Some users will want to enroll for 2FA as soon as it is available, depending on the system they access. When will I be required to enroll for two-factor? Affected users will receive additional notification before changes become active. Other systems will be identified and tested with 2FA as needed.Access to Office 365 from a non-University network connection through a browser ( for UTHSCSA users and non-UTHSCSA users).Access to secure University information such as Student Administration, Financials, Employee Self-Service, and others.Accessing servers or systems that contains confidential university data using Remote Desktop Protocol (RDP) or secure shell (SSH).Those devices already registered will not need to re-register for Duo Mobile.Only required when accessing the desktop from untrusted networks (e.g., from home, a hotel, a restaurant, etc.).Accessing the university network from off-campus via Hosting Virtual Desktop (HVD).Accessing the university network from off-campus via Virtual Private Network (VPN).This will eventually be implemented for all systems over the course of the next several years. With 2FA you’ll be alerted right away (on your phone) if someone is trying to log in as you.Īll information resources with sensitive information used by faculty and staff will require two-factor authentication. When an individual, described in the first bullet point, who is working from a Remote Location accesses a web-based interface to University email.ĢFA adds a second layer of security, keeping your account secure even if your password is compromised.When a server administrator or other individual working from a remote location uses administrator credentials to access a server that contains or has access to confidential university data.When an individual working from a remote location uses an online function such as a web page to modify employee banking, tax, or financial information.When an employee or individual working on behalf of the university logs on to a university network using an enterprise remote access gateway such as VPN, Terminal Server, Connect, Citrix or similar services.Specifically, in the following situations: For our application, the two components of two-factor authentication are something you know (password) and something you have (a mobile device or landline phone).ĢFA is required in situations that involve remote access to resources. Multi-factor authentication is using two or more of the factors with your username to authenticate yourself.Īt the university, we will be implementing two-factor authentication (2FA) with our username.

What you are, e.g., something unique about yourself (fingerprint, etc.).

What you have, e.g., a physical device you carry with you (mobile device or token).

There are three primary factors of authentication they are: Our password is a single-factor authentication for our username and is the most common form of authentication in use. Our username says who we are and we use passwords that no one else is supposed to know to prove who we are. At the Health Science Center, we authenticate ourselves whenever we log in to our computers.

Can I request an exception to the 2FA requirement for my system and/or application?Īuthentication is the process of determining whether someone or something is, in fact, who or what it is declared to be.

Do I need to install software on my laptop or home computer to do two-factor authentication?.

Why do I still need two-factor protection?

My username and password do not have access to anything confidential.

Is the Duo Mobile app trustworthy to install on my personal device?.

Will my device need to have international voice, texting or data to authenticate?

Do I need to use Duo every time I login?.

If I am concerned that 2FA will not be compatible with my workflow process or application requirement, does this policy apply to me?.How do I get it working with VPN and 2FA?

Duo was working with my old phone but I got a new phone with the same phone number.What happens if my mobile device prompts me and I am not trying to log into a university system protected by 2FA?.Does the university gain control of my personally-owned device if I participate in 2FA?.Do I have to use my personally-owned mobile device?.Do I have to use a mobile device to gain 2FA?.When will I be required to enroll for two-factor?.What is two-factor authentication (2FA)?.

Duo mobile monitor activity other apps