How to use Duo Mobile with Self-Service Password Reset?

Overview

The Self-Service Password Reset (SSPR) functionality defaults to using the Microsoft Authenticator application. Using the Microsoft Authenticator application is *not* required. It is possible to use another authenticator app like Duo Mobile, Google Authenticator, or Authy.

• Using a Different Authenticator App
• Removing Authenticators

Warning

• The Microsoft Authenticator application is highly recommended.
• Microsoft Authenticator supports push verification and has other benefits for integration with Microsoft 365 applications and services.
• Using a third party authenticator app will require adding an account and entering a passcode during the password reset process. It does not reuse your existing Duo MFA configuration.

Using a Different Authenticator App

During the SSPR registration process you will see the default "Microsoft Authenticator" screen. On this page select "I want to use a different authenticator app".

In your authenticator app, like Duo Mobile, select the option to "+Add" an account. On the Microsoft registration dialog, click on "Next".

In your authenticator app, select the option to "Use QR code" and scan the on-screen QR code. Once you have scanned the code select "Next".

As a final step, to register your authenticator app, you will be asked to enter the 6 digit code from your app. Enter it and select "Next".

Once your "App" is successfully registered you can continue on to the next verification which can include a phone number or email address.

Removing Authenticators

Once the third party authenticator has been added, it is possible ot review and remove the old phone SMS/Voice authenticator on the Microsoft MySignins security info page here: https://mysignins.microsoft.com/security-info