Logging In and Out with Single Sign-On (SSO)

Steps for Single Sign-On

1. When prompted, enter your Towson University e-mail address, then click Next.

Note: Some individuals may be prompted to 'Pick an Account'. This allows individuals with multiple accounts to choose the correct one (Faculty/Staff or Student account, or another institution/organization). Carefully select the correct account you want to access.

2. Enter your TU NetID Password when prompted.
   If you need help or are unsure, click the linked helper text. You'll be directed to tools and information about how to update your password, manage your NetID, or get tech support.

3. Faculty and Staff - you will automatically be prompted for Duo Multi-Factor Authentication (MFA) (towson.edu/duo). Subsequent logins to Microsoft 365 on the same device and browser session won't require additional Duo logins.
   • How to log in with Duo: Article - Duo Verified Push (towson.edu)
   • Choosing a different Duo device: If you want to use a different Multi-Factor Authentication (MFA) device other than your default device or last-used device, click the 'Other Options' link:

• Trust this browser (aka Duo 'Remember me'). When logging in with Duo, you may be prompted to 'Trust this browser'. This allows you to be prompted for Duo less often on devices you trust (up to 30 days)

4. Once you're signed in, you may be asked about staying signed in.
   • Choosing 'Yes' means you will not be prompted to log in again for an extended period of time.
   • Choosing 'No' means that once you close the browser you'll need to log in again the next time you access an application or service.

Logging out of a Single Sign-On application ('log out') means ending your current session with that app. In some cases you may also want or need to log out of all SSO apps. We'll explain how to log out, and when logging out might be advisable. 

Why log out: Security/Privacy, and switching users 

• Using Personal or Shared/Public Devices:  
  • Scenarios: Accessing TU apps and services from a public or shared device, such as in a computer lab, the Library, internet café, a shared office computer, or a personal device (non-TU owned/managed).  
  • Benefit: Security and Privacy: Logging out prevents subsequent users from accessing your data and helps keep you and the university secure by protecting privacy and sensitive information. 

• Switching Accounts: 
  • Scenario: A user needs to switch between different NetIDs, such as Student or Faculty/Staff accounts. 
  • Benefit: Usability with multiple accounts: Logging out of one account and into another ensures that the correct data and settings are applied for each account, avoiding confusion and keeping your sessions separate.

How to log out of a single application -or- log out of all SSO apps

• Logging out of a single app. Click 'log out' (or 'sign out', or equivalent) directly from within the app you are using. This method allows you to log out of a specific app. 

  1. Your session for that app is ended and you will be redirected to the SSO Logoff page. 

  2. Note: If you visit that app again, you may be logged back in automatically (or you may be prompted for which account you want to use). 

  3. Also note: You will also have the option to completely log off from ALL SSO apps by clicking the button on the page (see the next bullet below). 

• Logging out of SSO entirely (all apps). Visit the SSO Logoff page and/or log out of all SSO Apps 

  1. Visit https://logout.towson.edu and click the logoff button.

  2. Performing this step will log you out from ALL SSO apps (including Microsoft 'Office' 365 Apps)

  3. If you wish to access Microsoft M365 or any other SSO apps again, you will need to log in again to establish a new SSO session, Duo MFA may be required.

Additional considerations: 

• On TU-managed Windows devices, your access to single sign-on apps is tied to your NetID login on that managed device. To log off, just close your browser and/or lock or log out of your device. 

• There may be exceptions where 'log out' still doesn't work so well. 'Log out' functionality is provided by individual app developers (the companies or organizations that create apps) and there may be some apps that don't handle 'log out' well.  

  • The majority of SSO apps support the methods described above, but some may not. For these exceptions, the recommended action is to close your browser and/or lock your device when you're done. 

  • The Office of Technology Services (OTS) doesn't always have the ability to change how 'log out' works for individual Single Sign-on apps.  

  • If you have a question or concern about a specific SSO app, please open a ticket (instructions below). 

• Certain apps that provide access to sensitive or privileged data may require you to sign in more frequently as a security enhancement. These apps will automatically log you out after a period of inactivity. You may need to log back in to these apps every 8 hours.