Multi-Factor Authentication: Difference between revisions

From William Paterson University - Information Technology's Wiki
Jump to navigation Jump to search
No edit summary
(Redirected page to Multifactor Authentication)
 
(43 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
#REDIRECT [[Multifactor_Authentication]]
==Multi Factor Authentication==
 
Multi Factor (Two Factor) Authentication is required for William Paterson University VPN Access.  If you have not signed up for Multi Factor Authentication, [http://www.wpunj.edu/help please request access using the ticket type Account -> VPN Access].
{{#ev:youtube|pgrzRIQ9874|400}}
 
===Using VPN with Multi Factor Authentication===
 
#After you have set up your account, you will continue to use the [[#Client VPN Application|Cisco AnyConnect client]] as you have in the past.      <!-- <p>[[File:2FA.gif]]</p> -->
#When you provide your login credentials you will now be provided with a [[#Second Password Field|secondary authentication]] box.  You can then either use an [[#Duo App for Mobile Devices|app]] on your android (or iphone) to generate a key OR type "push" in the [[#Second Password Field|secondary authentication]] box.  Using "push" will send a notification to the app on your phone.  (Using "sms" will initiate a text with an authentication key that will expire after one hour, or "phone" if you have signed up for a phone call.)
 
==Setup and Software==
===One time setup===
{| style="text-align: center;"
|{{#ev:youtube|9BItIGPfU2A|400}}
|&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
|{{#ev:youtube|WUQtKokU3BI|400}}
|}
 
#To use two factor authentication you must first configure your account access.  Visit [https://vpn.wpunj.edu https://vpn.wpunj.edu], from an off campus connection, to set up your secondary method of authentication. 
#Select and configure your preferred method for secondary authentication.  Options include the use of a mobile [[#Duo App for Mobile Devices|app]], receiving a text message or a phone call with an authorization key. (This link is also available within WPConnect on the Employee Page Tab Under Information Technology/Resources or enter "two" in the WPConnect search box to locate the link.)
 
<gallery>
File:1-Login.png|Login Page
File:2-Info.png|Two Factor Info
File:3-Device.png|Select Device Type
File:4-Phone.png|Input Phone Number
File:5-Phone.png|Select Phone Type
File:6-Android.png|Phone App Information
File:6-iphone.png|Phone App Information
File:6-Blackberry.png|Phone App Information
File:6-WindowsPhone.png|Phone App Information
File:8-ActivateIphone.png|Scan QR Code during registration
File:9-iphone.png|Duo App has been associated with your account
File:9-MySettings.png|Settings and Device Management Page
File:10-ChooseAuth.png|Authentication options if using WebVPN
</gallery>
 
===Second Password Field=== 
 
{|
! style="text-align:left;"|Authentication Method
!  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
! style="text-align:left;"|Passcode
|-
|Duo App Push Verification
|push
|(See image 1. below)
|-
|Duo App to Generate Authentication Code
|     
|Enter Code displayed in App
|(See image 2. below)
|-
|Text Message
|sms &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
|(You will receive a text message with a key that will expire after one hour)
|-
|Phone Call
|phone &nbsp; &nbsp; &nbsp; &nbsp;
|(If you have registered multiple phone numbers, enter phone1, phone2, as needed)
|}
 
<br><br>
{|  style="text-align: center;"
| 1. Authorizing access through the Duo App
<p>[[File:duo_iphone2.PNG|200px]]</p>
| &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
| 2. Generating a Key in the Duo App 
<p>[[File:duo_iphone1.PNG|200px]]</p>
|}
 
===Duo App for Mobile Devices===
"Duo Mobile" can be downloaded from either the Apple App Store or the GooglePlay Store.
 
{| style="text-align: center;"
|'''iPhone Duo Application''' <p>[[File:duo_iphoneApp.PNG|200px]]</p>
|&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
|'''Android Duo Application''' <p>[[File:duo_androidApp.PNG|200px]]</p>
|}
 
 
===Reauthorizing the Duo App===
 
If you change mobile devices, or if your Duo App becomes disassociated with your account you will need to reactivate your App.  You will need to login to VPN through a browser at https://vpn.wpunj.edu
 
 
{| style="text-align: center;"
|'''1. Login Page''' <p>[[File:VPN-Reauth1.png|300px]]</p><br>'''3. Select Device To Authenticate''' <p>[[File:VPN-Reauth2-2.png|300px]]</p><br>'''5. Select Activate Duo Mobile''' <p>[[File:VPN-Reauth4.png|300px]]</p><br>'''7. Phone App Information''' <p>[[File:VPN-Reauth6.png|300px]]</p>
|&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
|'''2. Multi Factor Info *Select "My Settings & Devices"*''' <p>[[File:VPN-Reauth2.png|300px]]</p><br>'''4. Select Device Options''' <p>[[File:VPN-Reauth3.png|300px]]</p><br>'''6. Select Phone Type''' <p>[[File:VPN-Reauth5.png|300px]]</p><br>'''8. Scan QR Code during registration''' <p>[[File:VPN-Reauth7.png|300px]]</p>
|}
 
<!-- <gallery>
File:VPN-Reauth1.png|Login Page
File:VPN-Reauth2.png|Multi Factor Info *Select "My Settings & Devices*
File:VPN-Reauth2-2.png|Select Device To Authenticate
File:VPN-Reauth3.png|Select Device Options
File:VPN-Reauth4.png|Select Activate Duo Mobile
File:VPN-Reauth5.png|Select Phone Type
File:VPN-Reauth6.png|Phone App Information
File:VPN-Reauth7.png|Scan QR Code during registration
</gallery>-->
 
 
<!-- DUO Device Management Portal on WPconnect
DuoManagementWPconnect1.png
DuoManagementWPconnect2.png
DuoManagementWPconnect3.png
DuoManagementWPconnect4.png
 
Your account will be locked out after a number of authentication failures.  Please create a helpdesk ticket or call the hep desk.  fail to authenticate
DuoManagementWPconnect5.png
 
 
-->

Latest revision as of 14:04, 11 October 2018