Duo Multi-Factor Authentication

What is Multi-Factor Authentication?听
Multi-factor authentication鈥痑dds a second layer of security to your online accounts. Verifying your identity using a鈥痵econd factor鈥(like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.听快活林性息 uses Duo multi-factor authentication for听any听application that stores or processes听Level 1 Confidential听information.听
How to Self-Enroll in 快活林性息 Duo MFA (Faculty & Staff)
- Log in to the听.
- Select听Information Technology听from the听Campus Operations听drop-down menu.听
- Select听Multi-Factor Self-Enrollment.听
For step-by-step instructions, review the听. Or, view this video:
How to Self-Enroll in 快活林性息 Duo MFA (Students)
- Log in to the听.
- Under the听Student Services听drop-down, select听Information Technology.
- Select听Multi-Factor Self-Enrollment.听听
For step-by-step instructions, review the听. Or, view this video:
How It Works
Once you've enrolled in听Duo听you're ready to go: You'll log in to a 快活林性息 application as usual with your username and password, and then use your听device to verify that it's you.
- Enter your username and password to log in to the 快活林性息 portal or any other 快活林性息 MFA enabled application.听
- Duo will ask you how you'd like to authenticate. Make a selection.听
- Use your device to verify your identity.听
- You are securely logged in.听
To learn more about Duo, visit the听听or view the video below.听
FAQs
Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked 鈥 you might not even know someone is accessing your account.听
Two-factor or multi-factor authentication鈥痑dds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you.听
This second factor of authentication is separate and independent from your username and password 鈥斺疍uo never sees your password.听
Duo's remembered devices feature is similar to the "remember my computer" or "keep me logged in" options users are accustomed to seeing during primary authentication on many websites. With the remembered devices feature enabled, the user is offered a 鈥淩emember me for ...鈥 checkbox during login. When users check this box, they aren't challenged for secondary authentication again when they log in to that application from that device for the specified period of time.
Multi-factor authentication is currently听enabled for selected applications. Review the听听or the听听for step-by-step instructions.听
Send a Push:听you will be notified on your phone to either approve or deny the log in. This is the easiest method.听
Call me:听you will receive a phone call and must press a key to continue the log in.
Enter a Passcode:听you will be prompted to enter a six digit passcode from the Duo app.
The following devices are supported:
- iPhone, iPad, iPod
- Android (phone and tablet)
- Blackberry
- Windows Phone 7
- Windows Mobile
- Hardware tokens (MFA HOTP, only available from the Library walk-in center)
Duo Push on a mobile phone is the easiest to use. However, devices like a campus phone extension is also supported.听Note: whatever device you select should be a device that you have immediate access to so you can verify your identity as needed.听
Yes. You can open the DUO Mobile app and press the key button to obtain the six digit code.
Contact the听IT Help Center听by phone (818-677-1400), online at () or in person in (The University Library, First Floor, Learning Commons).
Contact the听IT Help Center听by phone (818-677-1400), online at () or in person in (The University Library, First Floor, Learning Commons).
Currently, DocuSign, Confidential Box, Common Financial Services (CFS) and Palo Alto GlobalProtect authenticate using a multi-factor authentication. Users who have access to听Level 1 data, will also be required to use MFA when logging in to the myNorthridge portal.听
When signing into听GlobalProtect VPN听please be aware that your work station will not notify you to check for a phone call or a push-notification. For this reason please make sure to have your device in hand and ready to answer. For more information on GlobalProtect VPN refer to the听Virtual Private Network听website.听
Yes. If internet services are not available on travel, you can open the Duo Mobile app and press the key button to obtain the six digit code.听
To set up Duo Push visit听听or听.听
Once the Duo mobile app is downloaded, the Duo campus administrator will send a text to activate the app. If you do not receive an activation text, please contact the听IT Help Center听by phone (818-677-1400), online at () or in person in (The University Library, First Floor, Learning Commons).
When you set up Duo through the Duo campus administrator, you have the option to add a maximum of 10 devices. We recommend a听minimum听of two devices.
