Multi-Factor Authentication

From William Paterson University - Information Technology's Wiki
Jump to navigation Jump to search

Multi-Factor Authentication

Multi-Factor (Two Factor) Authentication is required for William Paterson University VPN Access. If you have not signed up for Multi-Factor Authentication, please request access using the ticket type Account -> VPN Access.

Using VPN with Multi-Factor Authentication

  1. After you have set up your account, you will continue to use the Cisco AnyConnect client as you have in the past.
  2. When you provide your login credentials you will now be provided with a secondary authentication box. You can then either use an app on your android (or iphone) to generate a key OR type "push" in the secondary authentication box. Using "push" will send a notification to the app on your phone. (Using "sms" will initiate a text with an authentication key that will expire after one hour, or "phone" if you have signed up for a phone call.)

Authentication and Software

<! ***************VPN Original Information********************

One time setup

           
  1. To use two factor authentication you must first configure your account access. Visit https://vpn.wpunj.edu, from an off campus connection, to set up your secondary method of authentication.
  2. Select and configure your preferred method for secondary authentication. Options include the use of a mobile app, receiving a text message or a phone call with an authorization key. (This link is also available within WPConnect on the Employee Page Tab Under Information Technology/Resources or enter "two" in the WPConnect search box to locate the link.)

-->


Second Password Field

The following is utilized when using the Cisco Any Connect Client for VPN. The second password field is where you define the method of multi-factor authentication you will be utilizing.

Authentication Method             Passcode
Duo App Push Verification push (See image 1. below)
Duo App to Generate Authentication Code Enter Code displayed in App (See image 2. below)
Text Message sms             (You will receive a text message with a key that will expire after one hour)
Phone Call phone         (If you have registered multiple phone numbers, enter phone1, phone2, as needed)



1. Authorizing access through the Duo App

Duo iphone2.PNG

            2. Generating a Key in the Duo App

Duo iphone1.PNG

Duo App for Mobile Devices

"Duo Mobile" can be downloaded from either the Apple App Store or the GooglePlay Store.

iPhone Duo Application

Duo iphoneApp.PNG

            Android Duo Application

Duo androidApp.PNG


Reauthorizing the Duo App

If you change mobile devices, or if your Duo App becomes disassociated with your account you will need to reactivate your App. You will need to login to VPN through a browser at https://vpn.wpunj.edu


1. Login Page

VPN-Reauth1.png


3. Select Device To Authenticate

VPN-Reauth2-2.png


5. Select Activate Duo Mobile

VPN-Reauth4.png


7. Phone App Information

VPN-Reauth6.png

            2. Multi Factor Info *Select "My Settings & Devices"*

VPN-Reauth2.png


4. Select Device Options

VPN-Reauth3.png


6. Select Phone Type

VPN-Reauth5.png


8. Scan QR Code during registration

VPN-Reauth7.png


DUO Device Management Portal on WPconnect

Thru the Duo

DuoManagementWPconnect1.png

DuoManagementWPconnect2.png

DuoManagementWPconnect3.png

DuoManagementWPconnect4.png

Logging in to WPconnect

After you have logged in to the "Shibboleth" login page, you will be redirected to the Multifactor Authentication page for Duo.

DuoLoginWPconnect1.png

This page will allow you to select the Device you would like to use for Authentication. You can enroll multiple phone numbers or mobile device including tablets.

DuoLoginWPconnect2.png

The suggested method of Multifactor authentication is to use Duo Push which utilizes the Duo Mobile Application on your mobile phone or tablet.

DuoLoginWPconnect3.png

Additionally, you can select to receive a phone call and acknowledge you login by pressing any key, or by using a Passcode that you generate using the Duo Mobile Application or by receiving a text message.

DuoLoginWPconnect4.png

Please note that your account will be locked out after a number of authentication failures. Please submit a ticket, or calling 973-720-4357 to have your account unlocked.

DuoLoginWPconnect5.png