Breadcrumbs

How to Set Up Passwordless Authentication

Published Date:

Description

UVU is implementing new passwordless login options for students and employees in an effort to increase security and simplify the login process. Below you will learn how to opt-in and set up the Microsoft Authenticator app that will be used to approve logins to your UVU account through your mobile device.

This article will also address other passwordless options that will automatically sign you into UVU applications and websites after logging in to a UVU-owned device such as a work or lab computer.

Solution

Opt-in to Start Using Passwordless Authentication

  1. If you have not already done so, complete this form to opt-in to start using passwordless authentication. Employees MUST opt-in to start using passwordless authentication so that they do not continue to receive DUO prompts.

Set Up the Microsoft Authenticator Mobile App and Enable Passwordless Sign-In

  1. After opting in, sign in to my.uvu.edu.

  2. You should see a prompt to Improve your sign-ins by setting up the Microsoft Authenticator app. Click Next and follow the prompts to set up the Authenticator app and enable passwordless sign-in.

    When prompted to Improve your sign-ins click Next and follow the prompts to set up the Microsoft Authenticator app and enable passwordless sign-in. If you are not prompted, follow the instructions below to Set up the Microsoft Authenticator app and enable passwordless sign-in.

  3. If you are not prompted after signing in, follow the steps below:

Set Up the Microsoft Authenticator App and Enable Passwordless Sign-In

The Microsoft Authenticator app helps you sign in to your accounts when you're using two-factor verification. Two-factor verification enables you to use your accounts more securely because passwords can be forgotten, stolen, or compromised. Two-factor verification uses a second factor like your phone to make it harder for other people to break into your account.

Follow this video tutorial or the written instructions below to download and set up the Microsoft Authenticator app for passwordless sign-in.

Download the Microsoft Authenticator App and Add Sign-In Method

  1. To start, go to https://my.uvu.edu and click on your user in the top right corner, then click on Manage Sign-In Methods.

    Once signed into my.uvu.edu click on your profile icon in the top right corner and select Manage Sign-In Methods from the dropdown menu.

  2. Click on Add Method, select Authenticator app from the dropdown menu, then click Add.

    Screenshot of the Add method button.

  3. Download the Microsoft Authenticator Mobile App from your phone app store. Click Next.

    Download the Microsoft Authenticator app on your mobile device and then click Next.

  4. Follow the instructions on the prompt and click Next.

    When installing or opening the authenticator app if prompted, allow notifications. Within the app select add account and then select Work or School account.

  5. If you have not already done so, open the authenticator app and click on Add account, then select Work or school account. Scan the QR code with your phone.

    When prompted scan the QR code with your phone.

  6. Within the Authenticator app, click on your UVU account and choose Enable/Setup phone sign-in.

    Select your UVU account within the Authenticator app and select enable or setup phone sign-in

  7. Click Continue to register your device. You will need to log in again on your device and complete Multi-Factor Authentication. This does not manage your device but registers it in the Microsoft system to help prevent fraudulent access.

    Screenshots of enable phone sign-in prompts

  8. When logging in again on your computer, choose Use an app instead.

    When signing into my.uvu.edu select Use an app instead when prompted for your password.

  9. You will see a number on your computer and be prompted to enter that number on your phone. Moving forward, you may now use the Microsoft Authenticator app when signing into your account.

    When prompted, enter your authentication number into the Authenticator app.

Explore Other Passwordless Options

Setting up one of the passwordless options below will not only simplify the login process but should also automatically sign you in to UVU applications and websites on UVU-owned devices such as lab or work computers.
⚠ Before proceeding below, make sure you have opted-in to start using passwordless authentication and that you have downloaded and set up the Microsoft Authenticator mobile app as described above.

Windows Hello for Business (Staff & Faculty Only)

Windows Hello for Business lets users register their account on their Windows computer and login using just a fingerprint, facial recognition, or a PIN.

