Xavier Duo User's Guide

Inside this article:

 

What is Multi-Factor Authentication (MFA)? 

Multi-factor authentication (MFA), also referred to as two-factor authentication, provides an extra layer of security when you login to an account online. You may already be using MFA with your bank, credit card, or Social Security accounts.

All active, online accounts (faculty, and staff) at Xavier University are required to enroll in MFA. Duo Security, a trusted company used by many higher education institutions, provides our MFA service.

MFA is simple to use: When you login with your password, you will receive an authentication request on a device such as a smartphone, cell phone, tablet, or landline to finish the login process.  In other words, MFA combines something you know (your password) with something you have (a device), to fulfill an authentication request and complete your login process.

 

Why does Xavier Use MFA?

Xavier University is committed to protecting the identity and personal information of its community members. We use multi-factor authentication to reduce the risk of unauthorized users gaining access to Xavier accounts. Data security continues to be a concern in the private and public sectors, including corporations of all sizes, government organizations, and schools. Hackers target higher education institutions for their intellectual property, personally identifiable information, and financial information.

Which Services Require MFA?

  • Banner (on and off-campus)
  • Email (off-campus)
  • Nexus/Sharepoint (off-campus)
  • VPN (off-campus)

 

How Does It Work? 

Once you've enrolled in Duo, you're ready to go: You'll login as usual with your username and password, and then use your device to verify that it's really you.  

 You can opt to have your authentication remembered for 4 days, if you are using the same browser on the same device.

 

Devices to verify your identity 

A smartphone, landline, cell phone, tablet, or a hardware token may be used to verify your identity. Once you enroll with Duo you can set up one or more devices for authenticating, such as your mobile phone and a landline, two different mobile devices, or a landline and a hardware token when traveling. We encourage you to enroll multiple devices as a backup in case your preferred device is not available (i.e., left at home, battery depleted). 

 

Ways to verify your identity 

Push notifications to smartphones and tablets 

With the Duo MFA mobile app, Duo Mobile, a notification is pushed to you in response to the authentication request that you approve or deny.

Mobile passcodes 

The Duo MFA mobile app, Duo Mobile, generates a new, unique six-digit passcode to enter at the multi-factor prompt during login.

Phone callbacks 

Your enrolled phone number is called. Answer the phone and press any key to complete the login process.

Hardware tokens 

A hardware token is a small device you carry. Pressing a button on the token generates a new passcode that you type into the multi-factor prompt. No connection to the Internet is required.

 

Supported Devices 

The following links provide device-specific Duo guides, by platform:

 

How to Enroll in Duo

You will be asked to enroll in Duo via an email sent from Duo Security or when you first encounter an MFA-enabled application through a browser. You will enroll the phones, tablets, and/or other devices you will use for authentication to Xavier systems. Duo will not ask for your Xavier ID and password.

To enroll, use a browser (such as Chrome, Firefox, Safari, Edge, and Internet Explorer) on a desktop or laptop computer. Alternatively, you may use a mobile device or tablet to enroll and request an activation link be sent to an email address accessible on your mobile device or tablet.

If you need help during the enrollment process, please contact the Help Desk at 745-HELP, or log a ticket via our Service Portal.
  1. You will see the Welcome Screen. Click Start setup.

  2. Select the type of device you’d like to enroll and click Continue. The device can be a smartphone, cell phone, landline telephone, or tablet (Apple OS or Android). If none of those devices is suitable, you may request a hardware token from IT.

     

  1. Select your country from the drop-down list and enter your phone number for the device you’ll use for authentication. Enter an extension if you chose Landline in the previous step. Please double-check that your phone number is entered correctly, check the box, and click Continue. If you enroll a tablet, you will not be prompted to enter a phone number. 

  2. Choose your device’s operating system and click Continue

  1. Install and use Duo Mobile app to authenticate quickly and easily on a smartphone or tablet. It’s a great alternative to authenticating with a phone call or entering a passcode. Download Duo Mobile from your app store and follow the installation instructions. After it’s installed, return to the enrollment window for installing Duo Mobile and click I have Duo Mobile installed.

  2. Activate Duo Mobile by scanning the barcode with the app's built-in barcode scanner. Follow the onscreen platform-specific instructions for your device.



    The Continue button is clickable after you scan the barcode successfully:

  3. Confirm that the correct phone number is listed. You can select a particular type of delivery method of the second factor or leave the default. Click Finish Enrollment to complete the process.

  4. That’s it! You have completed enrollment and will now be able to use two factor authentication to Xavier systems that support it.

0% helpful - 1 review

Details

Article ID: 524
Created
Mon 9/24/18 1:28 PM
Modified
Wed 6/12/19 10:32 AM