Support

HOW TO RESET EXCHANGE ACCOUNT ON YOUR IPHONE/IPAD

The built-in mail app included with your iPhone or iPad works with Duo two-factor authentication, as long as your iOS version is 11 or better: Settings > General > About > Software Update

But, even though this is the case, several hours after your account is Duo-enabled, there’s a chance that your iPhone or iPad may begin continuously re-prompting you for your Exchange password.

Should this password reprompting occur, the fix is straightforward and the ITS Service Desk will be happy to assist you: just 1) delete and 2) re-add your Exchange account, as shown below. You can also choose to do this now, pro-actively, as you prepare for Duo-enablement of your MC1 account.

1. Delete your iPhone’s mail app account for Carleton Exchange:

Settings > Accounts & Passwords > [Select your Exchange account] > Delete Account

2. Re-add your iPhone’s Carleton Exchange account to your iPhone’s mail app:
   Settings > Accounts & Passwords > Add Account > Exchange

3. Enter your full Exchange address, no periods: e.g. JaneDoe@cunet.carleton.ca. You’ll be presented with Carleton’s on-premise authentication page, cufed.carleton.ca, where you can enter your full Exchange address again and your MC1 password:

4. Validate with Duo and select your desired Exchange attributes:

5. Your Exchange account has been successfully re-added. If you have more than one email account configured on your iPhone or iPad, you can go back to settings, click on Mail, and scroll to select which is your desired default email account.

Mobile phone forgotten at home, lost, or broken?  Contact the ITS Service Desk for a one-time use, expiring Bypass Code.

Bypass Code Demo (36 seconds)

Mobile phone Recommended

The use of a mobile phone is the easiest method for Duo 2-factor authentication. If your mobile phone is older, it’s not even necessary to install the Duo Mobile app; your older mobile phone need only be able to receive a phone call, to successfully authenticate you.

Desk or home phone

If you do not use a mobile phone, your desk phone, home phone, or both, can serve as your Duo 2-factor authentication method(s). You can change your phone number, extension, or add new phone numbers at any time.

Request a Fob

If neither a mobile phone nor your desk/home phone(s) are appropriate for your authentication needs, you can request a fob, also known as a hardware token.

A fob is a small device typically attached to your key-chain so it’s always with you. It generates a 6-digit code, which you can use as your Duo 2nd factor. Detailed Guide on Fob usage.

Note: Please do not request a fob “just in case” — should you ever forget your mobile phone, you can always authenticate via your desk or home phone, or ask the ITS Service Desk to issue you a temporary bypass code. Please do not request a fob if you have an employer-provided mobile phone.

• Secure link to request a fob (Carleton Intranet website)

The simplest way to read your Carleton staff/faculty email on your Unix/Linux workstation, after your MC1 account has been Duo-enabled, is to use a web-browser:

• http://exchange.carleton.ca

If you prefer to read your email using an email client program, to support two-factor authentication at Carleton, you need to use one which supports the OAuth2 protocol plus either EWS or MAPI protocols.  Unfortunately MS Outlook is not available for Linux. And Thunderbird does not support the EWS or MAPI protocols.

One open-source email client for Linux that does support both EWS and OAuth2 is Evolution: wiki.gnome.org/Apps/Evolution

With so many variants and versions of Linux, ITS is unfortunately not able to offer desktop installation assistance for your particular variant. But if you are able to successfully install Evolution, here are the necessary configuration details:

The following screenshots are from Ubuntu Desktop 18.10, but the configuration should generally apply to CentOS 7, Redhat 7 or Ubuntu 17 or newer, running the GUI GNOME desktop manager.

• Ubuntu users, open a terminal and type the commands below (one at time):
  • sudo apt-get remove evolution
  • sudo apt-get update
  • sudo apt-get install evolution
  • sudo apt-get install evolution-ews
• CentOS 7 and RedHat 7 users, open a terminal and type the commands below (one at time):
  • sudo yum update
  • sudo yum install evolution
  • sudo yum install evolution-ews
• Launch or open the Evolution app

Details on Configuration of Evolution email client

• Evolution-EWS.pdf

Mobile phone forgotten at home, lost, or broken?  Contact the ITS Service Desk for a one-time use, expiring Bypass Code.

Bypass Code Demo (36 seconds)

The Outlook application on your Mac/PC or on your Android/iPhone will present a DUO 2-factor authentication prompt approximately every 90 days.

Duo-enabled Web services will present a DUO 2-factor authentication prompt when you first open a browser connection. Opening another DUO-enabled web service from the same browser will NOT cause a DUO prompt. But quitting and restarting your browser, or using a different browser, will.

If you use an Apple Watch, you can keep your iPhone in your pocket to authenticate a DUO-enabled service.

Email programs which work with DUO-enabled accounts:

Outlook understands DUO’s request for a 2nd-factor; most other email programs do not. Of course one can always use exchange.carleton.ca, but that is only a realistic option on a computer.

• iPhone: You can use either the built-in email app included with iOS 11 on iPhone and iPad, or Microsoft Outlook for iOS app (free, but you will need your AppleID to install)
• Android: You must use Microsoft Outlook for Android app (free, but you will need your Google account to install)
• PC: You must MS Outlook 2016  (It’s included in Carleton’s Windows 10 image)
• Mac: You must MS Outlook 2016, downloadable from exchange.carleton.ca, after accepting this offer:
  Downloading Outlook-2016-for-Mac (Click to enlarge)