[Tagalist] Multi-Factor Authentication

[Engineering Help Desk]

Hi All,
Here is a step by step guide to setup Duo Mobile.
https://it.sdsu.edu/security/operations-services/duo_getting_started

I'll paste the information here just in case you cant access the guide.

Duo Getting Started

[image: duo getting started]

Step 1: Getting Started with Duo
Step-by-step instructions are provided below about how to enroll your
device into Duo MFA.If you prefer training videos, they are also available
here. <https://it.sdsu.edu/security/operations-services/duo_training_videos>

1

Download the Duo Mobile app on the device you intend to use for
authentication. For example, for either iOS or Android, please download and
install the Duo Mobile app from your mobile provider's app store.

[image: Duo Mobile App]
2

Open a new browser window on the computer on which you are going to login
to your sdsu.edu account, go to Duo Portal <https://duoportal.sdsu.edu/>,
and use the "Sign In" button to begin. The Duo Portal
<https://duoportal.sdsu.edu/> is where users can manage, add, and remove
their Duo devices. In addition, the Duo Portal <https://duoportal.sdsu.edu/> is
where users can enable Duo for your G Suite account
<https://it.sdsu.edu/security/operations-services/duo_enable_apps>. Lastly,
the Duo Portal <https://duoportal.sdsu.edu/> is also where users can generate
bypass codes
<https://it.sdsu.edu/security/operations-services/duo_bypass_codes> so
users never get locked out of their account.

[image: duo portal]
3

Provide your SDSUid login credentials and authenticate yourself.

[image: duo sdsuid]
4

On the Duo Portal <https://duoportal.sdsu.edu/> screen, click “Start Setup”
to begin the Duo MFA setup.

[image: duo protect account]
5

On the Duo Portal <https://duoportal.sdsu.edu/> screen, select the device
you would like to enroll in Duo. A mobile phone is recommended as has the
most robust features (PUSH, text, phone call, passcodes). Enrolling
multiple devices (e.g. smartphone, landline, tablet, etc.) is also
recommended to prevent you from getting locked out of your account.

[image: duo device]
6

On the Duo Portal <https://duoportal.sdsu.edu/> screen, confirm the country
and input your phone number (no hyphens required). Place a check in the You
entered (your phone number displays) and then click on Continue.

Use the number of your smartphone, landline, or cell phone that you'll have
with you when you're logging in to a Duo-protected service.

You can enter an extension if you chose *Landline* in the previous step.
If you're enrolling a tablet, you will not be prompted to enter a phone
number.

[image: duo enter number]
7

On the Duo Portal <https://duoportal.sdsu.edu/> screen, confirm the type of
device you are adding to Duo and click *Continue*.

[image: duo confirm device]
8

On the Duo Portal <https://duoportal.sdsu.edu/> screen, verify ownership of
your phone. Select either “Call Me” or “Text Me.” If you select the “Text
Me” option, you will receive a 6-digit code. Enter the code in the blank
box.

[image: duo verify ownership]
9

On the Duo Portal <https://duoportal.sdsu.edu/> screen, follow the
platform-specific instructions on the screen to install Duo Mobile. Open
the Duo app, return to the enrollment window and tap “I have Duo Mobile
installed.”

[image: duo app]
10

On the Duo Portal <https://duoportal.sdsu.edu/> screen, you will see
"Activate Duo Mobile" and a barcode.

Open the Duo Mobile app on your phone. Tap the “+” button. Scan the barcode
on the Duo Portal screen with your device’s camera.

[image: Duo Getting Started - Scan Barcode]
11

On iPhone, Android, and Windows devices, activate Duo Mobile by scanning
the barcode with the app's built-in barcode scanner. If you are prompted on
the mobile app to allow access to your camera, select the “OK” option.

[image: Duo Getting Started Access Camera][image: Duo_bar_code]
12

Once you scan the barcode from your phone, your device will be activated in
Duo, as shown below on the Duo Portal <https://duoportal.sdsu.edu/> screen.

[image: duo barcode]

An automatic passcode will be generated that will register your device with
the SDSU Duo security. Activating the Duo app links it to your account.
Your device can now be used for authentication.

[image: Duo Getting Started Add Device on Duo App]
13

 If you are unable to scan from your phone, click on “Email me an
activation link instead" on the Duo Portal <https://duoportal.sdsu.edu/>
 screen.

[image: Duo Getting Started Email Activation Link]
14

On the Duo Portal <https://duoportal.sdsu.edu/> screen, enter your SDSU
address that you can check from your device. You will be sent a special
link that you can click to activate Duo Mobile. Once you’ve clicked the
link on the email, click “Continue” on the Duo Portal screen.

[image: Duo Getting Started Activate Duo by Email]
15

After a successful registration, you will see the following on the Duo
Portal <https://duoportal.sdsu.edu/> screen, which confirms that you can
authenticate to any Duo protected service. Click on the *Dismiss* button to
finish.

[image: duo success]
16

After your device is registered, you can log in to the Duo Portal
<https://duoportal.sdsu.edu/> at any time to manage, add, or remove devices.

