Office of the CIO › Computing Services › Services › Security Services › Identity and Access Management › Authentication Services › How to Use 2fa Authentication › Use and Verify CMU Web Login

Use and Verify CMU Web Login

You will be redirected to CMU Web Login when you attempt to access some university services.

Verify that the URL in your browser's address bar matches one of the following options:
- https://login.cmu.edu/
- https://login.qatar.cmu.edu/
If the URL is correct, log in with your Andrew userID and password.
If two-factor authentication (2fa) with DUO loads, verify that the URL in your browser's address bar matches https://api-2320b628.duosecurity.com/.
If the URL is correct, proceed with the login process. You will have access to the university's restricted services until you log out or your session expires.

Additional Login Steps with Microsoft Entra ID

Several services use a sign-in method called Microsoft Entra ID in addition to Web Login.

These currently include Microsoft 365, Microsoft Copilot, the Cisco Webex App, Cisco Jabber, the Phone Manager (phone.cmu.edu), and the Voicemail Manager (voicemail.cmu.edu). This list may continue to grow.

If a service uses Microsoft Entra ID, you will see one of the following Microsoft sign-in prompts.

Check the URL

Before entering your Andrew userID and password into the CMU Web Login page or authenticating with DUO, verify that the URL in your browser's address bar matches one of the following options:

https://login.cmu.edu/
https://login.qatar.cmu.edu/

Note: Malicious websites can duplicate the appearance of a page, but they cannot duplicate a URL.

Screenshot of the Microsoft Entra ID Sign-In Prompt

Enter your full Andrew email address (userID@andrew.cmu.edu) and click Next.

Enter your Andrew password in the new CMU login screen.
Authenticate with CMU 2fa (DUO) as prompted.
(Optional) Select 'Yes' to the Stay signed in? prompt.