Body
Overview
Multi-Factor authentication, or MFA, is a two-layer of user verification used in addition to a username and password when attempting to access a system such as email or payments.
The verification can be done using the DUO Mobile app, a hardware token key, or a passcode provided by the UCM Technology Support Center.
The recommended method to use as a MFA is Duo Push, utilizing the DUO Mobile client. If a bad actor obtains a current password, they still won't be able to log into your services unless they also have your phone (SMS, Mobile App) or other device, and thus won't be able to provide the second authentication.
Duo Security is a company that provides a cloud-based software service that utilizes multi-factor authentication to ensure secure access to services and data. To learn more about how Duo Security works, check out this video.
About Multi-Factor Authentication
Login credentials are more valuable than ever and are increasingly easy to compromise. Over 90% of breaches today involve compromised user names and passwords.
Multi-factor authentication enhances the security of your account by using a secondary device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.
Using Multi-Factor Authentication with Duo
When logging in to an application that is protected by Duo, you will still enter your user name and password. After inputting your login information, Duo requires you to complete a method of second-factor authentication.
Duo does not replace or require you to change your user name and password.
DUO is an added layer of protection for logging into systems. DUO is an application that allows verification of your identity.
What do I need to do if I Already had a DUO Before Enrolling with UCM's MFA?
Contact the TSC to have your account activated with UCM.
What if I am an Employee and also a Student?
Each account requires enrollment, however, if you've already enrolled in DUO you can reach out to the TSC to have your second account linked to your initial account.
What if a User's Account has been Compromised?
Any user whose account has been compromised is strongly advised to enroll in Duo and complete the setup before their account is re-enabled.
What if my Phone is not Compatible with the Duo Mobile App?
Hardware keys are available for pickup from the TSC in Ward Edwards 0800.
What if I am in a Place where I get Internet Access but not Cell Service?
We recommend installing and using the Duo mobile app, as it only requires an Internet connection for the authentication process.
What if my Phone Breaks, Dies, or I Forget it at Home?
Please call the TSC at 660-543-4357 to request a temporary passcode.
Is there a Dedicated Individual who can Help me with my Duo Mobile App Questions?
All of our TSC staff members are trained and can assist with any questions you have about the Duo mobile app.
The Duo App seems unpredictable on my phone, sometimes I get the three digit code and sometimes I receive a text. How can I make sure it is the same each time?
By default, the Duo app will prompt you for a three-digit code for verification. You should only receive an SMS text during the initial setup of your Duo mobile account. If you encounter anything different, please contact the TSC.
I already have a different MFA app on my phone. Can I just use that one?
No, Duo Mobile is the only app compatible with MFA authentication for your UCM account.
Additional information
For additional information about DUO MFA, see documentation on their website.