You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 5 Next »

As part of University Technology's 2014 Security Initiatives, we have partnered with Duo Security to offer additional protection to your uLogin account. This new service, known as Two-Factor Authentication, protects your uLogin account by adding a second step to the login process. After entering your uLogin ID and password, you will use either your phone or a device known as a hardware token to confirm your identity. This prevents anyone but you from accessing your account, even if they know your password. 

This service is not enabled by default. In order to use Duo Two-Factor Authentication, you must first enroll in the system. If you are not enrolled in the system, you will continue to log in to Drew University web sites using your regular uLogin ID and password. 

Enrollment

Am I required to enroll in Duo Two-Factor Authentication?

Drew University will be requiring all faculty, staff, and contractors with uLogin accounts to enroll in the system in order to protect the sensitive University records that employees have access to as part of the course of their work. 

Students are not required to be enrolled in the system, although are welcome to do so if they choose. Student Employees may be required to enroll depending on the nature of their work and the electronic records they have access to.

Completing Self-Service Enrollment

It's easy to enroll yourself in Duo Two-Factor Authentication using self-service pages. After logging in, Duo Security will walk you through the steps to enroll one or more phone numbers into the system. We recommend enrolling multiple phones, such as your mobile phone and office landline. If you are enrolling multiple phones, enroll your primary cell phone first. Click here to get started with the process. 

To learn more about the enrollment process, read the Enrollment Guide on Duo Security's web site. 

What if I do not have a cell phone?

If you do not have a cell phone, you may obtain a Hardware Token from University Technology. Tokens are distributed freely to faculty and staff who need to enroll in the two-factor authentication service. Please come to the University Technology Help Desk with a photo ID to obtain a token. 

Using Your Account After Enrollment

uLogin

Once you have enrolled in Duo Security, you will be required to complete the second step of authentication whenever you see a uLogin form. 

Simply enter your uLogin ID and password as usual and Duo will automatically use the Default method to log in. If the first phone you enrolled is a smartphone, Duo will send a push message to that phone and prompt you to approve the login using the Duo Mobile app. If it is not a smartphone, Duo will make a regular telephone call to that number and you be prompted to approve the login by pressing any key on your phone. 

Using Duo Security options to select another login method

By clicking the Duo Security link on the uLogin form, you can select another method to use to log in. Click the drop-down to view the available options. The phones you have enrolled are designated Phone 1, Phone 2, and Phone 3 in the order in which you registered them during the enrollment process. 

  • Defaults - If you do not select any Duo Security options, Duo will automatically use the Default method. If the first phone you registered is a smartphone, Duo will automatically send a Push notification to that phone to approve the login. If the first phone is not a smartphone, Duo will place a telephone call to that number instead. 
  • Push (recommended) - If you have registered a smartphone and installed the Duo Mobile app, the Push method of authentication is recommended. In this mode, Duo will send a notification to your smartphone. Simply accept the pop-up message on your phone and click Approve to authorize the login request. 
  • Text - You may use the Text option with any phone capable of receiving text messages. When you select the Text option, Duo will send a set of 10 one-time passcodes to the phone you have selected. After the text message has been sent, you will be returned back to the uLogin form with a login failed message. Once you have the text message, you may use each code in the message to log in once using the Passcode option. Once you have exhausted your 10 passcodes, use the Text option again to get more. Whenever you use the Text option to send passcodes, any previously texted passcodes are invalidated immediately, even if unused. 
  • Call - When you select the Call option, Duo will place a telephone call to the phone selected. Answer the phone and listen to the voice prompt. Pressing any key on your touch tone phone will approve the login request. 
  • Passcode - You may obtain a 6-digit one-time login passcode from one of several sources. Simply enter the passcode into the box below the drop-down to log in. 
    • Using a hardware token - If you have been issued a hardware token, simply press the button to generate a new passcode. 
    • From a text message - If you have used the Text option to send yourself 10 one-time passcodes, enter a passcode you have not used previously. When you have run out of passcodes, you can use the Text option again to send 10 more. 
    • Using the Duo Mobile app on your phone - If you have registered your smartphone with Duo, buy you are out of cell coverage and cannot use the normal Push method, you may use the app to generate a passcode. Using your Duo Mobile app, touch the key icon next to the Drew University account to generate a new one-time passcode. 

Using Your Device with Duo

Duo supports a wide-variety of different devices for authentication. Select the type of device you are using to learn more:

 

  • No labels