Two-factor Authentication
In an effort to keep your data safe, St. Clair County Community College is enrolling all SC4 accounts in Duo Security two-factor authentication (2FA), also known as multifactor authentication (MFA).
Duo Security is a company that provides a cloud-based software service that utilizes two-factor authentication to ensure secure access to services and data.
Two-factor authentication provides a second layer of security to any type of login, requiring extra information or a physical device to log in, in addition to your password.
By requiring two different channels of authentication, we can protect user logins from remote attacks that may exploit stolen usernames and passwords.
The factors may include:
Something you have:
● A mobile phone that can receive text messages or use an app to approve authentication requests.
Something you know:
● A unique username and password.
Duo’s self-enrollment process makes it easy to register your phone or tablet and activate the Duo Mobile application so you can receive Duo requests via push notification and tap to approve and login. For step-by-step instructions to enroll, use the link below.
Faculty and staff will be prompted to authenticate to Duo when accessing Microsoft Office 365 from outside the college’s network. Accessing these services from the college’s network, whether onsite or through a VPN connection, will not require MFA authentication.
All Microsoft Office 365 applications are protected by Duo MFA. This includes all apps that can be found at https://portal.office.com.
No. Having a smartphone makes for an easier and more secure experience with Duo Push. However, it also is possible to enroll a non-smartphone mobile device to receive SMS text message passcodes.
Duo Mobile is a free mobile application (app) that you install on your smartphone or tablet to generate passcodes for login or receive push notifications for easy authentication on your mobile device. It works with Duo Security’s two-factor authentication (2FA) service to make your logins more secure.
If you have a smartphone or tablet, we recommend Duo Push, as it is quick, easy to use, and secure. See an introduction to Duo Security and a demonstration of Duo Push in this short video: https://www.youtube.com/watch?v=_T_sJXnSM98
Duo Push authentication requests require a minimal amount of data – less than 2KB per authentication. For example, you would only consume 1 megabyte (MB) of data if you were to authenticate 500 times in a given month.
There are several reasons this could be happening. Please try the following to troubleshoot:
- Make sure your enrolled device has a cellular network or WiFi connection.
- Have the Duo Mobile app open when you authenticate.
- Try these additional push troubleshooting steps:
- If the above solutions don’t work, try using another authentication method, such as passcodes provided in the Duo Mobile app.
See this Duo Knowledge Base article for information on authenticating without cell or internet service: https://help.duo.com/s/article/4449
If you have access to the “Manage devices” or “My Settings & Devices” link (the self-service portal) at the Duo Prompt and are currently able to authenticate with a device, you may:
● Add additional devices
● Designate your “default” device that receives authentication requests in addition to your preferred authentication method (available in the Traditional Prompt)
● Reactivate Duo Mobile if you got a new phone but kept your number
● Change the name of your device (ex. “Personal Cell” or “Work Phone”)
● Remove a device Learn more about managing your devices here: https://guide.duo.com/manage-devices
Please contact your IT help desk immediately.
No. Your password is only verified by your organization and never sent to Duo. Duo provides only the second factor, using your enrolled device to verify it’s actually you who is logging in.
No. The Duo Mobile app has no access to change settings or remotely wipe your phone. The visibility Duo Mobile requires is to verify the security of your device, such as OS version, device encryption status, screen lock, etc. We use this to help recommend security improvements to your device. You always are in control of whether or not you take action on these recommendations.
