Multi-Factor Authentication

Protect your information with MFA. Here’s the Why, When, and How.

It works!

MFA already helps protects University applications such as Banner and VPN. Before implementing MFA, university payroll was a large target for attackers attempting to steal employee paychecks. Since implementing this technology, attacks on payroll customers have effectively vanished.

The rise of phishing attacks compromising accounts has created a need to further protect USD resources. Looking at other academic institutions who have implemented MFA across their services, it has been proven that compromised accounts can drop to nearly zero.

A password is no longer enough.

Attacks on accounts are increasingly sophisticated. MFA helps to determine that you are who you say you are and are not someone with a stolen password.

DUO logo

How Does Multi-Factor Authentication Work?

Once you have enrolled in  MFA, when you attempt to access any of the University’s Critical Applications, you will be prompted to enter your username and password as usual (the first “factor”). You will then be taken to the Duo’s MFA screen where you will select the device of your choice and the preferred method of verification—push notification, a phone call, or a passcode—you will use to verify that it’s you (the second “factor” or multi-factor).

Who and What is Covered by MFA?

Currently, you are required to use MFA if you access any of the following applications:

  • Banner
  • Oracle INB
  • VPN Connectivity

As of December of 2021, USD ITS will be taking a phased-in approach adoption of MFA with DUO for applications including but not limited to:

  • Blackboard
  • Google Apps
Note: These steps will affect all users at USD including Students, Staff and Faculty.

How do I add a new device or manage an existing one?

Please refer to the Quick Guides on the main page for instructions on managing devices and enrolling/registering a new phone, tablet, or desk phone.

How long does it take to enroll/register a device for MFA?

5 to 10 minutes.

How many devices can I add?

There is no limit on the number of devices that can be added. We recommend that all users add at least 2 devices, such as a cellphone/smartphone and a landline/desk phone. If you do not have a direct extension (i.e. people need to enter 619-260-4600 and then your extension), you cannot add your landline yourself. Please contact the ITS Help Desk so that we can add it for you.

Do I need to have a smartphone to use MFA?

No, you can use a smartphone, cell phone, landline (such as your office or home phone), or tablet. A complete and up-to-date list of authentication methods is available on the MFA website. We recommend that users who have a smartphone choose to use them, since they are the easiest to use with MFA.

What if I forget my smartphone at home?

We encourage users to set up multiple authentication devices with MFA, so that when one method is unavailable, you have others from which to choose. For example, you could set up your smartphone for “push” and also your office phone and home phone to do callback. If you do not have a direct extension (i.e. people need to enter 619-260-4600 and then your extension), you cannot add your landline yourself. Please contact the ITS Help Desk so that we can add it for you.

What happens if I lose my phone?

Contact the ITS Help Desk immediately if you lose your phone or suspect that it's been stolen. The support specialist will disable it for MFA and help you log in using a one-time bypass code. While it's important that you contact the Help Desk if you lose your phone, remember that your password will still protect your account.

What happens if I upgrade or replace my phone with the same number?

If you have a new phone with the same number, see the Enrolling a New Phone with the Same Phone Number Quick Guide on our MFA Webpage for directions on how to activate DUO mobile and receive push notifications. Push notifications are the simplest and quickest way to authenticate.

What if I don’t have a data plan on my phone or cellular service?

The Duo smartphone app provides options that work without a data plan, a texting plan or even a connection, if necessary. The Duo Mobile App can generate the required code without need of either a cell signal or data plan, and it can do so anywhere in the world. If you have a signal and data plan, the App makes two-factor authentication as easy as a pushing a single button, but if you don’t, you can use the app to generate a six digit code and enter that instead.

The Duo Mobile App can generate a passcode without a cellular or wireless connection. Alternately, you may use a landline phone if an Internet connection is unavailable.

What is the user experience if you are using your phone or an iPad on a cellular network or on a non-USD Wi-Fi network and need to log in?

You will be prompted to MFA as if you are on campus network. If the registered device is the same as the one being used to login, the Duo Mobile App will notify & prompt for confirmation and users can confirm access the usual way. Alternatively a secondary device can also be used to confirm the MFA

How would one log into a USD application or Torero Mail on an airplane equipped with Wi-Fi? What would the experience be in this situation using a laptop, iPad, or phone?

This experience will be the same no matter what off campus location you are trying to log in from. You will be required to authenticate with MFA. In the case where a push or text is not working, your phone will function like a token while in airplane mode generating a passcode every 30 seconds.

 

Can I use the Duo’s Mobile App internationally?

The MFA smart phone app is designed to work internationally. If you install the app, it can generate the required code without need of either a telephone signal or data plan, and it can do this anywhere in the world. If you have a signal and data plan, the app makes two-factor authentication as easy as a pushing a single button, but if you don’t have one of those two things, you can use the app to generate a six digit code and enter that manually.

Can the system handle international phone numbers?

Yes, MFA can handle international phone numbers. If entering an international phone number, you can leave a space between country code, city code, and the phone number.

How long will my authentication last?

You will be required to MFA every time you log in. This will last for the lesser of your session or 24 hours. You will have the option to remember your device for 1 day with Duo MFA. This functionality is browser-based so you will have to reauthenticate in each web browser that you use.

Need more information?

Go to the webpage referenced and maintened by DUO. DUO Guide.

  • What is Two-Factor Authentication (MFA)?
  • How do I set up MFA for the first time?
  • Why Do I Need to Use MFA?
  • Who is eligible to use DUO MFA?
  • Am I required to use Multi-factor authentication?
  • What happens if I lose or change my device?
  • What if I have questions or concerns about the requirement to use 2FA?
  • Does DUO see my password?
  • Can I add multiple MFA Devices?
  • FAQs about Using 2FA