FAQ: Two-Factor Authentication (2FA) with Duo

2FA stands for Two-Factor Authentication. As the name implies, it means you need multiple factors of authentication to gain access to the resource you are signing into. The most common factor is something you know, your password. Another factor is something you have, such as a code generated on your mobile device or key fob. SJR State will be deploying this second factor via Duo Security.

By requiring different channels of authentication, we can protect user logins from remote attacks that may exploit stolen usernames and passwords.

It has become increasingly easier for malicious actors to compromise the security of a single password. They can often be guessed, stolen, or hacked. Even users that have followed strong password recommendations can be compromised. Two-Factor Authentication adds another layer of security, even when your password is unknowingly compromised. Two-Factor Authentication enhances the security of your account by using a device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.

Duo Security is a 3rd party application that SJR State is using for Two-Factor Authentication.

Duo Mobile is a mobile app that you install on your smartphone or tablet to generate passcodes for login or receive push notifications for easy authentication on your mobile device. It works with Duo Security’s Two-Factor Authentication (2FA) service to make your logins more secure.

All SJR State employees will begin receiving Duo enrollment emails next week on June 27^th. Below is an example of this email. In an effort to make these Duo messages distinct from other external emails, you will see a bright green authorized bar instead of the more familiar yellow warning bar. The email will come from no-reply@duosecurity.com.

Once you receive this email, we highly recommend everyone complete enrollment as soon as possible. Please make sure you have your smartphone nearby and then follow the link to begin the enrollment process. Duo will send you another email reminder 2 days later, 10 days later, and then again every 30 days until your enrollment is complete. If you have not enrolled by the date indicated for your group, you will be required to enroll on that date when you first attempt to sign into your account.

• June 27^th – Duo enrollment opens for all SJR State employees
• July 25^th – Duo use is required for All Banner Admin Users
• Aug 29^th – Duo use is required for remaining Staff and Faculty
• Aug 29^th – Duo enrollment opens for all Students
• Sept 26^th – Duo use is required for all Students

• 2FA (Two-Factor Authentication)
  • An additional layer of authentication beyond a username and password. 2FA involves something you know (password) plus something you have with you (like Duo Mobile on your smartphone) to prevent someone from logging in with only your password. With Duo 2FA, you still enter your username and password. The second factor provided by Duo is simply an added layer of security on top of your existing credentials. We recommend using Duo Push via the Duo Mobile app to perform 2FA.
• Duo Prompt
  • This interactive prompt lets you choose how to verify your identity each time you log in (e.g. “Duo Push” or “Call Me”) to a web-based application. The Duo Prompt allows you to enroll and authenticate.
• Passcode
  • These are numeric codes that can be generated either via the Duo Mobile app, SMS (text message), or a hardware token, depending on what your IT administrator permits. Passcodes may be used at any time and are particularly handy for authenticating when your 2FA device doesn't have internet or cellular service.
• Push Notification (Duo Push)
  • A push authentication request that is sent to the Duo Mobile app on an enrolled device. Push notifications include information like the geographical location of the access device, IP address of the access device, and the application being accessed so you can verify whether the push is real or fraudulent.