multi_factor_authentication

1. Multi-Factor Authentication
Added protection for a more
secure you
Presenter: Jeff Penn

2. Multi-factor Authentication (MFA)
Objective
What is Multi-Factor Authentication
Why we need Multi-Factor Authentication
How to register and configure your devices

3. Multi-factor Authentication (MFA)
What is Multi-Factor Authentication??
Multi-factor authentication, also referred to as advanced or two-
factor authentication, provides an additional layer of security
when logging in or performing transactions online.
When logging in, a user is required to enter a password and
also authenticate using a second factor, typically a phone or
hardware token.

4. Multi-factor Authentication (MFA)

5. Multi-factor Authentication (MFA)
Mr. MFA

6. Multi-factor Authentication (MFA)

7. Multi-factor Authentication (MFA)
Mr. MFA

8. Multi-factor Authentication (MFA)
Why do we need it?
• Prevent unauthorized users from logging into your account
• Protect your identity
• Protect your data
• Protect your money!

9. Multi-factor Authentication (MFA)

10. Ways of MFA Authentication
• Call your phone (desk or cell)
• Send text message with pass codes to cell
• Use the Duo Mobile app to create a pass code or send a
notification to cell
• YubiKey authentication

11. Multi-factor Authentication Options

12. Demonstrations
How do I set this stuff up?!?
1) Registering/Activating MFA on your account
2) Setting up devices for MFA
3) Configuring and using your YubiKey
4) Choosing websites to use MFA

13. MFA Options – Phone Call
On the MFA homepage, select Add a basic cell phone or home/office phone
Fill out the form and click Continue
• Click on the multi-factor authentication home page link to return home

14. MFA Options – Phone Call
• Call your phone (desk or cell)
• Select the Call my phone work (or whatever you named it)
– You will receive a call from ‘Toll Free Call’
“Welcome to Duo. If you are not expecting this call, please hangup.
Otherwise, press any key on your phone to login.”
• Press any key on the phone
• Click Enter

15. MFA Options – Text Message
• Text your cell phone
• Select the Send SMS pass codes to cell
– You will receive a text from a random number with 10 passcodes
• Type any of the 10 passcodes into the MFA screen

16. MFA Options – Duo Mobile app
• Download the Duo Mobile app from the App Store or Play
Store (Smartphones only)

17. MFA Options – Duo Mobile app
On the MFA homepage, select Add a basic cell phone or home/office phone
Fill out the form and click Continue
• Click on the multi-factor authentication home page link to return home

18. MFA Options – Duo Mobile app
In Duo Mobile, click the Add Account button and then click Scan Barcode
Scan the QR code at the bottom of the screen and the Duke University
account will load on your phone. Click Continue on the webpage when
complete.
Click on the multi-factor authentication home page link to return home

19. MFA Options – Duo Mobile app

20. On the MFA homepage, select Advanced options and then click Register a
hardware token (YubiKey)
Follow the steps on the OIT page to complete the YubiKey configuration
process.
MFA Options – YubiKey

21. MFA Options – YubiKey
• Authenticate using a YubiKey
• Place your cursor in the YubiKey field
• Touch the gold circle on your YubiKey for it to auto-populate and log you in

22. MFA Login
Do I have to authenticate using these MFA methods every time??
No!
When logging in, you have an option to “Remember this device for 12
hours”

23. Multi-Factor Authentication Homepage
Select the different websites you would like MFA to be
used
Create Temporary Passcodes
See all the devices you have configured
Add/remove devices

24. More Information
You can access all the information on Multi-factor
Authentication by visiting the TSC website under the
Security link
http://it.fuqua.duke.edu
You can learn more about Multi-Factor Authentication on
OIT’s webpage.
https://idms-mfa.oit.duke.edu/mfa/help

25. Questions
Any questions?