Two-Factor Authentication

2FA Enrollment

For Current Faculty, Staff, and Wright State Student Employees

*Those with an affiliation of Emeritus Faculty only are not required to sign up for this service. If you have questions about your current status at the University, contact the CaTS Help Desk at (937) 775-4827.*

*Beginning June 3rd, 2019, CaTS began rolling out Duo two-factor authentication to all current faculty and staff.*

As a part of Wright State's commitment to protecting university data and faculty, staff, and student account information, the university has implemented two-factor authentication for a number of campus services, including WINGS, Office 365, ServiceNow, and more. In the future, WINGS Express services such as payment information, leave reports, and grade entry will also require two-factor authentication. 

Two-factor authentication (2FA) strengthens access security by requiring two methods (also referred to as factors) to verify your identity. 2FA protects against phishing, social engineering, and password attacks, and secures your accounts from attackers exploiting weak or stolen credentials. Wright State uses Duo Security for two-factor authentication. 

On this page: 

What is Two-Factor Authentication

Two-factor authentication is an extra layer of security that requires not only a username and password, but also authenticates with a device in your possession (cell/smart phone, key fob, landline phone). 2FA combines two independent credentials: one you know(your password), and one you have (smartphone, etc) to enhance account security.

View a short video about 2FA

How It Works

Enrolling in Duo 2FA

Benefits of Two-Factor Authentication

  • Campus 'w' account passwords will be set to never expire for those individuals utilizing two-factor authentication! (Unless there is evidence the account password has been compromised)
  • Protects faculty and staff from phishing scams and attacks
  • Provides increased security for your Wright State accounts

Instructions

Below are instructions for using Duo Mobile for two-factor authentication purposes. 

Enroll in Duo Mobile

CaTS recommends you go through the enrollment process using a computer (laptop, desktop) with your phone in your possession. 

  1. Login to https://was.wright.edu/wsuduooptin/duooptin.htm with your campus username and password. 
  2. Select Two-Factor Opt In.
  3. Select Start setup.
  4. Select the type of device you will be using to authenticate. Click Continue
    Note: CaTS recommends enrolling both a mobile phone and your office phone in this service.
  5. Enter the phone number of the device you are enrolling and check the box confirming the number is correct. Click Continue
  6. Select the operating system of the device you are enrolling (i.e. iPhone, Android, etc). Click Continue
    Note: If you have already enrolled a device and want to enroll additional devices, select Other and follow the steps for enrollment.
  7. If you do not have the Duo Mobile app installed on your device, download it from your application store now. Once you have downloaded the app, select I have Duo Mobile installed. You will then be asked to scan a QR code that will appear on your computer screen. Open the Duo Mobile app and take a picture of the code to continue enrollment. 
  8. Activate Duo Mobile by following the instructions on the screen. Click Continue to Login.
    Note: You can rename your device in Duo by clicking on the Device Options button.

  9. You can choose to have Duo send you a Push notification (SMS message), or call your device when you are logging in by choosing that option from the drop down menu. Once you have your account set up, click Saved. Click Continue to Login.
     
  10. There will be a green banner at the bottom of the next screen confirming your enrollment. Depending on your settings, Duo will either send a Push notification or call your device. Once you have authenticated, the app will send you a Login request in the same form. Once you approve the Login request, you will be taken to the service you want to access. 
  11.  Once you approve the Login request, you will be taken to a final confirmation screen. Click the Continue onto WINGS button to access the service you want to log in to.

Authenticating with Duo Mobile

There are several different methods to authenticate. If you select the 'Ask me to choose an authentication method' option upon enrollment, you will be prompted to choose from the following:

  1. Send Me a Push: verify your identity by approving a push notification on your smartphone.
  2. Call Me: this method calls your phone and waits for you to pick up and press any key to authenticate before granting you access to your account.
  3. Enter a Passcode: you will receive a passcode through Duo Mobile or an SMS text message on your smartphone which you can then enter to access your account. 

Important Note: If you check the box next to 'Remember me for 180 days', the service will not require you to use two-factor authentication on that computer using that browser. However, the 'Remember me' option is cookie-based, so if you clear your cookies or your browser settings automatically clear your cookies when you exit a session (i.e. Firefox), you will be prompted the next time you attempt to login to your account. 

Viewing and Managing Devices

Viewing Your Devices

  1. Login to wings.wright.edu with your campus username and password
  2. Under Personal Information in the righthand sidebar in WINGS, select Manage Two-factor Authentication
  3. Hit Cancel if you have it set to auto send a push notification
  4. Click on My Settings & Devices
  5. Authenticate using Duo

Managing Your Devices

Adding a New Device

  1. Follow steps 1-3 in the Viewing Your Devices section
  2. Select Add a new device and choose your method of authentication
  3. Follow the steps to enroll a new device, similar to how you enrolled your first device

Removing a Device

If you want to remove an old device from Duo Mobile, contact the CaTS Help Desk at (937) 775-4827. 

