Home → CRL IT Knowledge Base → CRL Account Management → CRL Account - First Time User Log In

1.1. CRL Account - First Time User Log In

Last updated: Wed Jun 2026 09:07 PM (EDT)

Before you start: have your cellphone available and a QR code reader app if needed. If you were issued a THALES hardware token instead of using a phone, have it with you.

Step 1 — Sign in

Open Microsoft Edge:

Go to https://portal.office365.us/ — this is the CRL (GCC High) sign-in portal. Do not use office.com; CRL accounts are in the GCC High cloud and will not sign in there.

Click Sign in:

Enter your CRL email address and click Next:

Enter your password (contact the IT department or your team lead for your initial login password):

Step 2 — Approve your sign-in (2FA)

CRL uses two-factor authentication (2FA) to confirm it’s really you signing in. Follow Option A if you were issued a THALES hardware token, or Option B if you’re using the DUO app on a mobile device.

Option A — THALES hardware token

If you are using only a THALES token, click Enter a Passcode, type the code shown on the token, and click Log In:

Your token is now verified:

Token verification is complete. If you also want to add your mobile device, click Add another Device and follow Option B. Otherwise, continue to Step 3.

Option B — DUO mobile app

Start the DUO 2FA setup:

Select Mobile Phone as your contact method and click Continue:

Enter your phone number, check the box, and click Continue:

Choose your phone type:

Install the DUO Mobile app from the App Store or Play Store:

Open the DUO app, choose Add, then Use QR Code, and scan the QR code with your phone’s camera:

A green check mark means the scan was successful:

Keep Ask me to choose an authentication method selected and click Continue:

Enrollment is complete:

Test it: click Send Me a Push. A Request ID (for example, 9ZQV) is sent to your phone:

The push notification on your phone shows the same Request ID:

Click Approve to continue.

More on setting up DUO: Android | iPhone / iOS

Step 3 — Accept the CRL Terms of Use

Review and accept the CRL Technologies Terms of Use:

Step 4 — Register your account recovery methods

This is different from your DUO / 2FA setup. DUO approves your sign-ins; the recovery methods below let you reset your own password if you ever get locked out. You may see this prompt:

Follow the Keep Your Account Secure prompts to set up your authentication phone and email.

Authentication phone — enter the number you want to use, then choose Text Me or Call Me. Do not choose Text Me if the number is a landline (it cannot receive texts).

Authentication email — enter a personal, non-CRL email address you can access in real time. You’ll be emailed a link to finish this step. Do not use your CRL email address — if you’re locked out of your CRL account, you won’t be able to reach it to verify the request.