Topics Map > Services > Security > Multi-Factor Authentication
Multi-Factor Authentication (MFA)
Multi-factor authentication (MFA) requires two steps to verify your identity. Duo is the vendor for MFA.
Overview
University System Services
NDSU employees must use MFA to verify their identity before logging in to the University System services such as, Office 365 and PeopleSoft. You need to log in with your University System ID and password as well as your, second factor.
NDSU Services
Employees and students will be required to use MFA for NDSU services, including all services that use NDSU CAS (Central Authentication Services), InCommon/eduGAIN, Google Apps, Navigate and some remote desktop services.
Getting Started
Users will be prompted to set up MFA when they are activating their NDUS/NDSU accounts. Step-by-step instructions can be found at https://guide.duo.com/enrollment.
Best Practices
- Do not approve a Duo prompt, or press 5 on Duo Phone call if you are not currently expecting one. Immediately contact the IT Help Desk for assistance if you receive a DUO prompt you did not initiate.
- If you start to receive a large amount of prompts, your password may have been compromised and you will need to change that password as soon as possible. Immediately contact the IT Help Desk for assistance.
- No reputable service will call you out of the blue and tell you that you will need to approve the next Duo prompt for security reasons. Report these calls to the IT Help Desk
Learn More/How To's
Q: What should I do if I receive a DUO prompt when I didn't log into anything?
A: If you receive a DUO prompt that you did not initiate, deny the prompt and mark it as fraud. (press * on a Duo phone call to report fraud) Change your password for all accounts that use that password. For instructions on resetting your NDSU and NDUS passwords, visit https://kb.ndsu.edu/104555. If you have any questions, you can contact the IT Help Desk at 701-231-8685.
Q: I am unable to check the "Remember me for 30 days" box because I am automatically prompted for my Duo Push.
A: To see the option to "Remember me for 30 days," click the Cancel button on the prompt, check the box, and click the Send Me a Push button to resend your prompt. Confirm the prompt.
Q: My code-generating token is not working.
A: Your token may be out of sync. Contact the IT Help Desk and they can help you configure your token to work
Q: How do I get backup codes?
A: You can have backup codes texted to your phone, but it must be done in advance. On the Duo authentication screen, click "enter a passcode". Then click "text me new codes". Print or write the codes and save them in your wallet or purse. They are good for five months.
Q: I can't log in because the Duo prompt on my iPhone is blank.
A: This is caused by the Content Restrictions in iOS. Instructions on how to fix this can be found at https://help.duo.com/s/article/3710?language=en_US
Q: I'm not able to receive the Duo Push on my Android phone.
A: Troubleshooting tips and potential fixes to this problem can be found at https://help.duo.com/s/article/2050?language=en_US
Use Cases
Uses will receive Duo prompts when trying to sign into all services that use NDSU CAS (Central Authentication Services), InCommon/eduGAIN and some remote desktop services.