[image: duo management portal]
17

The next step is to enroll your G Suite account (i.e. G Mail, Google Drive,
and other Google Applications) into Duo! Please visit "Step 2: Duo Enable
Apps <https://it.sdsu.edu/security/operations-services/duo_enable_apps>"
page for step-by-step instructions and protect your G Suite Account today!
18

For Duo MFA User Support, please visit the following links:

   - I <https://it.sdsu.edu/security/operations-services/mfa>T Security
   Office Website <https://it.sdsu.edu/security/operations-services/mfa>
   - Faculty and Staff - Submit a Ticket through SDSU ServiceNow
   <https://servicenow.sdsu.edu/> or coordinate with you IT department.
   - Students - Visit the Hub Help Desk
   <https://library.sdsu.edu/computers-technology>.

[image: Duo Help]

Thank you,
William Nguyen

On Tue, Feb 9, 2021 at 1:18 PM William Nguyen <wnguyen at sdsu.edu> wrote:

> FYI.
>
> Beginning March 5, all SDSU faculty, staff, and students will be required
> to use Multi-Factor Authentication (MFA) to access Google Workplace
> (formerly G Suite) which includes Gmail, Google Drive, Google Calendar, and
> other Google applications.
>
> William Nguyen
> Operating Systems Analyst
> College of Engineering, ENG-202A
> San Diego State University
> 5500 Campanile Drive
> San Diego, CA 92182-1326
> Tel:  619-594-1166
> Fax:  619-594-6005
> E-mail:  wnguyen at sdsu.edu
>
>
> ---------- Forwarded message ---------
> From: Yusuf Ozturk <yozturk at sdsu.edu>
> Date: Mon, Feb 8, 2021 at 11:48 PM
> Subject: Multi-Factor Authentication
> To: <wnguyen at sdsu.edu>
>
>
> *Dear  Nguyen, *
>
>
>
> *Beginning March 5, all SDSU faculty, staff, and students will be required
> to use Multi-Factor Authentication (MFA) to access Google Workplace
> (formerly G Suite) which includes Gmail, Google Drive, Google Calendar, and
> other Google applications.* MFA is an additional layer of verification
> used to enhance account security, requiring two types of authentication to
> protect against unauthorized users accessing your accounts.   SDSU has
> adopted DUO <https://duo.com/> as its platform for MFA.  DUO works by
> verifying your identity through a personal device- usually a smartphone,
> but there are options for those who does not have a cell phone (
> https://it.sdsu.edu/security/operations-services/mfa/duo_device_overview
> ).  DUO is simple to install and easy to use. If  you have not yet begun
> using DUO, point your browser to this link
> <https://it.sdsu.edu/security/operations-services/mfa>.
>
>
>
> You will be guided through three steps:
>
> (1) Enrolling your device in DUO (which requires downloading the app).
>
> (2) Enabling DUO MFA for your SDSU Google account.
>
> (3) Generating a set of "emergency" codes that will prevent you from ever
> being locked out of your accounts.
>
>
>
> Once DUO is set up, you will be prompted to verify your identity through
> your device when you access SDSU Google Workplace applications like Gmail.
> Google will cache your DUO authentication for a period so that you will not
> be prompted for MFA each time you login with the same computer and browser.
>
>
>
> If you have trouble getting DUO to work, the IT Division has posted FAQs
> <https://it.sdsu.edu/security/operations-services/mfa> and videos
> <https://it.sdsu.edu/security/operations-services/duo_training_videos> to
> help you. You can also request assistance by submitting a request through
> ServiceNow <https://sdsu.service-now.com/>.
>
>
>
> There are also two Zoom Training Sessions available on a first come first
> serve basis. Each training session can support 25 attendees. Please use the
> links below to register in advance for a date if you are interested. Once
> your registration spot is confirmed, a confirmation email containing the
> Zoom meeting information will be sent.
>
> ·       Monday, Feb 16, 2021, 3:00 PM Pacific Time.  Register in advance
> for this meeting at
> https://SDSU.zoom.us/meeting/register/tZEpdO2przssHdRWdD3YqNtVluabUc8Je75_
> <https://sdsu.zoom.us/meeting/register/tZEpdO2przssHdRWdD3YqNtVluabUc8Je75_>
>
> ·        Wednesday, Feb 24, 2021, 3:00 PM Pacific Time. Register in
> advance for this meeting at
> https://SDSU.zoom.us/meeting/register/tZ0pcu6uqDIpHNVvynosRyddSgTVOVuVXbzA
> <https://sdsu.zoom.us/meeting/register/tZ0pcu6uqDIpHNVvynosRyddSgTVOVuVXbzA>
>
> I encourage you to install  DUO and enable  MFA to protect your university
> accounts as soon as possible, and certainly well before March 5. That way,
> if you do encounter any difficulties, you will have plenty of time to deal
> with them before the deadline.
>
>
>
> Thank you for your attention to this matter, and thank you for working to
> ensure the security of our data and our IT infrastructure.
>
>
>
> Best regards
>
>
>
> Yusuf Ozturk
>
> Interim Associate Dean of Undergraduate Studies  and Professor
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://engineering.sdsu.edu/pipermail/tagalist/attachments/20210210/9ee35dd5/attachment.htm>