Open

 

What is Multi-Factor Authentication?

Multi-Factor Authentication (or MFA) requires you to use more than one method to prove your identity such as “something you know” and “something you have”. An example would be, when accessing a web resource and having to enter your username and password (something you know) and approving a Duo authentication request on your phone (something you have).

Recommended MFA Authentication Options

The following are recommended MFA authentication options.

• Verified Duo Push

• Hardware Token

The following are considered insecure MFA authentication options and should be avoided in favor of the options listed above.

• Phone Call

• SMS / Text Message

Frequently Asked Questions

General

Why is MFA important?
Phishing emails, stolen passwords, password guessing, password cracking, to name a few, are all on the rise. MFA helps protect your identity by adding an additional layer of security in the event that your password is compromised.

Who is eligible to use MFA?
All faculty, staff, and students.

Am I required to use MFA?
Once your account is enrolled you will be required to use MFA when accessing Fairfield University resources from off campus networks.

Device Compatibility and Travel

What types of devices do you recommend I enroll for using MFA?
Smartphones and tablets are the preferred types of devices to enroll in your Duo account. We recommend users configure a primary device such as your cell phone and a secondary/backup device such as a tablet.

Will Duo work on my device when I travel outside the United States?

Yes—if your device has Internet access (via Wi-Fi or an international data plan) and Duo is not blocked in that country, you can receive and approve Verified Duo Push notifications. If offline, use a passcode from the Duo app to authenticate.

Duo Mobile

What is Duo Mobile?
Duo Mobile is the Duo app you install on your phone that allows you to receive and respond to Duo Verified Push notifications. The Duo Mobile app also allows you to access passcodes if you select that option when accessing an resource that requires multi-factor authentication.

What if I receive a Duo Authentication but wasn’t accessing something that requires MFA?
This may mean your password has been compromised and someone is trying to access an MFA protected resource using your identity. Do not approve the Duo Authentication request. Change your Net ID password immediately and contact the ITS help desk and ITS security team.

What is Verified Duo Push?

Sometimes attackers try to overwhelm users with repeated Duo Push requests, hoping they’ll approve one out of frustration. Users may also accidentally approve a request out of habit. Verified Duo Push helps prevent this by displaying a code on the login screen, which you must enter into the Duo app to complete authentication.