Two-Factor Authentication will be used when accessing SJR State online resources and applications when sign-on is required. Below are some frequently asked questions.
What is 2FA?
2FA stands for Two-Factor Authentication. As the name implies, it means you need multiple factors of authentication to gain access to the resource you are signing into. The most common factor is something you know, your password. Another factor is something you have, such as a code generated on your mobile device or key fob. SJR State will be deploying this second factor via Duo Security.
By requiring different channels of authentication, we can protect user logins from remote attacks that may exploit stolen usernames and passwords.
Why is SJR State using Two-Factor Authentication?
It has become increasingly easier for malicious actors to compromise the security of a single password. They can often be guessed, stolen, or hacked. Even users that have followed strong password recommendations can be compromised. Two-Factor Authentication adds another layer of security, even when your password is unknowingly compromised. Two-Factor Authentication enhances the security of your account by using a device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.
What is Duo?
Duo Security is a 3rd party application that SJR State is using for Two-Factor Authentication.
Duo Mobile is a mobile app that you install on your smartphone or tablet to generate passcodes for login or receive push notifications for easy authentication on your mobile device. It works with Duo Security’s Two-Factor Authentication (2FA) service to make your logins more secure.
Will I have to use Duo?
All SJR State employees will begin receiving Duo enrollment emails next week on June 27th. Below is an example of this email. In an effort to make these Duo messages distinct from other external emails, you will see a bright green authorized bar instead of the more familiar yellow warning bar. The email will come from no-reply@duosecurity.com.
Once you receive this email, we highly recommend everyone complete enrollment as soon as possible. Please make sure you have your smartphone nearby and then follow the link to begin the enrollment process. Duo will send you another email reminder 2 days later, 10 days later, and then again every 30 days until your enrollment is complete. If you have not enrolled by the date indicated for your group, you will be required to enroll on that date when you first attempt to sign into your account.

When will I have to use Duo?
- June 27th – Duo enrollment opens for all SJR State employees
- July 25th – Duo use is required for All Banner Admin Users
- Aug 29th – Duo use is required for remaining Staff and Faculty
- Aug 29th – Duo enrollment opens for all Students
- Sept 26th – Duo use is required for all Students
How do I manage my Duo devices?
You can go the SJRstate Duo Central website,
https://sjrstate.login.duosecurity.com/central/, to add, edit, or remove devices with your Duo account
How-to and Additional Information Links
Managing your Duo Enrollment with Duo Central:
https://guide.duo.com/enrollment
Duo Enrollment
Glossary and Terminology
- 2FA (Two-Factor Authentication)
- An additional layer of authentication beyond a username and password. 2FA involves something you know (password) plus something you have with you (like Duo Mobile on your smartphone) to prevent someone from logging in with only your password. With Duo 2FA, you still enter your username and password. The second factor provided by Duo is simply an added layer of security on top of your existing credentials. We recommend using Duo Push via the Duo Mobile app to perform 2FA.
- Duo Prompt
- This interactive prompt lets you choose how to verify your identity each time you log in (e.g. “Duo Push” or “Call Me”) to a web-based application. The Duo Prompt allows you to enroll and authenticate.
- Passcode
- These are numeric codes that can be generated either via the Duo Mobile app, SMS (text message), or a hardware token, depending on what your IT administrator permits. Passcodes may be used at any time and are particularly handy for authenticating when your 2FA device doesn't have internet or cellular service.
- Push Notification (Duo Push)
- A push authentication request that is sent to the Duo Mobile app on an enrolled device. Push notifications include information like the geographical location of the access device, IP address of the access device, and the application being accessed so you can verify whether the push is real or fraudulent.
More information and answers will be added to this page as we move closer to deploying Duo across the College’s services.
What if I need additional assistance?
SJR State IT is here to help! Reach out to us by:
- Calling the Helpdesk at (386)312-4142
- E-mailing ITDepartment@SJRState.edu