Two-factor Authentication FAQs

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked - you might not even know someone is accessing your account. Two-factor authentication is considered a best practice, a requirement of many IT internal control security frameworks, and has been recommended by the University's auditors.

Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you will receive an alert right away on your mobile device if someone is trying to log in as you.

This second factor of authentication is separate and independent from your username and password - Duo never sees your password.

Duo is a third party application that the University of North Florida is using for two-factor authentication.

1. Start by downloading the Duo mobile app from your device's store and install it.
2. Go to mfa.unf.edu
3. You will see a UNF login page. Enter your username and password.
4. A Duo window will pop up. Select the green "Start Setup" button to enroll.
5. You will then be asked what type of device you are adding. Choose the type of device and then click “Continue". (Using the Duo push is the recommended option)
6. Follow the instructions on the screen specific to the type of device you are adding.

You will use a web site to enroll your device.

1. Start by downloading the Duo mobile app from your device's store and install it.
2. Go to mfa.unf.edu
3. You will see a UNF login page. Enter your username and password.
4. A Duo window will pop up. Select the green "Start Setup" button to enroll.
5. You will then be asked what type of device you are adding. Choose the type of device and then click "Continue". Using the Duo push is the recommended option.
6. Follow the instructions on the screen specific to the type of device you are adding.

Students going through the application process do not have a N Number, so they will not use two-factor authentication (Duo). After the application has been submitted, they are given N number and will need to validate their identity with Duo in order to log into myWings and other UNF applications.

These actions are treated as IT Security incidents. If a user denies a Duo authentication and selects to report it as fraudulent, IT Security will reset the UNF account password to a random value. The user will need to reset their password via Login Help. Learn more by visiting the Incident Response Page.

Anytime a user leaves the role of EMPLOYEE and ACTIVESTUDENT, their account is synced over to Duo that night and placed in the trash. The Duo trash disables the Duo account and marks the account for deletion. Deletion occurs on the 7th day after being marked as such. This affects users where neither of those two primary groups are left on their account (losing affiliation with UNF). During these 7 days, the user will not have access to their account as they will be disabled. After they are deleted, they will be able to add their device again to login to the portal in the role of EXEMPLOYEE or STUDENT. For those that need immediate access to the portal, before this 7 day window, can contact the Help Desk or IT Security and we can delete the account immediately so it can be setup again.

If a user has either of the active roles left in place on their account, nothing is affected.

If you are not sure if you have enrolled, you can test your login at mfa.unf.edu. After logging in and using the Duo app to confirm your identity, you will see a "Successful Sign-on" page displayed. This means you are enrolled. If you are not yet enrolled in Duo, you will be prompted to enroll.

Yes, you will need the device you used to enroll with Duo with you in order to log in. If the Duo registered device is not with you, you will not be able to validate your identity, and thus access these UNF applications.

Contact the ITS Help Desk immediately if you lose your phone or suspect that it's been stolen! UNF has enabled self-service for all applications. Using a modern web browser, login to mfa.unf.edu and use My Settings & Devices to delete your lost or stolen phone.

If you are unable to log in to Duo at all then ITS can disable the missing phone for authentication and help you log in using another method. While it's important that you contact ITS Help Desk if you lose your phone, remember that your password will still protect your account.

The advantages of using the Duo app to validate your identity (rather than choosing to receive a phone call) are:

• Faster and easier
  • Comparing the quick push and allow button on your phone notification vs. having to pull out a token or wait on a call or SMS.
• Works in any country
• Doesn't require cell service
• The app includes a code that can be used even in airplane mode
• Can be transferred if lost
  • By attaching the phone number, even if you lose your device you can still access your account with your number with a phone or SMS (text).

For employees who use a fob (hardware token) to validate, there are some drawbacks in which to be aware:

• You will need to type in a code each time (versus pressing "accept" in an app).
• It is possible for them to get out of sync with the authentication mechanism, requiring a phone call and intervention by ITS Help Desk to resync the device for use.
• They need to be replaced approximately every two years.

