have downloaded and set up the Microsoft Authenticator mobile app as described above.
Windows Hello for Business (Staff & Faculty Only)
Windows Hello for Business lets users register their account on their Windows computer and login using just a fingerprint, facial recognition, or a PIN.
⚠ This option is for employees only on UVU computers used by a single person. If more than one employee uses the same UVU-owned device, IT Security recommends the Yubikey option.
Complete Windows Hello Enrollment to Register Your Device
Connect your device to the campus network. Please note, your device MUST be on campus when first enrolling. Once the computer is enrolled, Windows Hello will work on-campus or off-campus.
Right-click on the Windows icon in the bottom left corner. Navigate to Settings > Accounts > Sign-In options > Windows Hello PIN and select Add. Alternatively, you may type Sign-In options into your Windows search bar.
To start Windows Hello Enrollment, click OK and sign in to your UVU account.
Set a PIN and click OK to enroll your device. Your PIN should be a minimum of 6-digits but can be as long as preferred. This PIN is only valid on this computer and should NOT be the same as the user password. ONLY use this PIN on this device.
After setting the PIN, the user’s device must sync with Azure AD before enrollment is complete. This can take up to one hour. After the device has been enrolled, the user’s login screen will change from asking for a password to asking for a PIN.
After enrolling, the user may navigate back to Settings > Accounts > Sign-In options to add a fingerprint reader or an infrared (IR) camera that is compatible with Windows Hello. Please note the list below is NOT an exhaustive list of compatible devices. To confirm if you’re webcam or fingerprint reader is compatible, attempt to add the device.
Windows Hello Cameras:
Lenovo 500 FHD Webcam (Available via the Computer Shop)
Logitech Brio Ultra HD Webcam (Available via the Computer Shop)
Dell UltraSharp Webcam (WB7022)
Windows Hello Fingerprint Readers:
Lexar Jumpdrive Fingerprint Reader
Kensington VeriMark Reader
DigitalPersona Reader
Verifi P5100
YubiKey (Most Secure)
A YubiKey is a FIDO2 security token or peripheral device that provides the most secure form of passwordless authentication. It can be used for browsers, applications, and even signing into labs and classroom computers. The YubiKey is compatible with both Near field communication (NFC) and USB, which means that in classrooms with an NFC reader, logging in can be as easy as a single tap.
⚠ To proceed with this guide, you MUST purchase a FIDO2 security token. While there are many options, the least expensive and recommended option that supports USB and NFC readers is the Security Key. These keys will be available at the UVU Campus Store or on amazon.com.
To register your Yubikey, follow this video tutorial or the written instructions below.
Register Your YubiKey Security Token
Sign in to my.uvu.edu, click on your user icon in the top right corner, and click Manage Sign-In Methods.
Click on Add Method, then select the Security Key option from the dropdown menu.
Click Next and sign in to your UVU account.
Choose USB device, then set a PIN.
Name your device, pick a unique name to help distinguish it from other keys.
When logging in, click Sign-in options, then choose Sign in with Windows Hello or a security key.
Enter your PIN, click Next, and touch your device sensor to finish the login process.