Clarkson is beginning to deploy two-factor authentication as a component of our campus information security plan. All faculty and staff will be required to enroll their accounts in Duo Two-Factor Authentication by October 14, 2019. Frequently Asked Questions and enrollment instructions are included below.
Why is Clarkson implementing Two Factor Authentication?
In higher education our information systems are subject to increasingly sophisticated and persistent attacks that seek to steal the information that we are entrusted with protecting. Passwords alone have proven to be an ineffective means to mitigate the current threat to our information resources. Two-factor authentication decreases the risk of compromises and data breaches by requiring two factors to confirm your identity — something you know (your password) and something you have (eg. mobile phone or hardware token).
How does Duo work?
Duo is a two-factor authentication system that Clarkson is implementing on multiple services to increase security. After you login with your username and password, Duo confirms your identity using one of the following methods you choose:
- Sending a push notification to the Duo Mobile app on your smartphone that you acknowledge to confirm your identity.
- Requiring a passcode that you requested via the Duo Authentication prompt, that you generated on your Duo Mobile app, or that is displayed on a hardware token
Where has Duo been implemented at Clarkson?
- Duo has been deployed as part of the Central Authentication Service (CAS), which protects myCU (PeopleSoft Student), PeopleSoft Finance, PeopleSoft HR, Moodle, Slate, Nolij, Intranet, Concerto (Digital Signage), and many other services.
- In the coming months, Duo will be expanded to protect G Suite (which includes: Gmail, Google Drive, etc.). At that future date, Duo will replace the Google Two-Factor Authentication mechanism that is currently used to protect all staff accounts.
How do I enroll in Duo?
Enrollment in Duo is mandatory for all faculty and staff and is a key component of Clarkson’s information security initiative. Beginning today, you can enroll your account by visiting the Clarkson Duo Self-Service Portal at https://duoportal.clarkson.edu/. This begins the six week soft-launch, during which you may enroll at your convenience. Beginning on October 14, 2019, enrollment will be mandatory and unenrolled accounts will be denied access to Clarkson services.
From the Clarkson Duo Self-Service Portal:
- Click on the “Start Setup” button.
- Select the type of device you would like to use (Mobile Phone is strongly recommended and is the required mechanism if you have a Clarkson-provided smartphone.)
- Enter your phone number
- Select your device platform
- Install the Duo app on your device
- Activate your device by scanning the QR code from the Duo app
That’s it! You’re all set! Detailed enrollment instructions are available here; and answers to frequently asked questions about Duo are available here.
