As part UMBC’s ongoing efforts to keep the campus safe online, the Division of Information Technology (DoIT) will require that all students be enrolled in the campus’ Duo multi-factor authentication (MFA) account security service by the end of the 2022-23 academic year. All employees have been required to use Duo since 2019, as part of their obligation to protect sensitive, personally identifiable information.

While any student can enroll now, DoIT will be working to enroll students, in phases, with expected completion by the end of the academic year. DoIT’s Technology Support Center (TSC) will also send reminders via myUMBC.

Duo multi-factor authentication (MFA) greatly increases the security of your account by adding an extra layer of protection to the login procedure. With Duo MFA, your account will require you to have a second-factor device physically unique to you, such as a smartphone or even a tablet in your possession to log in. When you log in, your second-factor device will prompt you to approve your online login. Without approval through your second-factor device, any fraudulent attempts to log into your account are denied, thus preventing unauthorized access to your account and data.

To learn how to activate Duo today, visit my.umbc.edu/go/duo.

If you have further questions, please contact the TSC by either submitting a support request at my.umbc.edu/help or calling (410) 455-3838.

Nearly 2,500 faculty and staff members’ accounts are now being protected by Duo, and the numbers continue to rise. Whether you’ve been using Duo for years, or you’re a new user, it’s nice to be reminded of a few best practices for using Duo. These tips, and a number of other topics, can be found on our Duo FAQs.

Reduce how much you’re prompted by Duo - Use Remember me for 30 days

Do you like the security you get by using Duo, but don’t want to use the second-factor step every time you log in? Simple. Just check the “Remember me for 30 days” checkbox on the Duo authentication screen.

NOTE: Only use this option on computers you control and trust. For example, your office computer or home computer. Do not use this option on public computers.

Don’t type or call - Use Push notifications

By far, the easiest way to use Duo is with a push notification to your smartphone. More than likely you have your smartphone with you. Simply press “send push” on the Duo authentication screen and acknowledge the push notification on your device.

Protect yourself from being locked out - Register multiple devices

In the event you don't have your standard authentication device with you, like your smartphone, be sure to register additional devices such as your desk or home phone.

Have more questions about using Duo? Browse our Duo FAQs, submit an RT ticket at my.umbc.edu/help, or contact the Technology Support Center (TSC) at (410) 455-3838.

Last April, DoIT announced that faculty and staff with elevated Peoplesoft access would be required to use Duo two-factor authentication. We've since worked to enroll nearly 2,500 faculty and staff members into Duo. In the last week alone, Duo protected over 20,000 individual logins to campus resources like myUMBC and Peoplesoft.

Continuing our efforts to keep the campus safe online, DoIT will be requiring all remaining faculty to enroll in Duo by November 19th.

Duo 2-factor authentication (2FA) greatly increases the security of your account by adding an extra layer of protection to the login procedure. With Duo 2FA, your account will require you to have a second-factor device physically unique to you, such as a smartphone, your office phone, or even a tablet in your possession to log in. When you log in, your second-factor device will prompt you to approve your online login. Without approval from your second-factor device, any fraudulent attempts to log into your account are denied, thus preventing anyone who shouldn't have access to your account from getting to your data.

To learn more about using Duo two-factor authentication, visit our Duo FAQ collection at https://my.umbc.edu/go/duo

If you have questions or concerns submit an RT ticket at my.umbc.edu/help or contact the Technology Support Center at (410) 455-3838.

Andrew Gribben (pictured at right), Specialist in Undergraduate Admissions and Orientation, recently helped assist his colleagues in switching to Duo two-factor authentication as part of DoIT’s upcoming two-factor authentication requirement for faculty and staff with Peoplesoft access above “self-service” functions such as timesheets, etravel requests, etc.

Andrew demoed Duo during a staff meeting including having someone sign up in real time. He helped ease the transition to Duo by making himself available to walk staff through the sign-up process, as well as, answer any of their questions. When asked about what helped his group the most, Andrew says he targeted those who were skeptical or concerned before the rollout to the entire group. "This helped ensure a smoother process overall."

To help make sure your office’s rollout goes smoothly, Andrew and DoIT recommend the including the following to help your department’s rollout go smoothly:

• Demo Duo live to show not only how it works but how to sign up.

• Leverage the Duo FAQ collection to help users

• Send out email reminders encouraging users to sign up.

• Be available to offer 1 on 1 support to staff if necessary.

Once again, DoIT strongly encourages all faculty and staff to enable Duo 2FA now, but all employees with PeopleSoft access will be required to do so (staff by 12/31/18, faculty by 9/1/19). After these dates, DoIT will automatically enroll required employees into Duo. DoIT will also provide a “count-down” weekly reminder 90 days before the relevant deadline.

Click here to learn how to activate Duo today.

Additional information about Duo two-factor authentication is available in the FAQs.

If you have further questions, please contact the Technology Support Center by either submitting a support request at my.umbc.edu/help or calling (410) 455-3838.

UPDATE: To get past the start of Fall 2019, faculty with PS access will be required to upgrade to Duo by 9/30/19.

As part of ongoing efforts to keep the campus safe online, the Division of Information Technology (DoIT) has partnered with Duo Security for 2-factor authentication (2FA), which DoIT staff have used for several years. Given UMBC employees’ obligation to protect sensitive, personally identifiable information, all UMBC staff members with access to Peoplesoft (PS) will be required to use Duo by the end of the year 2018. All faculty members with Peoplesoft access will be required to do so by Fall 2019. This will apply to any online UMBC service requiring a login, except for current, “self-service” functions such as timesheets, etravel requests, etc.

Duo 2-factor authentication (2FA) greatly increases the security of your account by adding an extra layer of protection to the login procedure. With Duo 2FA, your account will require you to have a second-factor device physically unique to you, such as a smartphone, your office phone, or even a tablet in your possession to log in. When you log in, your second-factor device will prompt you to approve your online login. Without approval from your second-factor device, any fraudulent attempts to log into your account are denied, thus preventing anyone who shouldn't have access to your account from getting to your data.

However, you don't need to have PS access or even wait until the various deadlines to get started! In fact, DoIT strongly encourages all faculty and staff to enable Duo 2FA now. Required employees who choose not to enable Duo 2FA by the deadlines above will be automatically enrolled on those dates. DoIT will also provide a “count-down” weekly reminder 90 days before the relevant deadline.

Note: DoIT presented this planned rollout at the March 27 IT Steering Committee, March 29 at TechFest, at the Faculty Senate Computer Policy Committee (CPC) on April 25, and will do so at Professional Staff Senate (PSS) meeting before the end of the term as well.

Click here to learn how to activate Duo today.

Additional information about Duo two-factor authentication is available in the FAQs.

If you have further questions, please contact the Technology Support Center by either submitting a support request at my.umbc.edu/help or calling (410) 455-3838.