Why do I need to use two-factor authentication?

Two-factor authentication, simply means you will be asked to take a second action to verify your identity when you log into a protected system. Two-factor authentication provides extra protection for the sensitive information our systems contain in case you are a victim of phishing or hacking. If someone steals your credentials and tries to access your account, your username and password will not be sufficient to log in. The thief will also need to have access to your device to complete the log in process. If someone else tries to log in to your account, you will be notified on your device and you can deny them access instantly.

Why do I have to enroll & why do I have to enroll twice?

Users are required to enroll in two-factor authentication due to increasing and persistent cyber-attacks. Many applications and services are protected by Duo two-factor authentication both remotely and while on the network.

You may need to enroll twice because separate credentials require separate enrollments.

  • HRMS and UR Financials use your NetID.
  • URMC applications use your URMC AD credential. (eRecord, eView, Outlook Web Access, etc.)

What happens after I enroll?

You will be prompted for two-factor authentication each time you attempt to connect to a Duo enabled application or service. During your enrollment, you can choose a preferred device and authentication method (i.e., your cell phone number and a push or text message).

Is there something besides a phone or mobile device I can use as my second factor authentication with duo?

Yes.  You can purchase a YubiKey or D-100 token in person from both UR Tech Store locations.  Once you have purchased a token, follow the appropriate tutorial to login using the token.

How should I enroll in Duo if I am a Community Provider or Partner?

See our Referring Providers website for instructions.

What devices are supported by Duo & can I set up more than one device?

Devices supported by Duo include the following:

 

Yes, you can setup more than one device.  Log into the University or URMC Two-Factor Authentication Enrollment site and follow the instructions here.

If I can't connect to the network or VPN, how do I enroll?

For UR Active Directory or NetID credentials contact UnivIT Help Desk at (585) 275-2000.

For all other credentials, contact the ISD Help Desk at (585) 275-3200.

You will be required to confirm your identity with the help desk representative.

How do I authenticate with my smart phone app if I don't have cell signal, data, or Wi-Fi connection?

Generate a passcode in the Duo Mobile app by tapping the key icon. The passcode will appear underneath. Then log into the system using the passcode as your Duo method.

Can international phone numbers be used in Duo?

Yes, all international phone numbers are supported in Duo. The numbering format must be E164.

Country code + National Destination Code + Phone Number

For example, in Switzerland:+41 33 123456789

Can I use the app on my smart phone without affecting my data plan & if I use the text message or phone call option, will I be charged by my phone company?

Yes; you must first connect to a wireless network and then you will not incur data charges by using the Duo Mobile App.

Standard phone and text messaging rates will apply per your phone plan for the phone call and SMS options.

What do I do if I get a notification from Duo that I did not request?

Use the “Deny” option if you did not initiate the request.  University Information Security investigates all fraudulent attempts.

I replaced the phone I enrolled in Duo, can I change my devices after I enroll?

Yes. You may log back into the University or URMC Two-Factor Authentication Enrollment sites at any time to manage, add, or remove devices.

If your phone number is the same:

  • If you use the Push option through the Duo Mobile app installed on your phone, follow this tutorial to reactivate Duo Mobile on your new phone.
  • No action is required If you use the phone call or text message options. You will authenticate with Duo exactly as you did on your old phone.

 

If your phone number changed:

  • If you have an alternate/backup device enrolled in Duo:
    1. Log into the University or URMC Two-Factor Authentication Enrollment site.
    2. From the Device drop-down menu, select your alternate/backup device, then click “Manage Devices” to authenticate using Duo
    3. Use the Actions drop-down menu to delete your old phone, then click “Enroll another device” to enroll your new phone. (See the Device Management Guide for detailed tutorials.)
  • If you do not have an alternate/back-up device enrolled in Duo, call the Univ IT Help Desk at (585) 275-2000 for NetID or ISD Help Desk at (585) 275-3200 for all other credentials

 

** Please note: If the device you use to authenticate with Duo has been lost or stolen, please contact the University IT Help Desk at 275-2000 or ISD Help Desk at (585) 275-3200 immediately. They will disable your phone from being able to authenticate with Duo and help you log in using another device.

My account is locked out. What should I do?

Contact the University IT Help Desk at 275-2000 for NetID or the ISD Help Desk at 275-3200 for all other credentials.

Why can't I receive Push notifications from Duo, but I can receive SMS texts and phone calls from Duo?

 

Why can't I receive SMS texts and phone calls from Duo?

You may have blocked the phone number that Duo uses to reach you. Check your blocked numbers list for 585-275-2085 and remove it from the list.

I am unable to install the Duo Mobile app from the App store. What do I do?

Refer to the FAQ for “What devices are supported by Duo” to see if you have a device model and operating system version that is supported by the Duo Mobile App.