Office 365 MFA Implementation


On Friday, August 20, 2021, your Office 365 (O365) email accounts will begin using UCLA single sign-on (SSO) with multi-factor authentication (MFA). This means your UCLA Logon ID ( will now be utilized when signing into your email accounts. You will still continue to use your departmental email address ( when sending and receiving email.


Reason for Email MFA

This is a critical initiative, as we have seen active exploits of email accounts across the UC system. Email MFA will add a layer of protection to our accounts to prevent these activities from occurring.


What to Know

  • We are working to implement Email MFA across campus starting with the ITS managed Office 365 environment.
  • Email MFA uses Duo Single Sign-On (SSO) Two-Factor Authentication to verify the identity of users attempting to access any Office 365-managed application, such as Outlook, OneNote, or OneDrive.
  • You will be required to authenticate your Office 365 account with SSO only the first time you log onto a new device or when you change the password for your account.
  • Email MFA will go live for your account on 8/20/21, as you have passed an examination for any conflicts.


What to Expect

Your Office 365 accounts will be converted to use SSO overnight on Thursday 8/19/21.  This will mean that you will see a change in how you access Office 365 on Friday morning.


What to Do

  • Pre-migration steps (Thursday, 8/19, at end of day): 
  • Log out of Office 365, OneNote, and OneDrive
  • Be aware that your SSO will be enabled for Office 365 by the morning on 8/20/21.
  • Sign in to OWA ( as a first step in the morning to ensure that you can access Office 365 email and calendaring immediately.
  • Follow the instructions on the Office365 MFA Implementation website for steps to configure access on each of your devices (laptop/workstation, smartphone, tablet).
  • Remember to use your UCLA Logon ID ( where indicated in the instructions.
  • Additional documentation can be found in our Knowledge Base: Multi-Factor Authentication for Email.



If you experience email access issues that you are unable to troubleshoot using the support documentation, the IT Support Center will be available via email at or phone at (310) 267-HELP (4357). Support analysts will address questions, resolve if possible, and route to other teams as needed for further assistance. Our after-hours phone support service will be available to assist you 24/7.


Helpful Links:

Refer to the links below for more information about accessing Outlook for Web and migrating Windows, macOS, iOS, and Android applications to use Single Sign-On.

Tip: If you have problems accessing your Outlook email on Windows or macOS, remember that you can always access Outlook for Web (see the first link below).

Outlook for Web

Microsoft Windows

macOS (Macintosh)

iOS (iPhone/iPad)

Android (Smartphones and Tablets)


Frequently Asked Questions (FAQs):

  • Why are emails sent to my email address now being delivered to my departmental email Inbox instead of my Google Apps for UCLA mailbox (e.g.
  • I am trying to migrate Microsoft Outlook 2016 for Windows to use Single Sign-On and I am stuck at the “Add Account” window (step #7d). How can I complete this process?
  • I was able to create a new profile in Outlook for Windows, however, I am still getting prompted to enter my old username/password. How can I fix this?
    • Please be sure to follow the directions step-by-step. If you are absolutely sure you have followed the directions and are still having problems, it could be an issue with a cached credential (Windows) or a credential stored in your Keychain (macOS). Please contact your local IT department for further assistance.
  • My email client is still working even though I didn’t set up a new profile. What should I do?
    • This occurs because some email clients will maintain an open session with the server for a period of time. We highly recommend following the steps in the KB articles in order to avoid a surprise interruption of service in the future.
  • How can I tell if my account has been successfully migrated?
  • The issue I am having is not listed in the articles found at the  MFA for Email knowledge base. What should I do?
  • Why are we doing this?  And why now?
    • The Office of the Chief Information Security Officer (OCISO) is working on deploying a number of initiatives aimed at further protecting the systems, data, and reputation of UCLA.
      One important initiative involves the implementation of an Email Multi-Factor Authentication (MFA) solution, which will improve the security of our Office 365 accounts. This is a critical initiative, as we have seen active exploits of email accounts across the UC system. Email MFA will add a layer of protection to our email accounts to prevent these types of activities from occurring.