If your job or academic work depends on logging into one of the web applications listed here, then your best option would be to retrieve your phone. Another option is to visit the Help Desk to request a one-day temporary access to allow you to authenticate. You will need to visit the Help Desk on the first floor of the Carpenter Library to verify your identity.

If you get a new phone, you'll need to re-activate Duo Mobile. You may enroll your new device yourself using Duo's device management portal or ask the ITS Help Desk to send you a new activation link.

iOS (Apple)

Apple Watch

Android

Blackberry

No, as long as you access an application (e.g. Canvas, email) from within myWings (using the same browser window), you should not be prompted to validate with Duo a second time.

Yes, if you use the ‘remember me’ feature with Duo push you will only have to accept Duo every 30 days. This feature should only be used on private non-shared computers.

Connect your mobile device (phone) to the campus wireless network. The mobile app will work over the wireless connection.

There is no cost to download or use the Duo Mobile smartphone app. If not using the smartphone app, voice calls are sent only when you request them, and they would be billed by your carrier in the same way that any other call would be charged.

No. Enrolling in Duo helps protect your account as well as any university or personal data. The use of the service is mandated by the University of North Florida. Concerns about opting out may be directed to ITSecurity@unf.edu.

Yes. If you have access to WiFi or cellular service, Duo will function the same internationally as it does domestically. If you do not have access to WiFi or cellular service, additional options are available.

Yes, they are required to enroll in Duo order to access UNF's single-sign on applications and VPN.

You can authenticate using a passcode texted to your phone. To have Duo text you a batch of passcodes select the Text me new codes button after clicking Enter a Passcode (or type "sms" in the "second password" field).

To authenticate using an SMS passcode, click the Enter a Passcode button, type in a passcode you received from Duo via text message, and click Log In. Duo keeps track of which SMS passcodes you've already used in your batch, letting you know which one to use next. You can have new passcodes sent to you at any time. A new batch of passcodes will invalidate all old passcodes, so it's probably best to delete the old message when a new one is received.

If a student does not have a mobile device, they should contact the Help Desk as soon as possible. The Help Desk can be reached at 904-620-4357 (HELP) or helpdesk@unf.edu or they can submit a an online request.

If an employee does not have a mobile device, they can check out a fob (hardware token device) from the ITS Help Desk. The fob will provide a code that the employee will type in after they log in to validate their identity. Please visit them on first floor of the library during their open hours of operation to check one out.

Note: Hardware tokens or fobs have some drawbacks. One of these is that it is possible for them to get out of sync with the authentication mechanism, requiring a phone call and intervention by the ITS Help Desk to resync the device for use.

Hardware tokens can get out of sync with the authentication mechanism, requiring a phone call and intervention by the ITS Help Desk to resync the device for use.

If your mobile device does not support apps, you can check out a fob (hardware token device) from the ITS Help Desk. The fob will provide a code that the employee will type in after they log in to validate their identity. Please visit them on first floor of the library during their open hours of operation to check one out.

You will just need to add another account to your Duo Mobile app so you can use one device to obtain second authentication for more than one organization (or a non-UNF application).

You will need to delete an app or video you don’t use/need to make room on the device. iOS (Apple products) will manage space by uninstalling apps people don’t use much to make more available storage space. With Android, you can move apps to internal storage. The storage size for Duo is 33.9 MB on iOS and 22 MB on Android.

If you cannot make room on your device for the Duo app, you can authenticate using a passcode texted to your phone. To have Duo text you a batch of passcodes click the Text me new codes button after clicking Enter a Passcode (or type "sms" in the "second password" field).
To authenticate using an SMS passcode, click the Enter a Passcode button, type in a passcode you received from Duo via text message, and click Log In. Duo keeps track of which SMS passcodes you've already used in your batch, letting you know which one to use next. You can have new passcodes sent to you at any time. A new batch of passcodes will invalidate all old passcodes, so it's probably best to delete the old message when a new one is received.