Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Enrollment in Duo is mandatory for all faculty and staff (including student workers) and is a key component of Clarkson’s information security initiative.  Beginning today, you can enroll your account by visiting the Clarkson Duo Self-Service Portal at https://duoportal.clarkson.edu/. This begins the six week soft-launch, during which you may enroll at your convenience.  Beginning on October 14, 2019, enrollment will be mandatory and unenrolled accounts will be denied access to Clarkson services.

How does Duo work?

Duo is a two-factor authentication system that Clarkson is implementing on multiple services to increase security. After you login with your username and password, Duo confirms your identity using one of the following methods you choose:

  • Sending a push notification to the Duo Mobile app on your smartphone that you acknowledge to confirm your identity.

  • Requiring a passcode: 

    • that you requested via the Duo Authentication prompt,

    • that you generated on your Duo Mobile app, 

    • or that is displayed on a hardware token

Where has Duo been implemented at Clarkson?

  • Duo has been deployed as part of the Central Authentication Service (CAS), which protects myCU (PeopleSoft Student), PeopleSoft Finance, PeopleSoft HR, Moodle, Slate, Nolij, Intranet, Concerto (Digital Signage), and many other services. 

  • In the coming months, Duo will be expanded to protect G Suite (which includes: Gmail, Google Drive, etc.). At that future date, Duo will replace the Google Two-Factor Authentication mechanism that is currently used to protect all staff accounts. 

What are my authentication options?

Currently we support three forms of additional authentication:

  1. Push notifications on a cell phone through the Duo app, also known as a "Duo Push" (Strongly Recommended, requires an Internet connection)
    1. If you have been issued a Clarkson owned cell phone, this is the mandatory methods
  2. Entering a security key generated by the Duo app on your cell phone (does not require an Internet connection).
  3. Entering a security key generated by a Duo hardware tokentoken  (does not require an Internet connection).

How do I enroll in Duo?

Detailed instructions for enrolling your cell phone in Duo are available here.

Do I have to use Duo every time I login?

You will have the option to "trust" the computer you are logging in from for 15 days.  (This options requires you use the same browser and not clear your browser cache.)

...

  • If you have configured Duo to automatically send you a push instead of asking you which method to use.
  • If you are connecting via an iPad, iPhone, or Android device
  • If your web browser does not have cookie support enabled. 

What if I don't have a data plan on my phone? What if I don't have a connection?

The Duo smart phone app provides options that work without a data plan, a texting plan or even a connection, if necessary. The app can generate the required code without need of either a telephone signal or data plan, and it can do so anywhere in the world. If you have a signal and data plan, the app makes two-factor authentication as easy as a pushing a single button, but if you don't, you can use the app to generate a six digit code and enter that instead.

What if I don't have my phone?

You can contact the Clarkson IT HelpDesk. They will verify your identity and provide a temporary passcode.

What if I lose my phone?

Please contact the Clarkson IT HelpDesk. They will immediately lock your Duo account and will provide you with an alternative method to authenticate. (You should also contact your mobile carrier and have them lock your mobile account as well)

What if I get a new phone?

You can use the self-service portal at https://duoportal.clarkson.edu to add a new mobile device. If your Duo account was previously locked due a lost phone incident, please contact the HelpDesk for assistance.

Can I opt-out of using Duo?

No. Enrolling in Duo helps protect your account from compromise even if you never expect to need it. Consequently, for the increased protection of your own personal information, the information of our faculty, staff, and students, as well as other Clarkson Information Systems, all faculty and staff (including student workers) must enroll in Duo Security.

Can I use Duo while outside of the United States?

If you’ll have reliable internet access on your device while abroad, Duo Mobile and its “Send Me a Push” option for signing in will work normally.

If you won’t have internet access on your device, Duo Mobile can operate while offline using the “Enter a Passcode” option. A hardware token will also work offline but, since it is a physical device, it must be obtained before you begin traveling. 

Use of Personal Devices

Can I use my own personal smartphone or tablet for 2FA?

...