...
What devices can I use for the second factor?
MFA lets you link multiple devices to your account, so you You can use your mobile phone, a landline, and or a hardware token, tablet as your second factor. When you are doing your initial setup, you may add as many devices as you like (landline and/or mobile). Subsequently, when you are logging in you can choose which device the authentication request is sent to and which authentication method you would like (via Duo Mobile App, SMS text message, or phone call).
Is there a limit on the number of MFA devices?
There is no limit on the number of devices that can be added. We recommend that all users add at least 2 devices, such as a cellphone/smartphone and a landline/desk phone.
How long does it take to enroll/register a device for MFA?
Typically, 5 minutes or less. ITS Help Desk can help with the setup process, if required
How many devices can I add?
There is no limit on the number of devices that can be added. We recommend that all users add
at least 2 devices, such as a cellphone/smartphone and a landline/desk phone.
Do I need to have a smartphone to use MFA?
No, you can also use a cell phone (“flip phone”), landline (such as your office or home phone), or tablet. Smartphones provide the most flexibility and ease of use via the mobile app and are recommended.
Does it cost me money to authenticate with my phone?
“Push” authentication uses a very small amount of Internet data traffic to function (a few kilobytes per login). Text messages and voice calls are sent only when you request them, and would be billed by your carrier like any other text message or inbound voice call. The Duo mobile app also works like a token and will generate a passcode, this functionality will not require any data and works even when your smart phone is in “airplane” mode.
What if I don’t have a data plan on my phone?
The Duo smart phone app provides options that work without a data plan, a texting plan or even a connection, if necessary. The app can generate the required code without need of either a cell signal or data plan, and it can do so anywhere in the world. If you have a signal and data plan, the app makes two-factor authentication as easy as a pushing a single button, but if you don’t, you can use the app to generate a six-digit code and enter that instead.
Can I use the MFA app internationally?
The MFA smart phone app is designed to work internationally. If you install the app, it can generate the required code without need of either a telephone signal or data plan, and it can do this anywhere in the world. If you have a signal and data plan, the app makes two-factor authentication as easy as a pushing a single button, but if you don’t have one of those two things, you can use the app to generate a six-digit code and enter that manually.
Can the system handle international phone numbers?
Yes, MFA can handle international phone numbers. If entering an international phone number, you can leave a space between country code, city code, and the phone number.
Using MFA
How often do I need to use the second factor authentication?
You will be required to MFA every time you log in to the VPN service, when off-campus. When signing into OWA and my.fairfield.edu, you will have the option to remember your session for 24 hours. If you select this option, you will not be required to MFA on those services if you sign in again on the same device within 24 hours. This functionality is also browser based so if you switch browsers, the system will prompt you to MFA again even if you selected the option to remember your previous session.
Does it cost me money to authenticate with my phone?
“Push” authentication uses a very small amount of Internet data traffic to function (a few kilobytes per login). Text messages and voice calls are sent only when you request them, and would be billed by your carrier like any other text message or inbound voice call. The Duo mobile app also works like a token and will generate a passcode, this functionality will not require any data and works even when your smart phone is in “airplane” mode.
What if I forget my smartphone at home?
...
Contact the ITS Help Desk immediately if you lose your phone or suspect that it's been stolen.
The support specialist will disable it for MFA and help you log in using a one-time code. While it's important that you contact the Help Desk if you lose your phone, remember that your
password will still protect your account.
I’ve selected to automatically send push notifications to my phone, but I need to authenticate using another device.
If you have checked the box that allows you to send a push to your mobile phone, you will automatically receive push notifications every time you are required to use MFA. The rest of the DUO screen will then be blurred out (as shown below):
<<Insert picture here>>
If you need to push the notification to another device, hit CANCEL at the bottom right of the screen. This will allow you to authenticate with another previously-registered device. If you no longer wish to receive automatic push notifications, uncheck the box next to “Automatically send a push”. You can then Log In to your desired page or manage your devices.
What if I don’t have a mobile connection?
The Duo Mobile App can generate a passcode without a cellular or wireless connection. This number can then be typed on the authentication screen for your second factor. Alternately, you may also use a landline phone if an internet connection is unavailable assuming you have already setup this device type.
What is the user experience if you are using your phone or an iPad on a cellular network or on a non-Fairfield Wi-Fi network and need to log in?
You will be prompted to MFA since this is considered an off-campus network. If the registered device is the same as the one being used to login, the Duo app will notify & prompt for confirmation and users can confirm access the usual way. Alternatively, a secondary device can also be used to confirm the MFA.