Tipwarning | ||
---|---|---|
| ||
Please log in to
If you received an email saying your device password is going to expire, click the "Generate new device password" button to reset the password before entering it into your new device.
You can read more about the different options for logging in at uLogin, Your Way!Check out Device Passwords for more information. |
Tip | ||
---|---|---|
| ||
If you have a new phone, you will need to re-activate the Duo Mobile app. Please follow the directions at Duo Support: Managing Your Devices. |
Drew is currently As part of University Technology's 2014 Security Initiatives, we have partnered with Duo Security to offer additional protection to your uLogin account. This service, known as Two-Factor Authentication, protects your uLogin account by adding adds a second step to the login process. After entering your uLogin ID and password, you will use either your phone or a device known as a hardware token to confirm your identity. This prevents anyone but you from accessing your account, even if they know your password.
This service is not enabled by default. In order to use Duo Two-Factor Authentication, you must first enroll in the system using Duo Self-Service Enrollment. If you are not . New employees who have not self-enrolled will be enrolled automatically approximately two weeks after their hire date (we refer to this as "compulsory enrollment", and you will be unable to log in without contacting UT). Until you are enrolled in the system - either on your own or automatically -, you will continue to log in to Drew University web sites using your regular uLogin ID and password without the second authentication factor.
Table of Contents |
---|
Enrollment
Expand |
---|
Am I required to enroll in Duo Two-Factor Authentication?Drew University requires all faculty, staff, and contractors with uLogin accounts to enroll in the system in order to protect the sensitive University records that employees have access to as part of the course of their work. Please review the Responsible Use of University Data Policy for more information. Students are not required to be enrolled in the system, although are welcome to do so if they choose. Student Employees may be required to enroll depending on the nature of their work and the electronic records they have access to. What is the schedule for mandatory faculty and staff enrollment?As of March 7, 2014, all faculty, staff and contractors who were not enrolled in the system had their uLogin accounts disabled. If this applies to you, please contact the UT Service Center at 973-408-4357 to discuss your options.New employees and contractors must enroll in the system within two weeks after their official start date at Drew. Completing Self-Service EnrollmentIt's easy to enroll yourself in Duo Two-Factor Authentication using our self-service pages. After logging in, Duo Security will walk you through the steps to enroll one or more phone numbers into the system. We recommend enrolling multiple phones, such as your mobile phone and office landline. If you are enrolling multiple phones, enroll your primary cell phone first. Go to the self-service enrollment site to (drew.edu/duo) to get started with the process or learn more about the multiple methods Duo supports for logging in. To learn more about the enrollment process, read the Enrollment Guide on Duo Security's web site. Please keep in mind that, when enrolling devices/landlines yourself, you will need to have the first one at hand that first device ready to verify ownership. Also, pay attention to the order in which you add phone numbers, as this will affect how you can log in later. What happens if I do nothave a cell phone?enroll?New employees and affiliates who do not enroll in the system after activating their Drew accounts will be reminded to enroll and given a date by which they must comply. They will not be able to access some University applications until after enrolling. Those not enrolled in the system within that amount of time will have their uLogin accounts disabled. They will not be able to access email, TreeHouse, Moodle, or other Drew applications. If this applies to you, please contact the UT Helpdesk at 973-408-4357 to discuss your options.No phone? No problem. Duo supports multiple methods for logging in. If you do not have a cell phone, you may obtain a YubiKey or Classic Hardware Token from University Technology. Tokens are distributed freely to faculty and staff who need to enroll in the two-factor authentication service. Please come to the University Technology Helpdesk with a photo ID to obtain a token. Please note that replacements for damaged or malfunctioning tokens will be provided for free. A $50 charge will apply to replace a missing token. |
Using Your Account After Enrollment
Expand |
---|
uLoginOnce you have enrolled in Duo Security, you will be required to complete the |
...
verification step |
...
whenever you see a uLogin form. You can log in from any computer (or smartphone) but you will need to approve the login using one of the |
...
devices that you have enrolled in the system. Simply enter your uLogin ID and password as usual and Duo will automatically use |
...
the Default method to log in. If you have enrolled a smartphone, Duo will send a Push message to the first smartphone listed and prompt you to approve the login using the Duo Mobile app. If you do not have any smartphones on your account, Duo will make a regular telephone call to the first number and you will be prompted to approve the login by pressing any key on your phone. Using Duo Security options to select another login methodBy clicking the Duo Security link on the uLogin form, you can select another method to use to log in. Click the drop-down to view the available options. The phones you have enrolled are designated Phone 1, Phone 2, and Phone 3 in the order in which you registered them during the enrollment process. Please note: To use these alternate methods, you should still enter your username and password, but do not hit Enter after typing your password! Click Duo Security to see the drop-down menu and third text field.
|
...
|
...
|
...
|
...
|
...
|
...
|
...
Getting "Locked Out"If you attempt, and fail, to log in to your account ten times in a row, you will be locked out of your account. This safety measure is put in place to protect your account (and the data you have access to) from someone who has stolen your password. A Helpdesk ticket will be logged automatically once you are locked out. In order to unlock your account, your identity will need to be verified. This can be done in person, at the Helpdesk, or via Drew's video call platform with a photo ID. You will need to have a conversation with a team member regarding why you were locked out and how to avoid being locked out in the future. |
...
Using Your Device with Duo |
...
|
...
|
...
|
...
|
...
Syncing Your Drew Email to Your Phone, Tablet, or Other Programs
Please refer to our instructions for Connecting Your Mobile Devices to Google Apps or How to Set Up Your Drew Gmail Account in an Email Client for more information on initial set up with these programs.
...
Frequently Asked Questions and Common Issues
Expand |
---|
Many questions are answered at the Duo Security Support Issues |
...
page here in U-KNOW.
|
...
|
...
...
- Contact the UT Service Center and explain the issue you are experiencing. Explain that you are unable to come to campus and will be designating a proxy to vouch for your identity. The Service Center will create a ticket and indicate that a proxy will be vouching for your identity.
- Contact your proxy. Your proxy must be a Drew employee and should be someone you know, a coworker or supervisor, member of the Deans office staff in your school, etc. who is able to positively identify you on the phone call and is able to sign a form accepting responsibility for making such an identification in the presence of one of the Duo Administrators. Note that as part of the internal controls and audit procedures we have established within University Technology for the Authorized Proxy process, Duo Administrators are expressly forbidden from serving as proxies themselves.
- Your authorized proxy will then contact one of the Duo Admins (listed below) and agree to meet in person to complete a Proxy Authorization form. With Proxy Authorization form in hand, the Duo Admin will perform the required actions on your account and update the ticket. An electronically scanned copy of the form will be attached to the ticket for audit purpose later. We will contact you at the callback number or email address in the ticket to confirm that the required action on your account is complete.
- Periodically a University Technology employee who is not a Duo Administrator will conduct an audit of proxy actions. As part of this audit, you may be contacted by the office phone number on your HR record or in person to confirm the proxy action. If abuse of the proxy process is identified, an immediate investigation will be initiated.
Reviewed 04/09/24
...