Two-Factor Authentication

2FA Enrollment

For Faculty, Staff, and Wright State Student Employees

As a part of Wright State's commitment to protecting university data and faculty, staff, and student account information, the university has implemented two-factor authentication for a number of campus services, including WINGS.

Two-factor authentication (2FA) strengthens access security by requiring two methods (also referred to as factors) to verify your identity. 2FA protects against phishing, social engineering and password attacks and secures your accounts from attackers exploiting weak or stolen credentials. Wright State uses Duo Security for two-factor authentication.

To enroll in 2FA, click the Enroll Now button on the right. If you have completed the enrollment process, click the Submit Feedback button on the right to provide us with your feedback.

For more information about 2FA at Wright State, see the documentation below.

On this page:


What is Two-Factor Authentication?

What is Two-Factor Authentication?

Benefits of Two-Factor Authentication

  • Campus 'w' account passwords will be set to never expire for those individuals utilizing two-factor authentication! (Unless there is evidence the account password has been compromised)
  • Protects faculty and staff from phishing scams and attacks
  • Provides increased security for your Wright State accounts

Intro to Duo Security

Getting Started with Duo Security

2FA/Duo Security FAQs

  • What is Two-Factor Authentication?

    Two-factor authentication is an extra layer of security that requires not only a username and password, but also authenticates with a device in your possession (cell/smart phone, key fob, landline phone). 2FA combines two independent credentials: one you know (your password), and one you have (smartphone, etc) to enhance account security.

  • How do I View and Manage My Devices?
    1. Login to wings.wright.edu with your campus username and password.
    2. Click on the Manage Two-factor Authentication link under Personal Services

  • What are the Benefits?

    Benefits of 2FA include:

    • Increased security
    • Account protection
    • Meets compliance and best practices
    • Increased access to protected resources in WINGS Express
  • How do I Enroll?

    When you log in as usual (with your campus username and password) to access services using the new procedure, you will be prompted to enroll.

     

    To enroll your device, view this short video or follow the steps below:

     

    Enrolling in Duo 2FA

     

     

    1. Login to https://was.wright.edu/wsuduooptin/duooptin.htm with your campus username and password. 
    2. Select Two-Factor Opt In.
    3. Select Start setup.
    4. Select the type of device you will be using to authenticate. Click Continue
      Note: CaTS recommends enrolling both a mobile phone and your office phone in this service.
    5. Enter the phone number of the device you are enrolling and check the box confirming the number is correct. Click Continue
    6. Select the operating system of the device you are enrolling (i.e. iPhone, Android, etc). Click Continue
    7. If you do not have the Duo Mobile app installed on your device, download it from your application store now. Once you have downloaded the app, select I have Duo Mobile installed
    8. Activate Duo Mobile by following the instructions on the screen. Click Continue to Login.
      Note: You can rename your device in Duo by clicking on the Device Options button.

    9. You can choose to have Duo send you a Push notification (SMS message), or call your device when you are logging in by choosing that option from the drop down menu. Once you have your account set up, click Saved. Click Continue to Login.
       
    10. There will be a green banner at the bottom of the next screen confirming your enrollment. Depending on your settings, Duo will either send a Push notification or call your device. Once you have authenticated, the app will send you a Login request in the same form. Once you approve the Login request, you will be taken to the service you want to access. 
    11.  Once you approve the Login request, you will be taken to a final confirmation screen. Click the Continue onto button to access the service you want to log in to.
  • How do I Authenticate?

    There are several different methods to authenticate. If you select the Ask me to choose an authentication method option upon enrollment,  you will be prompted to choose an authentication method when logging in. 

    1. Send Me a Push: verify your identity by approving a push notification on your smartphone.
    2. Call Me: this method calls your phone and waits for you to pick up and press any key to authenticate before granting you access to your account. 
    3. Enter a Passcode: you will receive a passcode through Duo Mobile or an SMS text message on your smartphone which you can then enter to access your account. 

    Important Note: If you check the box next to Remember me for 180 days, the service will not require you to use two-factor authentication on that computer using that browser. However, the Remember me option is cookie-based, so if you clear your cookies or your browser settings automatically clear your cookies when you exit a session (i.e. Firefox), you will be prompted the next time you attempt to login to your account. 

  • What Devices can I Use?

    You can enroll in 2FA with a mobile device (recommended), tablet (iPad, Nexus 7, etc), landline (home or office phone), or a Duo Security Token. Multiple devices can be enrolled in this program. 

    Note: Duo Security Tokens are available through the CaTS Help Desk, however your department will be responsible for the $20 purchase cost. For more information and to request a Security Token, visit the Duo Token Purchase Request form. 

  • How do I Add, Remove, or Change My Devices?

    If the Remember Me Option is Selected:

    1. Login to wings.wright.edu with your campus username and password.
    2. Under Personal Information in the righthand sidebar in WINGS, select Manage Two-factor Authentication. You will be prompted to re-authenticate when accessing this service. 

