Multifactor Authentication

From William Paterson University - Information Technology's Wiki
Revision as of 15:20, 9 November 2018 by Speroj (talk | contribs) (How do I download and associate the Duo App to my account?)
Jump to navigation Jump to search

Multifactor Authentication

Multifactor Authentication (Two Factor Authentication) is required for William Paterson University VPN Access, and will be implemented Fall of 2018 for WPconnect, email and additional WP services. If you are trying to use VPN and do not currently have access, please request access using the ticket type Account -> VPN Access.

What is Duo?

Duo is a Multifactor Authentication Product that the university is implementing to secure our WP accounts. William Paterson University started using Duo in 2016 for all VPN users. The Duo App is available for use on smartphones to authenticate using a Push notification or a Passcode. Duo also the product used to authenticate clients via phone call or text message passcodes.

What Multifactor Authentication methods can I choose?

You can choose to receive a Push notification on your iOS or Android device, a text message, or a phone call.

How do I register my phone number?

Information Technology has prepopulated the Duo system with cell phone, office extension, or home phone information based on phone information available in the university’s Banner system. You can add, edit, and remove devices or phones through the Duo Device Management Portal available in WPconnect through Duo icon located in the Apps menu.

How do I download and associate the Duo App to my account?

Visit your App Store and download the Duo App. Once you have the App, visit the DUO Device Management Portal to

What happens if I get a new smartphone?

Not a problem! If you change mobile devices, or if your Duo App becomes disassociated with your account you will need to reactivate your App. Use the passcode authentication method, or use a secondary device, to authenticate to WPconnect and visit the DUO Device Management Portal to reactivate your Duo App on your new device.

Authentication and Software

Duo App for Mobile Devices

"Duo Mobile" can be downloaded from either the Apple App Store or the GooglePlay Store.

iPhone Duo Application

Duo iphoneApp.PNG

            Android Duo Application

Duo androidApp.PNG

            Download the Duo Mobile App

Duo Mobile for iPhone

Duo Mobile for Android

If you change mobile devices, or if your Duo App becomes disassociated with your account you will need to reactivate your App.

Duo Mobile App Support Documentation

For more information on the Duo Mobile Applications please see the Duo Support Documentation -

Duo Mobile App Push Troubleshooting

If you have authorized your Duo Application, but you are not recieveing a notification on your phone, you may have disabled notifications for the Duo App.

Duo Multifactor for Landline and other Mobile Devices

If you are unable to utilize the Mobile App, you will still be able to register a Generic Mobile phone number to receive text message passcodes or phone calls, or a Landline to receive calls. These devices are registered and managed thru WPconnect.

DUO Device Management Portal on WPconnect

To manage your multi function authentication devices you will need to visit the DUO Device Management Portal thru WPconnect. The DUO Device Management Portal is listed as Duo under Applications. You can Add or Remove devices from this portal. Mobile devices, both cellphones and tablets, as well as Landline phone numbers can be added for Authentication.

Manage Devices

To manage your devices you must first authenticate against one of you existing devices.

DuoManagementWPconnect1.png

From My Settings & Devices you can add a device or remove an old device, or select a device to automatically send a push notification to upon login.

DuoManagementWPconnect2.pngDuoManagementWPconnect4.png


Reactivating the Duo App

From Device Options you can Reactivate your Duo Application (if you have a new mobile device), or change the description of you device.

DuoManagementWPconnect3.png


Add a new a device

DuoManagement-AddDevice1.pngDuoManagement-AddDevice2.pngDuoManagement-AddDevice3.pngDuoManagement-AddDevice4.png

DuoManagement-AddDevice5.pngDuoManagement-AddDevice6.pngDuoManagement-AddDevice7.pngDuoManagement-AddDevice8.png

Logging in to WPconnect

After you have logged in to the "Shibboleth" login page, you will be redirected to the Multifactor Authentication page for Duo.

DuoLoginWPconnect1.png

This page will allow you to select the Device you would like to use for Authentication. You can enroll multiple phone numbers or mobile device including tablets. Note: There is an option to remember your device by using the "Remember me for 4 hours" option if you do not want to be prompted everytime you log in to WPconnect

DuoLoginWPconnect2.pngDuoLoginWPconnect2-1.png

The suggested method of Multifactor authentication is to use Duo Push which utilizes the Duo Mobile Application on your mobile phone or tablet.

DuoLoginWPconnect3.png

Additionally, you can select to receive a phone call and acknowledge you login by pressing any key, or by using a Passcode that you generate using the Duo Mobile Application or by receiving a text message.

DuoLoginWPconnect4.pngDuoLoginWPconnect4-2.png

Account Lockout

Please note that your account will be locked out after a number of authentication failures. Please submit a ticket, or calling 973-720-4357 to have your account unlocked.

DuoLoginWPconnect5.png


Email and Multifactor Authentication

Please note you may need to reconfigure email on mobile devices once you have moved to using Multifactor Authentication

Office 365 Login

  1. Provide your full email address at the Microsoft Login Page
  2. On the WP Login page, for Office 365, use your full email address and WP password
  3. Select the device you would like to use for Multifactor Authentication
  4. Authorize Multifactor Authentication
  5. If you are using your own computer you may select Yes to stay logged in. Please note that this will keep your Office 365 connection open and you will not be prompted for your user name and password or Multifactor Authentication method for an extended period of time. Select No if you are using a shared computer or someone elses machine.

MFA-Office365-1.PNG MFA-Office365-2.PNG MFA-Office365-3.PNG MFA-Office365-4.PNG


Outlook

Apple Mail

Apple Mail is supported on 10.14, Mojave. Older versions of Apple Mail do not support Microsoft Modern Authentication and Multifactor Authentication.

When configuring your email, you will be prompted to log in, with the same orange login screen that appears when using Office 365.

Email on Smartphones

The Outlook App for both iOS and Android devices allows access to your Email, Calendars and Contacts in one convient App.

iOS users, using the Apple Mail App, will need to remove the email account and re-add the account to their devices. Instructions on adding Email to iOS devices can be found here.

Android users, please note that the native android mail client is not compatible with Microsoft Modern Authentication. Please download the Outlook App for Android.

Additional VPN Authentication for Cisco Any Connect Client

Multifactor (Two Factor) Authentication is required for William Paterson University VPN Access. If you have not signed up for Multifactor Authentication, please request access using the ticket type Account -> VPN Access.

Using VPN with Multifactor Authentication

  1. After you have set up your account, you will continue to use the Cisco AnyConnect client as you have in the past.
  2. When you provide your login credentials you will now be provided with a secondary authentication box. You can then either use an app on your android (or iphone) to generate a key OR type "push" in the secondary authentication box. Using "push" will send a notification to the app on your phone. (Using "sms" will initiate a text with an authentication key that will expire after one hour, or "phone" if you have signed up for a phone call.)

Second Password Field

The following is utilized when using the Cisco Any Connect Client for VPN. The second password field is where you define the method of multifactor authentication you will be utilizing.

Authentication Method             Second Password
Duo App Push Verification push (See image 1. below)
Duo App to Generate Authentication Code Enter Code displayed in App (See image 2. below)
Text Message sms             (You will receive a text message with a key that will expire after one hour)
Phone Call phone         (If you have registered multiple phone numbers, enter phone1, phone2, as needed)



1. Authorizing access through the Duo App

Duo iphone2.PNG

            2. Generating a Key in the Duo App

Duo iphone1.PNG