Duo Two-Factor Authentication

Welcome to Baylor, Where We Duo!

Baylor protects its most vital, widely-accessed university and personal information resources with Duo two-factor authentication.

To date, faculty/staff VPN access, Banner and BearWeb enjoy two-factor protection. We will soon provide the same protection to other systems widely used by the Baylor community.

To enroll with Duo, click here or on the We Duo graphic to the right.

Video Tutorials

First-Time Mobile Device Enrollment

First-Time Phone Number Enrollment

Enrollment of a Tablet as a Secondary Device

Enrollment of a Phone Number as a Secondary Device

How to Re-enroll a New Device with the Same Number

Frequently Asked Questions about Duo

1. What is two-factor (Duo) authentication and why is Baylor implementing it?
2. How do I get Duo?
3. What if I do not have a mobile phone?
4. What if I lose my mobile phone or it is stolen?
5. What if I get a new mobile phone?
6. How many chances will I get to authenticate?
7. What systems utilize Duo two-factor authentication?
8. What should I do if I get an authentication message and I am not trying to log in?
9. How do I connect to VPN using Duo Two Factor authentication?
10. I am getting a message that I am locked out. What do I do?
11. When logging into the VPN system, what do I put for the "second password"?
12. Can I opt out of Duo?
13. What if I don't have a cell phone, landline, or a tablet for a secondary device?




Frequently Asked Questions about Duo

1. What is two-factor (Duo) authentication and why is Baylor implementing it?
Passwords are becoming increasingly easy to compromise. They can often be stolen, guessed, and hacked -- you might not even know who else has your password and is accessing your account. Duo two-factor authentication adds a second layer of security to your account to make sure that it stays safe, even if someone else knows your password, by using your phone or other device to verify your identity. You will be alerted right away (on your phone - mobile or landline - or tablet) if someone tries to log in using your password. This prevents anyone but you from accessing your accounts.

2. How do I get Duo?
Duo's self-enrollment process makes it easy to register your phone or tablet and install the application on your device. To begin the enrollment process, please see the First-Time Enrollment Guide for device-specific installation instructions.

3. What if I do not have a mobile phone?
You can use a landline or a tablet. Duo also lets you link multiple devices to your account, so you can use your mobile phone, a landline and/or tablet.

4. What if I lose my mobile phone or it is stolen?
Contact the Help Desk via email or call 254-710-4357 immediately if you lose your phone or suspect that it has been stolen. The device will be disabled for authentication and you will be assisted in enrolling another phone/device. While it is important that you contact the Help Desk if you lose your phone, remember that your password will still protect your account.

5. What if I get a new mobile phone?
If you get a new phone you will need to re-activate Duo Mobile, please see the New Phone Reactivation instructions.

6. How many chances will I get to authenticate?
You will have five chances to authenticate a request. After the fifth chance, your two-factor authentication will be deactivated and you will not be able to access the system you are attempting to log into.

7. What systems utilize Duo two-factor authentication?
VPN and the Banner system currently utilize two-factor authentication. BearWeb will be added on October 4, 2016. To access any of these systems, you will need to use Duo in addition to your BearID and password.

8. What should I do if I get an authentication message and I am not trying to log in?
Deny the request and report the incident to the Help Desk immediately via email or by calling 254-710-4357.

9. How do I connect to VPN using Duo Two Factor authentication?
You can connect to VPN using either of the methods below. Please click your preferred method:
VPN using AnyConnect

10. I am getting a message that I am locked out. What do I do?
Your account will lock when there are too many failed attempts to authenticate. You will need to contact the Help Desk at 254-710-4357 for assistance with your account.

11. When logging into the VPN system, what do I put for the "second password"?
You will type one of the following in the "second password" field:
Use push if you have enrolled your smartphone in the Duo system. Use sms if you enrolled your phone and wish to receive a text message from the Duo system. Use phone if you have enrolled a landline in the Duo system. See the Documentation section on the right for more detailed information.

12. Can I opt out of Duo?
No. Two-factor authentication adds a second layer of security to our online accounts. In an effort to keep the university systems and your personal account information secure, we are enabling two-factor authentication on selected services.

13. What if I don't have a cell phone, landline, or a tablet for a secondary device?
The ITS Security Group has a limited number of hardware tokens. These are devices that are approximately the size of a key fob that you will carry with you at all times. When you need to authenticate, you will use the device to generate a code to enter at log-in.

BACK TO TOP

Updated May 1, 2017