Changing Devices

  1. Follow Steps 1-3 in the Viewing Your Devices section
  2. Select My Settings & Devices

Forgotten Device

If You Have Multiple Devices Registered (Recommended)

  1. Login to wings.wright.edu with your campus username and password. 
  2. If you have an additional device registered in the system, select that device using the dropdown menu next to Device: to authenticate. 

If You Do Not Have Multiple Devices Registered

  1. Login to wings.wright.edu using your campus username and password.
  2. Call the CaTS Help Desk at (937) 775-4827. A technician will provide you with a 12 hour Passcode after verifying your identity. Once you have received your Passcode, select Enter a Passcode.

Lost or New Devices

Important Note:

  • When managing your account using the link through WINGS, remove any old devices that are no longer in your possession, and add any new devices you will use to authenticate in the future. 

For Lost Devices

If You Have Multiple Devices Registered (Recommended)

  1. Login to wings.wright.edu with your campus username and password. 
  2. If you have an additional device registered in the system, select that device using the dropdown menu next to Device:
  3. Once you have authenticated into WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service. 

If You Do Not Have Multiple Devices Registered

  1. Login to wings.wright.edu using your campus username and password.
  2. Call the CaTS Help Desk at (937) 775-4827. A technician will provide you with a Passcode after verifying your identity. Once you have received your 12 hour Passcode, select Enter a Passcode.
  3. Once you are logged in to WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service. 

For New Devices

For New Devices Using the Same Number

  1. Login to wings.wright.edu using your campus username and password.
  2. Select the My Settings & Devices option on the authentication screen. If you have Duo set to automatically send push notifications, click the Cancel option on the blue ribbon that appears at the bottom of the screen. 
  3. Select the Call Me option on the authentication screen. If you have Duo set to automatically send push notifications, click the Cancel option on the blue ribbon that appears at the bottom of the screen.
  4. You will receive a call from Duo Mobile. Press any number on your keypad to authenticate.
  5. Select Device options for the phone number that is associated with the new device.
  6. Click on Reactivate Duo Mobile.
  7. Follow the prompts to reactivate your new device. 

For New Devices Using a New Number

  1. Login to wings.wright.edu with your campus username and password. 
  2. If you have an additional device registered in the system, select that device using the dropdown menu next to Device:. If you do not have any additional devices registered, call the CaTS Help Desk at (937) 775-4827. A technician will provide you with a Passcode after verifying your identity. Once you have received your Passcode, select Enter a Passcode.
  3. Once you are logged in to WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service. 

Duo Security Tokens

Duo Security Tokens are fobs that are able to be used in place of a phone or phone number. A small button on the key fob is pressed and a 6-digit number is displayed. This number is typed into the passcode field on your computer and you proceed with your login. Duo Security Tokens do not require network or cellular connectivity to work. They also work worldwide.

Duo Security Tokens are available through the CaTS Help Desk, however your department will be responsible for the $20 purchase cost. For more information, or to request a Security Token, visit the Duo Token Purchase Request form. 


Training Dates

Currently, there are no training sessions scheduled for two-factor authentication. Walk-in training is available to faculty and staff at the CaTS Help Desk, 025 Library Annex. 


2FA/Duo Security FAQs

  • What Devices can I Use?

    You can enroll in 2FA with a mobile device (recommended), tablet (iPad, Nexus 7, etc), landline (home or office phone), or a Duo Security Token. Multiple devices can be enrolled in this program. 

    Note: Duo Security Tokens are available through the CaTS Help Desk, however your department will be responsible for the $20 purchase cost. For more information and to request a Security Token, visit the Duo Token Purchase Request form. 

  • What is 'Remember Me', and How Does It Work?

    If you check the 'Remember Me' box when authenticating you won't need to perform Duo two-factor authentication again for 90 days when using the same workstation and browser. However, if you are using a different workstation or browser than when you selected this option, you will still be prompted to authenticate into the service you are trying to access. 

    'Remember Me' is cookie-based. To deactivate this service, clear the cookie settings in your browser. For instructions on clearing your browser cookies, visit Clear Cache and Cookies

  • How do I Cancel the 'Remember Me' Option in Duo?

    You can cancel the 'Remember Me' option by clearing the cookies out from your browser. For instructions on clearing your cookies, visit Clear Cache and Cookies

  • Are There Any Known Issues With 2FA?

    Common Issues With Two-Factor Authentication

    To read about common issues users have experienced when using Two-Factor Authentication, visit https://guide.duo.com/common-issues. These issues are not Wright State specific.

  • Will updating my contact information through HR/WINGS Express update Duo?

    Updating your contact information through HR/WINGS Express will NOT update you information in Duo. Duo is a separate service that doesn't sync with your Wright State account settings. Changes to your phone number will need to be manually updated in Duo via the self-service options, or by contacting the CaTS Help Desk. 

  • Where will Two-Factor Authentication Not be Required?

    All campus wired network connections will not require two-factor authentication into most services. All campus wireless and off campus locations will challenge you with two-factor authentication.