Multifactor Authentication — Duo
Also known as MFA, two-factor authentication, TFA, Duo and two-step verification.
Multifactor authentication (MFA) uses multiple proofs of identity to ensure you are authorized to access the service or resource that you are requesting.
These proofs include more than one of:
- something you know (a secret piece of information, such as a password)
- something you have (a token, card or device)
- something you are (a biometric measurement or representation)
CUIT uses Duo as the MFA service to verify your identity for Columbia’s centralized applications. With Duo, you can use a mobile app, a text message or a phone call to authenticate. Duo can be combined with other authentication factors like username and password authentication to create multifactor authentication. Most people use Duo via the mobile app, Duo Mobile, which runs on a variety of smartphones and tablets.
Duo multifactor authentication is currently required for access to the following services:
- Columbia College Salesforce*
- Columbia Health*
- CU Health (Doris)
- FinSys (some functions)
- PAC Time and Absence
- Ring Central client
- Slate (GSB, SEAS, SOA)
- View Your Paycheck
- View Your Direct Deposit Information
- View or Update Your Benefits information
- View or Update Your Personal Information
- View Your Tax Information
- My W-2*
- Verify Your Employment*
You will not need to change your UNI password periodically if you register for Duo MFA for all web browser logins to Columbia applications (for example, LionMail, ARC, PAC, Courseworks, Rascal) a.k.a., "MFA ALL".
Benefits of MFA ALL
- You will no longer be required to periodically update your password!
- Password research has found that keeping a strong, unique password that you remember is more secure than using weaker passwords. Using MFA ALL provides much stronger security for your account than logging in with a username and password alone. Protect your UNI account and your personal information by registering for MFA ALL.
- If you already use Duo daily, you will barely notice the change if you check the Remember me for 12 hours feature. If you've had problems with the 12-hour feature, try this "Cancel" fix or contact the Service Desk.
How to opt into this extra layer of security
- Browse to Multifactor Authentication Self Service
- Choose All web applications in the SELECT APPLICATIONS FOR MFA box
Watch these how-to videos to learn how to install and use Duo on your mobile device (iPhone and Android).
- Install Duo on your iPhone (streaming version)
- Install Duo on your iPhone (downloadable mp4 version)
Authentication is the process of ensuring that something is genuine. Username and password authentication uses a shared secret (the password) to establish that a user of an application is actually who or what the user claims to be.
Multifactor authentication (MFA) uses multiple forms, or factors, of proof, including:
- Something you know (a secret like a password)
- Something you have (a token, card or device)
- Something you are (a biometric measurement or representation)
The number and independence of the authentication factors add to the degree of confidence we have in the identity of the person or thing. This degree of confidence is sometimes called the level of assurance. A multifactor authentication is said to have a higher level of assurance than an authentication that uses a single factor.
Duo is a service that can use a mobile app, a text message or a phone call to authenticate you. It can be combined with other authentication factors like username and password authentication to create multifactor authentication. Most people use Duo via the mobile app, Duo Mobile, which runs on a variety of smartphones and tablets. Here are descriptions and screenshots of Duo Mobile for Android, Apple iOS, BlackBerry and Windows Phone.
Duo has been added to Columbia's CAS web authentication service to create multifactor authentication. It is required for logins to selected applications and for logins by selected users to some additional "MFA-optional" applications. Duo authentication has also been added to Remote Desktop Protocol (RDP) logins for CUIT-managed Windows servers and to logins to CUIT-managed Linux hosts.