Multi Factor Authentication: Difference between revisions
(Created page with " ==Multi-Factor Authentication== Multi-Factor (Two Factor) Authentication is required for William Paterson University VPN Access. If you have not signed up for Multi-Factor ...") |
No edit summary |
||
Line 1: | Line 1: | ||
==Multi | ==Multi Factor Authentication== | ||
Multi | Multi Factor (Two Factor) Authentication is required for William Paterson University VPN Access. If you have not signed up for Multi Factor Authentication, [http://www.wpunj.edu/help please request access using the ticket type Account -> VPN Access]. | ||
{{#ev:youtube|pgrzRIQ9874|400}} | {{#ev:youtube|pgrzRIQ9874|400}} | ||
===Using VPN with Multi | ===Using VPN with Multi Factor Authentication=== | ||
#After you have set up your account, you will continue to use the [[#Client VPN Application|Cisco AnyConnect client]] as you have in the past. <!-- <p>[[File:2FA.gif]]</p> --> | #After you have set up your account, you will continue to use the [[#Client VPN Application|Cisco AnyConnect client]] as you have in the past. <!-- <p>[[File:2FA.gif]]</p> --> | ||
Line 24: | Line 24: | ||
<gallery> | <gallery> | ||
File:1-Login.png|Login Page | File:1-Login.png|Login Page | ||
File:2-Info.png|Multi | File:2-Info.png|Multi Factor Info | ||
File:3-Device.png|Select Device Type | File:3-Device.png|Select Device Type | ||
File:4-Phone.png|Input Phone Number | File:4-Phone.png|Input Phone Number | ||
Line 41: | Line 41: | ||
===Second Password Field=== | ===Second Password Field=== | ||
The following is utilized when using the Cisco Any Connect Client for VPN. The second password field is where you define the method of multi | The following is utilized when using the Cisco Any Connect Client for VPN. The second password field is where you define the method of multi factor authentication you will be utilizing. | ||
{| | {| | ||
Line 141: | Line 141: | ||
[[File:DuoLoginWPconnect2.png|300px]] | [[File:DuoLoginWPconnect2.png|300px]] | ||
The suggested method of | The suggested method of multi factor authentication is to use Duo Push which utilizes the [[Multi_Factor_Authentication#Duo_App_for_Mobile_Devices|Duo Mobile Application]] on your mobile phone or tablet. | ||
[[File:DuoLoginWPconnect3.png|500px]] | [[File:DuoLoginWPconnect3.png|500px]] | ||
Additionally, you can select to receive a phone call and acknowledge you login by pressing any key, or by using a Passcode that you generate using the [[ | Additionally, you can select to receive a phone call and acknowledge you login by pressing any key, or by using a Passcode that you generate using the [[Multi_Factor_Authentication#Duo_App_for_Mobile_Devices|Duo Mobile Application]] or by receiving a text message. | ||
[[File:DuoLoginWPconnect4.png|500px]] | [[File:DuoLoginWPconnect4.png|500px]] |
Revision as of 14:21, 4 October 2018
Multi Factor Authentication
Multi Factor (Two Factor) Authentication is required for William Paterson University VPN Access. If you have not signed up for Multi Factor Authentication, please request access using the ticket type Account -> VPN Access.
Using VPN with Multi Factor Authentication
- After you have set up your account, you will continue to use the Cisco AnyConnect client as you have in the past.
- When you provide your login credentials you will now be provided with a secondary authentication box. You can then either use an app on your android (or iphone) to generate a key OR type "push" in the secondary authentication box. Using "push" will send a notification to the app on your phone. (Using "sms" will initiate a text with an authentication key that will expire after one hour, or "phone" if you have signed up for a phone call.)
Authentication and Software
Second Password Field
The following is utilized when using the Cisco Any Connect Client for VPN. The second password field is where you define the method of multi factor authentication you will be utilizing.
Authentication Method | Passcode | ||
---|---|---|---|
Duo App Push Verification | push | (See image 1. below) | |
Duo App to Generate Authentication Code | Enter Code displayed in App | (See image 2. below) | |
Text Message | sms | (You will receive a text message with a key that will expire after one hour) | |
Phone Call | phone | (If you have registered multiple phone numbers, enter phone1, phone2, as needed) |
1. Authorizing access through the Duo App | 2. Generating a Key in the Duo App |
Duo App for Mobile Devices
"Duo Mobile" can be downloaded from either the Apple App Store or the GooglePlay Store.
iPhone Duo Application | Android Duo Application |
Reauthorizing the Duo App
If you change mobile devices, or if your Duo App becomes disassociated with your account you will need to reactivate your App. You will need to login to VPN through a browser at https://vpn.wpunj.edu
1. Login Page 3. Select Device To Authenticate 5. Select Activate Duo Mobile 7. Phone App Information |
2. Multi Factor Info *Select "My Settings & Devices"* 4. Select Device Options 6. Select Phone Type 8. Scan QR Code during registration |
DUO Device Management Portal on WPconnect
To manage your multi function authentication devices you will need to visit the DUO Device Management Portal thru WPconnect. The DUO Device Management Portal is listed as Duo under Applications. You can Add or Remove devices from this portal. Mobile devices, both cellphones and tablets, as well as Landline phone numbers can be added for Authentication.
To manage your devices you must first authenticate against one of you existing devices.
From My Settings & Devices you can add a device or remove an old device
You can select to automatically send a push notification to your default device at login thru this portal.
From Device Options you can Reactivate your Duo Application if you get a new mobile device, or change the description of you device.
Logging in to WPconnect
After you have logged in to the "Shibboleth" login page, you will be redirected to the Multifactor Authentication page for Duo.
This page will allow you to select the Device you would like to use for Authentication. You can enroll multiple phone numbers or mobile device including tablets.
The suggested method of multi factor authentication is to use Duo Push which utilizes the Duo Mobile Application on your mobile phone or tablet.
Additionally, you can select to receive a phone call and acknowledge you login by pressing any key, or by using a Passcode that you generate using the Duo Mobile Application or by receiving a text message.
Please note that your account will be locked out after a number of authentication failures. Please submit a ticket, or calling 973-720-4357 to have your account unlocked.