Topics Map > Services > Security > Multi-Factor Authentication

Multi-Factor Authentication (MFA)

Multi-factor authentication (MFA) requires two steps to verify your identity. Duo is the vendor for MFA.

Overview

University System Services 

NDSU employees must use MFA to verify their identity before logging in to the PeopleSoft Finance portal and to access specific information within HRMS Self-Service or Campus Solutions. For these University System services, you need to log in with your University System ID and password as well as your second factor. 

NDSU Services 

Employees and students may be required or have the option to use MFA for NDSU services, including all services that use NDSU CAS (Central Authentication Services), InCommon/eduGAIN and some remote desktop services. If you opt-in for multi-factor for NDSU services, you will use it for most NDSU services, including Office365, Google Apps and Navigate.

Help, consultation, training

IT Help Desk

 

Intended Audience

  • Faculty
  • Staff
  • Students
  • Former Employees 
  • Affiliates

Using this solution

Availability

24/7/365 [*Standard outages]

Cost

University-funded: no charge

Requirements

  • Working phone number

Getting Started

Users will be prompted to set up MFA when they are activating their NDUS/NDSU accounts. Step-by-step instructions can be found at https://guide.duo.com/enrollment

Best Practices

Do not approve Duo prompt if you are not currently expecting one. Immediately contact the IT Help Desk for assistance if you receive a DUO prompt you did not initiate.

Learn More/How To's

Q: What should I do if I receive a DUO prompt when I didn't log into anything?
A: If you receive a DUO prompt that you did not initiate, deny the prompt and mark it as fraud. Change your password for all accounts that use that password. For instructions on resetting your NDSU and NDUS passwords, visit https://kb.ndsu.edu/104555. If you have any questions, you can contact the IT Help Desk at 701-231-8685.

Q: I am unable to check the "Remember me for 30 days" box because I am automatically prompted for my Duo Push. 
A: To see the option to "Remember me for 30 days," simply click the Cancel button on the prompt, check the box, and click the Send Me a Push button to resend your prompt. Confirm the prompt. 

Q: My code-generating token is not working. 
A: Your token may be out of sync. Call the IT Help Desk. My USB token only works with Chrome. Contact the IT Help Desk and they can help you configure your token to work with other browsers 

Q: How do I get backup codes? 
A: You can have backup codes texted to your phone, but it must be done in advance. On the Duo authentication screen, click "enter a passcode". Then click "text me new codes". Print or write the codes and save them in your wallet or purse. They are good for five months. 

Q: I can't log in because the Duo prompt on my iPhone is blank. 
A: This is caused by the Content Restrictions in iOS. Instructions on how to fix this can be found at https://help.duo.com/s/article/3710?language=en_US 

Q: I'm not able to receive the Duo Push on my Android phone. 
A: Troubleshooting tips and potential fixes to this problem can be found at https://help.duo.com/s/article/2050?language=en_US

Use Cases

Uses will receive Duo prompts when trying to sign into all services that use NDSU CAS (Central Authentication Services), InCommon/eduGAIN and some remote desktop services. 

Related resources




Keywords:service, mfa, multi factor authentication, authentication, multi, factor, security, two factor, duo multifactor 2fa,2factor, 2, fa   Doc ID:99732
Owner:Steve S.Group:IT Knowledge Base
Created:2020-03-30 11:23 CDTUpdated:2022-02-24 15:07 CDT
Sites:IT Knowledge Base
CleanURL:https://kb.ndsu.edu/mfa
Feedback:  1   1