If you receive an unexpected log in alert, you should select "Deny" and indicate whether "It seemed fraudulent" or "It was a mistake".
听
If you believe your account has been compromised (credentials stolen), contact the听IT Help Center听by phone (818-677-1400), online at () or in person in (The University Library, First Floor, Learning Commons).
You may have trouble receiving push requests if there are connection issues between your phone and the Duo service. Many phones have trouble determining whether to use the Wi-Fi or cellular data. Due to this reason there may be an issue relating to the push requests. In this case simply turning the phone to airplane mode and back to normal operating mode often resolves issue.
Check the date and time on your phone, and make sure they are correct. Avoid setting manual date and time on your phone. Instead, set it up to sync with your phone service network.
Should neither of these actions help, see the Duo Knowledge Base for additional听听and听听troubleshooting.
If you cannot get Duo push working on your own, you can log in with a passcode generated by the Duo Mobile app and send a new activation link to your phone. See the听听guide for instructions.
If you've tried the suggestions here but can't get Duo Push working or reactivate your device yourself, contact the听IT Help Center听by phone (818-677-1400), online at () or in person in (The University Library, First Floor, Learning Commons).听
Multi-factor authentication is required for accessing any 快活林性息 application.
You can reactivate it if you are already enrolled. In Duo, go to "Add a new device", authenticate before making changes, select the device you want to re-enroll in Duo Mobile, and select "Reactivate Duo Mobile".
If you need assistance, contact the听IT Help Center听by phone (818-677-1400), online at () or in person in (The University Library, First Floor, Learning Commons).
If you travel internationally Duo authentication can work without cellular service or a Wi-Fi connection.
- Smartphone/Tablet听鈥 Even with cellular service disabled or without a Wi-Fi connection, you may use the Duo Mobile app to generate a听passcode听that you can use to authentication. Simply choose the听Enter a Passcode听option when you get the Duo authentication prompt. To generate the passcode, open the Duo Mobile app on your phone or tablet and tap the button with the KEY symbol.
- Hardware token听鈥 if you don鈥檛 have a smartphone/tablet and you travel internationally often, you may want to get a hardware token (MFA HOTP, only available from the Library walk-in center)
. Once you have the token, choose the听Enter a Passcode听option when you get the Duo authentication prompt and then enter the passcode that shows on the hardware token. - ByPass Code听鈥 If you won鈥檛 have a smartphone/tablet and a hardware token is not an option, it is possible to get a bypass code that you can use for Duo authentication for the duration of your trip. Contact the听IT Help Center听to request this option. Then, choose the听Enter a Passcode听option when you get the Duo authentication prompt and enter the bypass code that you were given.
- Normal options听鈥 If you have cellular service or a Wi-Fi connection, then you can simply use whatever authentication technique you normally use. The push, passcode, and phone options all work overseas. You can even add an international phone number as one of your authentication options.
The Duo Mobile app and hardware tokens are encryption items that are subject to export control regulations.听This means that travel to Cuba, Iran, North Korea, Sudan, Syria, and the Crimea region of Ukraine will not allow you to use the Duo mobile app or hardware token. In this case, we strongly urge you not to log into applications that require Duo. If you are travelling to these countries and must use Duo, please contact the听IT Help Center听for a bypass code.听听
Make sure you have your MFA device on-hand with the Duo Mobile app open. If you are still having issues, try restarting your computer and trying again. You can also check the priority order of the devices and change them if necessary (Using 快活林性息's GlobalProtect). For further assistance please contact the听IT Help Center.
Lock outs last only a certain amount of time. You can wait for this time to expire听or call the听IT听Help Center听to have your account unlocked.
If you need a hardware token, you may request a token in our听. You may also contact the听IT Help Center听and they will assist you.
Watch these videos if you need assistance:
Yes. DUO does work on departmental accounts. You can either add separate account if multiple uses (phones) or you can add the department account to an existing account as an alias. Please contact the IT Help Center for assistance.