Ohio University

Help and Resources: Multi-Factor Authentication

Already enrolled? Learn how to reactivate a device after a reset or replacement.

Getting Started

Before you can start using multi-factor authentication, you will need to enroll. After you have enrolled, services that are protected with multi-factor authentication will automatically prompt you to verify your login.

Configuring Duo

Request a Consultation

Hands-on help

Request Consultation

Need more personalized help? Request a Tool-Focused Consultation with OIT staff.

How To

Use the Duo Mobile App (Manage push notifications and Generate passcodes)

Manage Devices

Why is Multi-Factor Authentication important to me?

There’s a continued uptick in cyber-attacks aimed at higher education, oftentimes targeting sensitive student data.

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account.

Multi-factor authentication adds a second layer of security by adding a verification step to OHIO logins, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away if someone is trying to log in as you.

This second factor of authentication is separate and independent from your username and password.

What should I do if I received a Duo login request that I did not initiate?

An unexpected request means that someone is trying to use your password to login to your account. You should press Deny and change your OHIO password immediately.

How do I select the "Remember me for 30 days" option?

If you have Duo setup to automatically send you an authentication request as soon as you login, you will need to press cancel and then check mark the box to remember you for 30 days. At that time you can then select which authentication method you would like to use to login. If it is not setup to automatically send you an authentication request, then you should be able to check mark the box at the bottom before selecting which method you would like to use.

30 Day Reminder Check Box
Do I have to wait 30 days before making new changes to my settings now that I have selected "Remember me for 30 days"?

No, you can always adjust your settings even after selecting the "Remember me for 30 days" option. There are two ways to take care of this issue.

  1. You may clear your browser cache which will force the browser to forget you have selected this option. If you need help with this, please contact the Service Desk.
  2. You also can open the browser in a "New Incognito/Private Window"  and then login to one of the ohio.edu webpages.  Once duo authentication pops up, you will be able to edit settings. You may have to cancel the authentication request first if your Duo is setup to use your preferred device automatically.

 

I am not receiving any push notifications to my device.

If you are sure you are using the correct device, it may be an issue with network connectivity. Please try turning your WiFi off and then back on or, if you are currently using your cellular plans network, try turning airplane mode on and back off.

Please ensure the date/time on your device is set to automatically update. If this is set manually, the device will not communicate with Duo's servers and receive a notification.

If any of these methods don't work, please contact the Service Desk and they can send you a new activation link for your device.

I have switched phone numbers. How do I get Multi-Factor Authentication working for my new number?

Contact the Service Desk and they can remove your old phone number and device which will allow you to go through the enrollment process like it is your first device.

What do I do if I have lost my device or it has been stolen?

Contact the Service Desk and they can remove your old phone number and device. Once you have resolved your situation you will be able to enroll the device in Duo.

How do I authenticate my logins if I am traveling outside of the country?

If you are using the Duo Mobile App, it will generate a passcode even without internet access. If you work for the University, you may speak with your department about getting a hardware token. If you would like to request a hardware token, please fill out the Token Request Form.

What if I don't have access to a phone or electronic device?

If you are in a situation where access to phones or electronic devices is limited, you can request a hardware token to authenticate. A hardware token is a keychain-sized device for generating passcodes even without internet access.

Initial tokens will be provided at no cost to the user. Lost, stolen, or damaged tokens will be replaced at cost by the user.

Please request a hardware token through this form: Token Request Form

My hardware token is not working or the passcodes my hardware token is generating do not work.

If the hardware token is not generating a passcode, please contact the Service Desk to request a temporary passcode.

If the passcodes being generated are not being accepted during login, please contact the Service Desk as the hardware token has fallen out of sync. This most likely happened by accident if the device was stored near other objects and the button was pressed too many times.