⚠ This option is for employees only on UVU computers used by a single person. If more than one employee uses the same UVU-owned device, IT Security recommends the Yubikey option.

Complete Windows Hello Enrollment to Register Your Device

  1. Connect your device to the campus network. Please note, your device MUST be on campus when first enrolling. Once the computer is enrolled, Windows Hello will work on-campus or off-campus.

  2. Right-click on the Windows icon in the bottom left corner. Navigate to Settings > Accounts > Sign-In options > Windows Hello PIN and select Add. Alternatively, you may type Sign-In options into your Windows search bar.

    Screenshot of Sign-in options window.

  3. To start Windows Hello Enrollment, click OK and sign in to your UVU account.

    Click ok to proceed with Windows enrollment.
    Approve sign-in through the Microsoft Authenticator app.

  4. Set a PIN and click OK to enroll your device. Your PIN should be a minimum of 6-digits but can be as long as preferred. This PIN is only valid on this computer and should NOT be the same as the user password. ONLY use this PIN on this device.

    Set your pin which should be a minimum of 6-digits, reenter that pin in the Confirm PIN field and press OK.

  5. After setting the PIN, the user’s device must sync with Azure AD before enrollment is complete. This can take up to one hour. After the device has been enrolled, the user’s login screen will change from asking for a password to asking for a PIN.

    Log in to your Windows account by entering your PIN you previously set.

  6. After enrolling, the user may navigate back to Settings > Accounts > Sign-In options to add a fingerprint reader or an infrared (IR) camera that is compatible with Windows Hello. Please note the list below is NOT an exhaustive list of compatible devices. To confirm if you’re webcam or fingerprint reader is compatible, attempt to add the device.

    1. Windows Hello Cameras:

      1. Lenovo 500 FHD Webcam (Available via the Computer Shop)

      2. Logitech Brio Ultra HD Webcam (Available via the Computer Shop)

      3. Dell UltraSharp Webcam (WB7022)

    2. Windows Hello Fingerprint Readers:

      1. Lexar Jumpdrive Fingerprint Reader

      2. Kensington VeriMark Reader

      3. DigitalPersona Reader

      4. Verifi P5100

YubiKey (Most Secure)

A YubiKey is a FIDO2 security token or peripheral device that provides the most secure form of passwordless authentication. It can be used for browsers, applications, and even signing into labs and classroom computers. The YubiKey is compatible with both Near field communication (NFC) and USB, which means that in classrooms with an NFC reader, logging in can be as easy as a single tap.

⚠ To proceed with this guide, you MUST purchase a FIDO2 security token. While there are many options, the least expensive and recommended option that supports USB and NFC readers is the Security Key. These keys will be available at the UVU Campus Store or on amazon.com.

To register your Yubikey, follow this video tutorial or the written instructions below.

Register Your YubiKey Security Token

  1. Sign in to my.uvu.edu, click on your user icon in the top right corner, and click Manage Sign-In Methods.

    Once signed into my.uvu.edu click on your profile icon in the top right corner and select Manage Sign-In Methods from the dropdown menu.

  2. Click on Add Method, then select the Security Key option from the dropdown menu.

    Screenshot of Add method button.
    After selecting Add method, select Security Key from the dropdown menu.

  3. Click Next and sign in to your UVU account.

    Click Next and then proceed to sign in to your account.

    1. Choose USB device, then set a PIN.

      When prompted select USB device and set your Security PIN.

  4. Name your device, pick a unique name to help distinguish it from other keys.

    Give your security key a unique name.

  5. When logging in, click Sign-in options, then choose Sign in with Windows Hello or a security key.

    When signing into my.uvu.edu select the Sign-in Options button and select Sign in with Windows Hello or a security key.

  6. Enter your PIN, click Next, and touch your device sensor to finish the login process.

    Enter your Security Key PIN and click Next to complete sign in.

Contact Support

If you were unable to resolve your issue using the provided solution, please contact the Service Desk.