FAQ: Two-Factor Authentication (2FA) with Duo

Duo Security is a 3rd party application that SJR State is using for Two-Factor Authentication. The most common way to use Duo is via their mobile app. Duo Mobile is an app that you install on your smartphone to generate passcodes to login or receive push notifications for easy authentication. It works with Duo Security’s Two-Factor Authentication service to make your logins more secure.

It has become increasingly easier for malicious actors to compromise the security of a single password. They can often be guessed, stolen, or hacked. Even users that have followed strong password recommendations can be compromised. Two-Factor Authentication adds another layer of security, even when your password is unknowingly compromised. Two-Factor Authentication enhances the security of your account by using a device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.

Once your SJR State assigned account is created, it is Duo protected. When you go to sign into your assigned account for the first time, you will be prompted to complete Duo enrollment. See the Tutorial Video section below to see an example of the process.

Duo requires a capable 2FA device to complete the process. The mobile app is free and the easiest method to interact with Duo. Other options include a Duo Hardware Token or a physical security key.

Duo Hardware Token: These are key-fob like devices that produce a 6 digit code. These can only be purchased directly from SJR State via our SJR State Bookstore.

Security Keys: These are external USB keys that you plug into your device that you are using to access your SJR State account. One of the most popular security keys are made by Yubico and can be purchased by many resellers. For more information about Security Keys, please refer to https://guide.duo.com/universal-prompt#add-security-key.

Managing your Duo Enrollment with Duo Central:
https://guide.duo.com/enrollment
 

• 2FA (Two-Factor Authentication)
  • An additional layer of authentication beyond a username and password. 2FA involves something you know (password) plus something you have with you (like Duo Mobile on your smartphone) to prevent someone from logging in with only your password. With Duo 2FA, you still enter your username and password. The second factor provided by Duo is simply an added layer of security on top of your existing credentials. We recommend using Duo Push via the Duo Mobile app to perform 2FA.
• Duo Prompt
  • This interactive prompt lets you choose how to verify your identity each time you log in (e.g. “Duo Push” or “Call Me”) to a web-based application. The Duo Prompt allows you to enroll and authenticate.
• Passcode
  • These are numeric codes that can be generated either via the Duo Mobile app, SMS (text message), or a hardware token, depending on what your IT administrator permits. Passcodes may be used at any time and are particularly handy for authenticating when your 2FA device doesn't have internet or cellular service.
• Push Notification (Duo Push)
  • A push authentication request that is sent to the Duo Mobile app on an enrolled device. Push notifications include information like the geographical location of the access device, IP address of the access device, and the application being accessed so you can verify whether the push is real or fraudulent.