Security is No Joke: Let’s Duo

DuoBeginning April 1, 2019, all matriculated students will be required to use Duo Security’s Two-factor authentication (2FA) when accessing my.SMU. Yes, we know that’s April Fools Day, but this is no joke!

Duo Two-factor authentication will be used to verify a student’s identity when logging into my.SMU. This security measure will be enforced to prevent unauthorized use of a student’s SMU account. Continue reading Security is No Joke: Let’s Duo

The Best Way to Authenticate with Duo

DuoIt has been several months since the University has required Duo Two-Factor Authentication to connect to secure services like my.SMU. While there are several ways to verify your identity with Duo Security, Duo has recently published an easy-to-read, one-page guide on why Duo Push with the Duo Mobile app is the best way to authenticate. Continue reading The Best Way to Authenticate with Duo

Duo Required for my.SMU Starting October 10th.

DuoSince April, the University has required Duo two-factor authentication (2FA) for all SMU employees to access the Payroll, time reporting, HR & Benefits areas of my.SMU. Beginning October 10th, Duo will be required to access any part of my.SMU. In an effort to protect our systems, we need all employees to register at least one device with Duo. We encourage you to follow the instructions at smu.edu/duo to enroll in Duo today to continue uninterrupted access to my.SMU. Continue reading Duo Required for my.SMU Starting October 10th.

Duo: What’s in it for me?

DuoIf you haven’t yet enrolled in our new security service, Duo, don’t chalk this blog post up as a friendly reminder but rather an important call to action. Did you know if a hacker compromises your account not only can they get access to critical University information but they can also retrieve personal data such as direct deposit information?  The last thing any employee wants is to learn that the paycheck they thought was being deposited in their account ended up somewhere else. Unfortunately, this has happened in the past and you can read about it in last month’s SMU security report. Continue reading Duo: What’s in it for me?

Duo Two-Factor Authentication Live Thursday April 21.

Duo Two-Factor Authentication Live Thursday April 21.

At 9:30 AM on Thursday, April 21, 2016, OIT will implement two-factor authentication for all SMU employees to certain online services, starting with my.SMU. This rollout includes student workers. The two-factor authentication utilizes a solution from Duo Security called Duo Mobile.

What is Duo and what does it mean to me?

Duo two-factor authentication (2FA) adds a second layer of security to online services. Verifying your identity using a second factor (like your phone or another mobile device) helps prevent anyone but you from using your SMU account to log in to a protected service, even if they know your password. In other words, Duo provides assurance that only you can access protected information.

Duo and my.SMU

The first system to be protected with Duo two-factor authentication is the Payroll, time reporting, HR & Benefits areas of my.SMU. This will provide protection for your direct deposit accounts, bank routing information, tax statements, and other sensitive employee data. Your access to Web Clock will also be protected.

What do I need to do?

  1. Download the Duo Mobile app from your smartphone’s app store. Duo Mobile works with Apple iOS, Google Android, BlackBerry, Palm, Windows Phone 7, Windows Mobile 8.1 and 10, and J2ME/Symbian.
    Don’t have smartphone, don’t worry. You can also use a landline, tablet, or an SMS.
  2. On April 21, use your desktop or laptop computer to log in to my.SMU and access secure information, such as your past paychecks or W2.
  3. Follow the on-screen DUO enrollment instructions. We suggest having your smartphone available to scan a QR code with the Duo Mobile app.
  4. Add a second device, such as your office phone, to Duo.

Step by step instructions can be found at blog.smu.edu/itconnect/2016/03/29/duo-two-factor-authentication-2fa-setup/

To find out more about Duo two-factor authentication, including FAQs about Duo and video tutorials, please visit the Duo service page at smu.edu/duo.

If you have any problems or concerns, please contact
the IT Help Desk at 214-768-HELP (4357).

Duo Two-Factor Authentication Live Thursday April 7.

Duo Goes Live Thursday April 7.At 9:30 AM on Thursday, April 7, 2016, OIT will implement two-factor authentication for SMU staff to certain online services, starting with my.SMU. On April 21st, the two-factor authentication requirement will be expanded to all SMU employees. The two-factor authentication utilizes a solution from Duo Security called Duo Mobile.

