Duo Two-Factor Authentication Live Thursday April 7.

Duo Goes Live Thursday April 7.At 9:30 AM on Thursday, April 7, 2016, OIT will implement two-factor authentication for SMU staff to certain online services, starting with my.SMU. On April 21st, the two-factor authentication requirement will be expanded to all SMU employees. The two-factor authentication utilizes a solution from Duo Security called Duo Mobile.

What is Duo and what does it mean to me?

DuoDuo two-factor authentication (2FA) adds a second layer of security to online services. Verifying your identity using a second factor (like your phone or another mobile device) helps prevent anyone but you from using your SMU account to log in to a protected service, even if they know your password. In other words, Duo provides assurance that only you can access protected information.

Duo and my.SMU

The first system to be protected with Duo two-factor authentication is the Payroll, time reporting, HR & Benefits areas of my.SMU. This will provide protection for your direct deposit accounts, bank routing information, tax statements, and other sensitive employee data. Your access to Web Clock will also be protected.

What do I need to do?

  1. Download the Duo Mobile app from your smartphone’s app store. Duo Mobile works with Apple iOS, Google Android, BlackBerry, Palm, Windows Phone 7, Windows Mobile 8.1 and 10, and J2ME/Symbian.
    Don’t have a smartphone, don’t worry. You can also use a landline, tablet, or an SMS.
  2. On your desktop or laptop computer, log in to my.SMU and access secure information, such as your past paychecks or W2.
  3. Follow the on screen DUO enrollment instructions. We suggest having your smartphone available to scan a QR code with the Duo Mobile app.
  4. Add a second device, such as your office phone.

Step by step instructions can be found at blog.smu.edu/itconnect/2016/03/29/duo-two-factor-authentication-2fa-setup/

To find out more about Duo two-factor authentication, including FAQs about Duo and video tutorials, please visit the Duo service page at www.smu.edu/oit/services/duo.

If you have any problems or concerns, please contact
the IT Help Desk at 214-768-HELP (4357).

Setting Up Duo Two-Factor Authentication at SMU

DuoThe following steps are our recommendation for the initial setup of Duo’s Two-Factor Authentication (2FA) at SMU.

  1. Install the Duo Mobile app on a smartphone or tablet.
  2. Enroll your mobile device with Duo.
  3. Activate Duo Mobile for your Device.
  4. Add a second device, such as your office phone.
  5. Configure Duo to automatically send a Duo Push to your mobile device.

We will go through these steps to get you started with two-factor authentication with Duo. Continue reading Setting Up Duo Two-Factor Authentication at SMU

Two-Factor Authentication Coming to SMU

DuoOn Thursday, April 7, 2016, OIT will begin rolling out two-factor authentication to certain online SMU systems, starting with the personal information section of My.SMU. The two-factor authentication will be handled by a third party called Duo Security.

Some features mentioned in the video may not be supported by our agreement.

What is Two-Factor Authentication?

Two-factor authentication (2FA) adds a second layer of security to online services. Verifying your identity using a second factor (like your phone or other mobile device) helps prevent anyone but you from using your SMU account to login, even if they know your password. Basically, it is how SMU will know that you are who you say you are.

How It Works

How two-factor authentication (2FA) works

Once you’ve enrolled in Duo you’re ready to go: You’ll login as usual with your SMU ID and password, and then use your device to verify that it’s you. This can be done via SMS, voice call, one-time passcode, the Duo Mobile smartphone app, and so on.

No mobile phone? You can also use a landline or tablet, or even a USB hardware token. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, a landline and a hardware token, two different mobile devices, etc.

Why Are We Doing This?

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account. We had over 50 accounts compromised due to phishing and malware last year alone.

Duo notification Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo, you’ll be alerted right away (on your phone) if someone is trying to log in as you.

This second factor of authentication is separate and independent from your SMU ID and password — Duo and SMU never sees your password.

How Do I Get Started?

Duo is currently only available on certain systems.

You will be prompted to enroll in Duo two-factor authentication upon your next log in to a protected system. Just follow the directions to enroll your device. Detailed enrollment instructions can be found on the Duo service page under the Duo Documentation and Training tab.

Much of text and images in this article was provided by Duo Security. https://guide.duo.com
UPDATED 04/03/2016: Post updated to include rollout dates and areas protected by Duo.