Setting Up Thunderbird Mail Client with Duo 2FA

Setup a new email account. If you have an existing account already setup for IMAP and SMTP, you may simply skip to step 10.

1. Do not enter a password in the password field.  
2. Fill in your Name and Email address in the appropriate fields
3. Click “Configure Manually”

4. Make sure the settings match the ones above, but use your FAU email address as the username for both.
5. Click “Advanced config”

6. You will receive this dialog box. Click “Ok” to continue to the next window

7. Login to the SSO window that pops up.
8. SSO will prompt you to grant access to Thunderbird to check and send email.
9. Click “Accept”

10. You should be taken to your account settings. If not, right-click your mail folder and select “Settings”
11. Make sure OAuth2 is selected as the authentication method, and that your FAU email address is set un the User Name field
12. Click on “Outgoing Server (SMTP) in the list on the left

13. Click “Edit” on the right

14. Make sure Oauth2 is selected as the Authentication Method and that your FAU email address is entered into the User Name field.
15. Click OK
16. Close Server settings

Your email client may ask you to authenticate again via SSO. You will also receive an SSO prompt the first time you try to send email

You may receive a new prompt requesting authentication via Duo. This should be a one time prompt as long as you use the email client at least once every 90 days.