Two-factor Authentication

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account. Two-factor authentication is considered a best practice, a requirement of many IT internal control security frameworks, and has been recommended by the University's auditors.

Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you will receive an alert right away on your mobile device if someone is trying to log in as you.

This second factor of authentication is separate and independent from your username and password — Duo never sees your password.

There are two ways to register a device. 

1. You can register your mobile device using an email that Duo, a third party vendor, has sent to you. Part of the process is downloading the Duo app. Registration is easy and fairly quick. Follow the directions in the email you receive. 
2. You can use a web site to register your device. 
   1. Start by downloading the Duo mobile app from your device's store and install it. 
   2. Go to https://mfa.unf.edu
   3. You will see a UNF login page. Enter your username and password. 
   4. A Duo window will pop up. Select the green "Start Setup" button to enroll. 
   5. You will then be asked what type of device you are adding. Choose the type of device and then click “Continue.” 
   6. Follow the instructions on the screen specific to the type of device you are adding.  
    

You will use a web site to enroll your device. 

1. Start by downloading the Duo mobile app from your device's store and install it. 
2. Go to https://mfa.unf.edu
3. You will see a UNF login page. Enter your username and password. 
4. A Duo window will pop up. Select the green "Start Setup" button to enroll. 
5. You will then be asked what type of device you are adding. Choose the type of device and then click “Continue.” 
6. Follow the instructions on the screen specific to the type of device you are adding.  

Students going through the application process do not have a N Number, so they will not use two-factor authentication (Duo). After the application has been submitted, they are given N number and will need to validate their identity with Duo in order to log into myWings and other UNF applications. 

These actions are treated as IT Security incidents.  If a user denies a Duo authentication and selects to report it as fraudulent, IT Security will reset the UNF account password to a random value. The user will need to reset their password via  Login Help .  Learn more by visiting the Incident Response Page.

Contact the ITS Help Desk immediately if you lose your phone or suspect that it's been stolen! UNF has enabled self-service for all applications. Using a modern web browser, login to https://mfa.unf.edu and use My Settings & Devices to delete your lost or stolen phone.

If you are unable to log in to Duo at all then ITS can disable the missing phone for authentication and help you log in using another method. While it's important that you contact ITS Help Desk if you lose your phone, remember that your password will still protect your account.

The advantages of using the Duo app to validate your identity (rather than choosing to receive a phone call) are: 

• Faster and easier
  • Comparing the quick push and allow button on your phone notification vs. having to pull out a token or wait on a call or SMS.
• Works in any country
• Doesn’t require cell service
• The app includes a code that can be used even in airplane mode
• Can be transferred if lost
• By attaching the phone number, even if you lose your device you can still access your account with your number with a phone or SMS (text). 

For employees who use a fob (hardware token) to validate, there are some drawbacks in which to be aware: 

• You will need to type in a code each time (versus pressing "accept" in an app).
• It is possible for them to get out of sync with the authentication mechanism, requiring a phone call and intervention by ITS Help Desk to resync the device for use.
• They need to be replaced approximately every two years.

If you get a new phone, you'll need to re-activate Duo Mobile. You may enroll your new device yourself using Duo's device management portal or ask the ITS Help Desk to send you a new activation link.

IOS (Apple)

Apple Watch

Android

Windows Phone

Blackberry

Connect your mobile device (phone) to the campus wireless network. The mobile app will work over the wireless connection.

Yes. If you have access to WiFi or cellular service, Duo will function the same internationally as it does domestically. If you do not have access to WiFi or cellular service, additional options are available, including:

You can authenticate using a passcode texted to your phone. To have Duo text you a batch of passcodes select the Text me new codes button after clicking Enter a Passcode (or type "sms" in the "second password" field).

To authenticate using an SMS passcode, click the Enter a Passcode button, type in a passcode you received from Duo via text message, and click Log In. Duo keeps track of which SMS passcodes you've already used in your batch, letting you know which one to use next. You can have new passcodes sent to you at any time. A new batch of passcodes will invalidate all old passcodes, so it's probably best to delete the old message when a new one is received. 

If a student does not have a mobile device, they should contact the Help Desk as soon as possible. The Help Desk can be reached at 904-620-4357 (HELP) or helpdesk@unf.edu or they can submit a an online request.  

If an employee does not have a mobile device, they can check out a fob (hardware token device) from the ITS Help Desk. The fob will provide a code that the employee will type in after they log in to validate their identity.  Please visit them on first floor of the library during their open hours of operation to check one out. 

Note: Hardware tokens or fobs have some drawbacks. One of these is that it is possible for them to get out of sync with the authentication mechanism, requiring a phone call and intervention by the ITS Help Desk to resync the device for use.

Hardware tokens can get out of sync with the authentication mechanism, requiring a phone call and intervention by the ITS Help Desk to resync the device for use.