Duo Two-Factor Authentication

Welcome to Baylor, Where We Duo!

Baylor protects its most vital, widely-accessed university and personal information resources with Duo two-factor authentication. Currently, faculty/staff VPN access, Banner and BearWeb utilize two-factor protection.

Duo Two-Factor Protection Expand to Additional Resources

Everyone has likely seen the recent news stories about massive data breaches across many industries. In addition, our campus has had a large number of login credentials compromised through email phishing since last spring.

In response to the increase in cyberattacks, Baylor has expanded two-factor protection to Canvas, Box, and many of our single sign-on services (click here for the full list). This additional layer of protection provides insurance against threats to faculty, staff, and student personal information, sensitive research data, and other university information and resources stored within Box, Canvas, and on other online platforms.

Baylor ITS suggests that you use the Duo mobile app to authorize a Duo Push notification in order to access online campus resources. Leveraging a new feature within Duo, the app will remember your two-factor credentials for up to seven days when accessed from the same source (PC browser, tablet browser, mobile phone, etc.). Therefore, while we have increased the number of systems that require two-factor authentication, we have also reduced the number of times that you must use Duo Push notifications when you sign-on. Remember, you must use the same computer & same web browser in order for the 'remember me' feature to function (the web browser also must not be in private or incognito mode). Please note: At this time, this new feature only works with Duo Push notifications, all other two-factor authentication methods will require you to provide a second factor at each login.


Another Method of Authentication Now Available

The Baylor Bookstore is now selling Duo Hardware Tokens, these are an alternative to needing a smart phone and/or a mobile device. If you would like one of these devices, please ask for a Duo Hardware Token in the Technology Section of the Baylor Bookstore. To register this token with your Duo account, please call the Help Desk at (254) 710-HELP (x4357) & tell them you purchased a Duo Hardware Token that you need connected to your BearID in Duo (we hope to have a self-enrollment website online in the future).

To enroll with Duo, click here or on the We Duo graphic to the right.

Video Tutorials

First-Time Mobile Device Enrollment

First-Time Phone Number Enrollment

Enrollment of a Tablet as a Secondary Device

Enrollment of a Phone Number as a Secondary Device

How to Re-enroll a New Device with the Same Number

Services Managed by Duo


A video guide to changing the default authentication method in Duo to allow usage of the 'Remember me for 7 days' functionality

Frequently Asked Questions about Duo

1. What is two-factor (Duo) authentication and why is Baylor implementing it?
2. How do I get Duo?
3. What if I do not have a mobile phone?
4. What if I lose my mobile phone or it is stolen?
5. What if I get a new mobile phone?
6. How many chances will I get to authenticate?
7. What systems utilize Duo two-factor authentication?
8. What should I do if I get an authentication message and I am not trying to log in?
9. How do I connect to VPN using Duo Two Factor authentication?
10. I am getting a message that I am locked out. What do I do?
11. When logging into the VPN system, what do I put for the "second password"?
12. Can I opt out of Duo?
13. What if I don't have a cell phone, landline, or a tablet for a secondary device?
14. What if the "remember me" feature is not working?




Frequently Asked Questions about Duo

1. What is two-factor (Duo) authentication and why is Baylor implementing it?
Passwords are becoming increasingly easy to compromise. They can often be stolen, guessed, and hacked -- you might not even know who else has your password and is accessing your account. Duo two-factor authentication adds a second layer of security to your account to make sure that it stays safe, even if someone else knows your password, by using your phone or other device to verify your identity. You will be alerted right away (on your phone - mobile or landline - or tablet) if someone tries to log in using your password. This prevents anyone but you from accessing your accounts.

2. How do I get Duo?
Duo's self-enrollment process makes it easy to register your phone or tablet and install the application on your device. To begin the enrollment process, please see the First-Time Enrollment Guide for device-specific installation instructions.

3. What if I do not have a mobile phone?
You can use a landline or a tablet. Duo also lets you link multiple devices to your account, so you can use your mobile phone, a landline and/or tablet.

4. What if I lose my mobile phone or it is stolen?
Contact the Help Desk via email or call 254-710-4357 immediately if you lose your phone or suspect that it has been stolen. The device will be disabled for authentication and you will be assisted in enrolling another phone/device. While it is important that you contact the Help Desk if you lose your phone, remember that your password will still protect your account.

5. What if I get a new mobile phone?
If you get a new phone you will need to re-activate Duo Mobile, please see the New Phone Reactivation instructions.

6. How many chances will I get to authenticate?
You will have five chances to authenticate a request. After the fifth chance, your two-factor authentication will be deactivated and you will not be able to access the system you are attempting to log into.

7. What systems utilize Duo two-factor authentication?
VPN and the Banner system currently utilize two-factor authentication. BearWeb will be added on October 4, 2016. To access any of these systems, you will need to use Duo in addition to your BearID and password.

8. What should I do if I get an authentication message and I am not trying to log in?
Deny the request and report the incident to the Help Desk immediately via email or by calling 254-710-4357.

9. How do I connect to VPN using Duo Two Factor authentication?
You can connect to VPN using either of the methods below. Please click your preferred method:
VPN using AnyConnect

10. I am getting a message that I am locked out. What do I do?
Your account will lock when there are too many failed attempts to authenticate. You will need to contact the Help Desk at 254-710-4357 for assistance with your account.

11. When logging into the VPN system, what do I put for the "second password"?
You will type one of the following in the "second password" field:
Use push if you have enrolled your smartphone in the Duo system. Use sms if you enrolled your phone and wish to receive a text message from the Duo system. Use phone if you have enrolled a landline in the Duo system. See the Documentation section on the right for more detailed information.

12. Can I opt out of Duo?
No. Two-factor authentication adds a second layer of security to our online accounts. In an effort to keep the university systems and your personal account information secure, we are enabling two-factor authentication on selected services.

13. What if I don't have a cell phone, landline, or a tablet for a secondary device?
Hardware tokens can be purchased from the Baylor Bookstore ($35 plus tax). These are devices that are approximately the size of a key fob that you will carry with you at all times. When you need to authenticate, you will use the device to generate a code to enter at log-in. Contact the Help Desk at 254-710-4357 after purchasing the token so it can be associated with your account.

14. What if the "remember me" feature is not working?
Make sure that your web browser is not be in private or incognito mode (cookies enabled). If this doesn't work, contact the Help Desk at 254-710-4357.

BACK TO TOP

Updated Sept 27, 2017