    If the Remember Me Option is Not Selected:

    1. Login to wings.wright.edu
    2. Select how you wish to authenticate (push, phone call, or code).
    3. Once you are logged into WINGS, select Manage Two-factor Authentication under the Personal Information section to manage your account. You will be prompted to re-authenticate when accessing this service. 
  • What if I Forget My Device?

    If You Have Multiple Devices Registered (Recommended)

    1. Login to wings.wright.edu with your campus username and password. 
    2. If you have an additional device registered in the system, select that device using the dropdown menu next to Device: to authenticate. 

    If You Do Not Have Multiple Devices Registered

    1. Login to wings.wright.edu using your campus username and password.
    2. Call the CaTS Help Desk at (937) 775-4827. A technician will provide you with a 12 hour Passcode after verifying your identity. Once you have received your Passcode, select Enter a Passcode.
  • What If I Lose My Device or Get a New One?

    Important Note:

    • When managing your account using the link through WINGS, remove any old devices that are no longer in your possession, and add any new devices you will use to authenticate in the future. 

    For Lost Devices

    If You Have Multiple Devices Registered (Recommended)

    1. Login to wings.wright.edu with your campus username and password. 
    2. If you have an additional device registered in the system, select that device using the dropdown menu next to Device:
    3. Once you have authenticated into WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service. 

    If You Do Not Have Multiple Devices Registered

    1. Login to wings.wright.edu using your campus username and password.
    2. Call the CaTS Help Desk at (937) 775-4827. A technician will provide you with a Passcode after verifying your identity. Once you have received your 12 hour Passcode, select Enter a Passcode.
    3. Once you are logged in to WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service. 

    For New Devices

    For New Devices Using the Same Number

    1. Login to wings.wright.edu using your campus username and password.
    2. Select the Call Me option on the authentication screen. If you have Duo set to automatically send push notifications, click the Cancel option on the blue ribbon that appears at the bottom of the screen. 
    3. You will receive a call from Duo Mobile. Press any number on your keypad to authenticate. 
    4. Once you are logged in to WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service. 

    For New Devices Using a New Number

    1. Login to wings.wright.edu with your campus username and password. 
    2. If you have an additional device registered in the system, select that device using the dropdown menu next to Device:. If you do not have any additional devices registered, call the CaTS Help Desk at (937) 775-4827. A technician will provide you with a Passcode after verifying your identity. Once you have received your Passcode, select Enter a Passcode.
    3. Once you are logged in to WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service. 
  • What is 'Remember Me', and How Does It Work?

    If you check the 'Remember Me' box when authenticating you won't need to perform Duo two-factor authentication again for 90 days when using the same workstation and browser. However, if you are using a different workstation or browser than when you selected this option, you will still be prompted to authenticate into the service you are trying to access. 

    'Remember Me' is cookie-based. To deactivate this service, clear the cookie settings in your browser. For instructions on clearing your browser cookies, visit Clear Cache and Cookies

  • How do I Cancel the 'Remember Me' Option in Duo?

    You can cancel the 'Remember Me' option by clearing the cookies out from your browser. For instructions on clearing your cookies, visit Clear Cache and Cookies

  • Are There Any Known Issues With 2FA?

    Android OS

    *Requires Microsoft Authenticator App to Two-Factor into the following applications*

    Affected apps:

    • Outlook app
    • Office apps (e.g., Word, Excel, etc)
    • OneDrive for Business

    Unaffected Android Applications 

    • Native smartphone mail app

    iOS

    Applications where Two-Factor does not currently function:

    • Outlook App
    • Office apps (e.g., Word, Excel, etc)
    • OneDrive for Business 

    Workaround is to contact the CaTS Help Desk. The Help Desk will temporarily disable Two-Factor Authentication. User will then authenticate into the app and then the Help Desk will re-enable Two-Factor Authentication. Once a login session is established for these applications, Two-Factor challenge does not regularly reoccur.

    Unaffected iOS Applications

    • OWA app
    • Native Mail app
    • Browser-based applications (e.g., using Safari)

    macOS

    Affected apps:

    • Outlook client
    • Office apps (e.g., Word, Excel) may have issues opening documents from OneDrive

    Workaround is to authenticate on a whitelisted network (e.g., wired on campus), or contact the CaTS Help Desk. The Help Desk will temporarily disable Two-Factor Authentication. User will then authenticate into the app and then the Help Desk will re-enable Two-Factor Authentication. Once a login session is established for these applications, Two-Factor challenge does not regularly reoccur.

    Unaffected macOS Applications

    • Browser-based application access (e.g., with Safari, Chrome, or Firefox)

    Common Issues With Two-Factor Authentication

    To read about common issues users have experienced when using Two-Factor Authentication, visit https://guide.duo.com/common-issues. These issues are not Wright State specific.

  • Will updating my contact information through HR/WINGS Express update Duo?

    Updating your contact information through HR/WINGS Express will NOT update you information in Duo. Duo is a separate service that doesn't sync with your Wright State account settings. Changes to your phone number will need to be manually updated in Duo via the self-service options, or by contacting the CaTS Help Desk. 

  • Where will Two-Factor Authentication Not be Required?

    All campus wired network connections will not require two-factor authentication into most services. All campus wireless and off campus locations will challenge you with two-factor authentication.