Switch to Modern Authentication - iOS

Due to a Microsoft policy change effective October 2022, all CSU Channel Islands Outlook/Exchange account holders must access email using modern authentication. This requires that all email accounts will no longer be accessed via ActiveSync (Basic Authentication), which does not require two-factor authentication.

What is modern authentication vs. "legacy" authentication (ActiveSync)?

"Legacy" authentication, also referred to as "basic" authentication or ActiveSync, is a method of sign in that does not require users to utilize two factor authentication (such as Duo) and therefore poses more potential risk for attackers. Devices that use legacy authentication are typically devices that are older or that have older OS software; these devices don't have the security capabilities of newer devices and up-to-date software that can use multifactor authentication. 

Modern authentication offers additional security for Exchange email accounts through the use of multifactor authentication (such as Duo), which makes it less likely for attackers to gain access to an account. The Outlook desktop app and Outlook mobile apps use modern authentication and are recommended for accessing your email because of the Duo requirement for accessing campus accounts. Making sure that you are prompted for Duo when signing into your account is one way to know if your account is securely signing in with Modern Authentication.

Switching Authentication Type

To begin using modern authentication, users can remove their account on their iOS device and re-add it through the Settings App or switch to the Outlook app for iOS.

Follow the steps below to switch from legacy ActiveSync to modern authentication. Accounts that are not transitioned to modern authentication by October 2022 will be logged out of the account, requiring the user to login through the modern authentication method.

Delete account: 

1. In the Settings App, scroll to Mail, then Accounts
2. Tap on the Exchange / Outlook account
3. Tap "Delete Account" and confirm

Re-adding the account:

1. In the Settings App, scroll to Mail, then Accounts
2. Tap "Add Account" and select "Microsoft Exchange"
3. Enter your CSU Channel Islands email and tap Sign in
4. The next screen will prompt you to enter your password.
5. Make sure that you get a Duo prompt after this screen. If you don't get a Duo prompt, you have not authenticated properly and may need to try again,
6. Once you configure the settings properly, tap save.

If you are not prompted for Duo using the above instructions, you must install the iOS Outlook App. 

1. Install the Outlook App, if you have not done so already.  
2. Once installed, open the Outlook app and tap "Get Started" 
3. Select "Add Account" and enter your CSU Channel Islands email address (username@csuci.edu)
4. Enter your password and hit "Sign in"
5. Make sure that you get a Duo prompt after this screen. If you don't get a Duo prompt, you have not authenticated properly and may need to try again. 

Related Articles

Outlook for iOS and Android

Duo Two-Factor Authentication

Need Help?

If you experience any issues or have questions or concerns, please contact the ITS Solution Center or call 805-437-8552.