Security: Self-Enrollment for O365
Enroll now in 2-step authentication for Office 365 applications
GSE staff and faculty are invited to self-enroll to use 2-step authentication for O365 apps to provide an additional layer of security.
It's easy! The process is similar to using 2-step with PennKey-protected web sites and requires action on your part to add O365 apps.
Secure your PennO365 accounts today
We strongly recommended you Enable 2-step for Duo Mobile for the best user experience.
We are happy to help you set it up.
-
Log out of all PennO365 applications on all of your devices.
- Log out of each application individually: Word, Powerpoint, Excel, Teams, OneDrive, etc.
-
Log out of all applications on each device: Laptop, tablet, phone, etc.
-
Visit ISC's web page: Two-Step for PennO365 self-registration application and follow the prompts to complete the enrollment process.
-
Wait 15 minutes, and then log into PennO365 on your device. If you have forgotten your Microsoft account password, you can reset it via https://office365.password.isc.upenn.edu.
-
Upon logging into PennO365, you'll be prompted for an authentication window that is similar to the image below. Options on this page will differ based on the selection from the “Device:” drop-down menu.
-
Send Me a Push* to send a Push notification to a smartphone with the Duo app installed and configured for use with 2-step verification. (*GSE-IT highly recommends this option.)
-
Call Me to send an automated phone call to a selected phone. (For anyone without a smart phone, this is our recommended option.)
-
Enter a Passcode from a text message by clicking "Text me new codes" at the bottom or one-time-use code.
![]()
![]()
-
Check the Remember me for 30 days. Once authenticated, you will not be prompted to complete Two-Step Verification on that client or browser for the next 30 days.
Note: Clicking the “remember me” checkbox works per client or browser, not per device. As long as you use that client or browser once every 30 days, you will not need to reverify your identity.
For the best experience, we recommend you use Outlook for Office 365, Outlook on the Web, and/or Outlook apps for both Android and iOS when using PennO365 with Penn’s 2-step verification system.
Alert: Apple Mail, Thunderbird, and native Android Mail Will Not Work
Please keep in mind that 2-step Verification with PennO365 does not work with third-party clients like Apple Mail, the native Android Mail, or Thunderbird. Users may not be able to log in at all with an unsupported client if they have 2-step verification for PennO365 enabled.
For additional information, please see ISC's FAQ.
Video Tutorial
See step-by-step tutorial on enrolling in 2-step verification for your PennKey with Duo:
Special thanks to School of Nursing ITS for their video and instructions.
Need help?