Action Required: Prepare for May 2026 MFA Change – Enroll in Microsoft MFA Now

Summary

This article covers the upcoming change from Duo to Microsoft MFA at Purdue University and how to enroll in preparation for the upcoming change.

Body

Audience

  • All users with a Purdue Career Account. Important: If you work for PARI, Purdue Global, or PRF employee, you also have a Purdue Career Account. This account is separate from and may have a different username than your PARI, Purdue Global, or PRF account.

Environment

  • Purdue Single Sign-On (SSO) applications such as:
    • SuccessFactors
    • Salesforce
    • myPNW
    • Purdue West Lafayette, Purdue Indianapolis, Purdue Northwest Brightspace
    • myPurdue
    • GoPFW
  • Microsoft MFA enrollment portal: My Sign-Ins | Security Info | Microsoft.com

Overview

Starting May 29th, 2026, Purdue University will adopt Microsoft Multi-Factor Authentication (MFA) for all Purdue University accounts system-wide. This change will:

  • Simplify the MFA process for all users by reducing the number of MFA processes at Purdue.
  • Eliminate the need for Duo Mobile for Purdue SSO applications.
  • Require Microsoft MFA enrollment for access to Purdue SSO-protected applications.

To prepare for the upcoming change from Duo to MFA, we strongly encourage setting up MFA for your Purdue Career Accounts and Service Accounts that are configured to use Duo, and Administrator accounts that access SSO.

Note: No action is required for users already enrolled in Microsoft MFA with their username@purdue.edu account.


Account Types and MFA Requirements

Account Type

 

Used For

 

MFA Method

 

Purdue Career Account

 

Purdue SSO Apps (SuccessFactors, Salesforce, myPNW, myPurdue, etc)

 

Microsoft MFA (required for Purdue SSO apps)

 

Purdue Global Account

 

Purdue Global applications (PG Brightspace, etc)

 

Duo Mobile (continues for PG-specific apps)

Important:

  • Purdue Global users will still use Duo for PG applications.
  • Purdue Indianapolis users will still be required to use Duo to access IU services.
  • When accessing Purdue SSO apps (e.g., SuccessFactors, Salesforce), PG users must authenticate with their Purdue Career Account using Microsoft MFA.

Action Required

First Time or Unenrolled Users

Note: No action is required for users already enrolled in Microsoft MFA with their username@purdue.edu account. If you can already log in with Microsoft MFA to applications like Office 365 with your Purdue account, you are already enrolled in MFA.

Please go to this article for more detailed instructions regarding setting up MFA: Article - How to set up Microsoft mul...

Below are instructions for enrolling in Microsoft MFA using your Purdue Career Account for the first time. Note: If you are a PARI, Purdue Global, or PRF employee, we strongly encourage opening a private/incognito browser and then following these instructions in that browser:

  1. Go to Microsoft Sign-ins at https://mysignins.microsoft.com/security-info.
  2. Sign in with your Purdue credentials:
    username@purdue.edu and Career Account password.
  3. After signing in, select Next when prompted for more information.
  4. Choose your MFA method:
    • Recommended: Microsoft Authenticator app
      • A free download link will be provided during enrollment, or visit the Google Play or Apple Store to download the application  
    • Alternative: Phone (SMS or Call).
  5. Complete the setup instructions.
    Next time you log into a Purdue SSO-protected application, you’ll be prompted for MFA verification.
  6. Configure additional methods from the Security Information page.
    Purdue recommends setting up at least two methods for recovery purposes.

Note: Hardware tokens must be configured by IT. See KB Article 524 for instructions: Article - How do I obtain a physical ...

Managing MFA

For users already set up with MFA, you can view your enrolled methods and manage them at https://mysignins.microsoft.com/security-info. Please refer to this KB Article for additional instructions:

Article - How to change Microsoft MFA...

This article is for users already set up with MFA that want to adjust their notification method when the preferred type of notification is unavailable:

Article - How do I Change my Default ...


Will the Login Process Change?

Yes. When logging into applications protected by Purdue SSO (e.g., SuccessFactors, Salesforce), you will authenticate using your username@purdue.edu and Microsoft MFA.  You must use your Purdue career account email address, not an alias or alternate address.  


Tip: Use a separate browser or private browsing mode to avoid logging out of other tenant accounts. 


Will Duo Still Be Used?

  • Purdue Global: Yes, Duo will continue to be used for applications accessed with a Purdue Global account.
  • Main Campus and Other Purdue Accounts: Duo will no longer be required for Purdue SSO applications after the transition to Microsoft MFA.
  • Purdue Indy Students: Duo will still be required to access IU systems.

 

Still need help?  Click the 'Purdue IT Request' button to start a ticket.

Details

Details

Article ID: 1791
Created
Thu 11/13/25 10:58 AM
Modified
Tue 3/31/26 8:50 AM

Related Services / Offerings

Related Services / Offerings (2)

Identity and access management provides the consistent campus-wide means of managing and identifying everyone for granting access to University resources and ensuring individual privacy.
Identity & Access Management Request