What is Duo and what does it mean to me?

DuoDuo two-factor authentication (2FA) adds a second layer of security to online services. Verifying your identity using a second factor (like your phone or another mobile device) helps prevent anyone but you from using your SMU account to log in to a protected service, even if they know your password. In other words, Duo provides assurance that only you can access protected information.

Duo and my.SMU

The first system to be protected with Duo two-factor authentication is the Payroll, time reporting, HR & Benefits areas of my.SMU. This will provide protection for your direct deposit accounts, bank routing information, tax statements, and other sensitive employee data. Your access to Web Clock will also be protected.

What do I need to do?

  1. Download the Duo Mobile app from your smartphone’s app store. Duo Mobile works with Apple iOS, Google Android, BlackBerry, Palm, Windows Phone 7, Windows Mobile 8.1 and 10, and J2ME/Symbian.
    Don’t have a smartphone, don’t worry. You can also use a landline, tablet, or an SMS.
  2. On your desktop or laptop computer, log in to my.SMU and access secure information, such as your past paychecks or W2.
  3. Follow the on screen DUO enrollment instructions. We suggest having your smartphone available to scan a QR code with the Duo Mobile app.
  4. Add a second device, such as your office phone.

Step by step instructions can be found at blog.smu.edu/itconnect/2016/03/29/duo-two-factor-authentication-2fa-setup/

To find out more about Duo two-factor authentication, including FAQs about Duo and video tutorials, please visit the Duo service page at www.smu.edu/oit/services/duo.

If you have any problems or concerns, please contact
the IT Help Desk at 214-768-HELP (4357).

Setting Up Duo Two-Factor Authentication at SMU

DuoThe following steps are our recommendation for the initial setup of Duo’s Two-Factor Authentication (2FA) at SMU.

  1. Install the Duo Mobile app on a smartphone or tablet.
  2. Enroll your mobile device with Duo.
  3. Activate Duo Mobile for your Device.
  4. Add a second device, such as your office phone.
  5. Configure Duo to automatically send a Duo Push to your mobile device.

We will go through these steps to get you started with two-factor authentication with Duo. Continue reading Setting Up Duo Two-Factor Authentication at SMU

Two-Factor Authentication Coming to SMU

DuoOn Thursday, April 7, 2016, OIT will begin rolling out two-factor authentication to certain online SMU systems, starting with the personal information section of My.SMU. The two-factor authentication will be handled by a third party called Duo Security.

Some features mentioned in the video may not be supported by our agreement.

What is Two-Factor Authentication?

Two-factor authentication (2FA) adds a second layer of security to online services. Verifying your identity using a second factor (like your phone or other mobile device) helps prevent anyone but you from using your SMU account to login, even if they know your password. Basically, it is how SMU will know that you are who you say you are.

How It Works

How two-factor authentication (2FA) works

Once you’ve enrolled in Duo you’re ready to go: You’ll login as usual with your SMU ID and password, and then use your device to verify that it’s you. This can be done via SMS, voice call, one-time passcode, the Duo Mobile smartphone app, and so on.

No mobile phone? You can also use a landline or tablet, or even a USB hardware token. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, a landline and a hardware token, two different mobile devices, etc.

Why Are We Doing This?

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account. We had over 50 accounts compromised due to phishing and malware last year alone.

Duo notification Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo, you’ll be alerted right away (on your phone) if someone is trying to log in as you.

This second factor of authentication is separate and independent from your SMU ID and password — Duo and SMU never sees your password.

How Do I Get Started?

Duo is currently only available on certain systems.

You will be prompted to enroll in Duo two-factor authentication upon your next log in to a protected system. Just follow the directions to enroll your device. Detailed enrollment instructions can be found on the Duo service page under the Duo Documentation and Training tab.

Much of text and images in this article was provided by Duo Security. https://guide.duo.com
UPDATED 04/03/2016: Post updated to include rollout dates and areas protected by Duo.