Two-Factor Authentication
Two-Factor Enrollment
On this page:
- About Two-Factor Authentication
- Available To
- Benefits and Key Features
- Getting Started
- Usage Instructions
- Training
- Frequently Asked Questions
About Two-Factor Authentication
As a part of Wright State's commitment to protecting university data and faculty, staff, and student account information, the university has implemented two-factor authentication for a number of campus services, including WINGS, Office 365, ServiceNow, and more. In the future, WINGS Express services such as payment information, leave reports, and grade entry will also require two-factor authentication.
Two-factor authentication (2FA) strengthens access security by requiring two methods (also referred to as factors) to verify your identity. 2FA protects against phishing, social engineering, and password attacks, and secures your accounts from attackers exploiting weak or stolen credentials. Wright State uses Duo Security for two-factor authentication. What is Two-Factor Authentication
Two-factor authentication is an extra layer of security that requires not only a username and password but also authenticates with a device in your possession (cell/smart phone, key fob, landline phone). 2FA combines two independent credentials: one you know (your password), and one you have (smartphone, etc.) to enhance account security.
Available To
Student employees, faculty, staff, students
Does not apply to those with an affiliation of Emeritus Faculty. If you have questions about your current status at the university, call the CaTS Help Desk at 937-775-4827.
Benefits and Key Features
- Campus 'w' account passwords will be set to never expire for those individuals utilizing two-factor authentication! (Unless there is evidence the account password has been compromised)
- Protects faculty and staff from phishing scams and attacks
- Provides increased security for your Wright State accounts
Getting Started
Current Faculty and Staff (Required): You will be required to enroll in two-factor authentication to access online services such as WINGS, WINGS Express, Office 365, and more as an added layer of security to your Wright State accounts.
Student Employees (Required): You will be required to enroll both your personal student account and delegated account in Duo separately. CaTS recommends enrolling your personal student account first, closing out of all browsers, and then following the same steps to enroll your delegated account.
Current Students (Required):
- Enrolling in two-factor authentication is now mandatory for all currently enrolled Wright State students.
- Unlike faculty and staff, students enrolled in this service will still be required to change their campus account password every five years.
- Student authentication method options include receiving a Duo push, or using a passcode sent to your phone via SMS message. Read more about the 'Send me a Push' and 'Enter a Passcode' authentication methods.
- If you have forgotten your smart phone and are unable to log in to a service requiring two-factor authentication, temporary passcodes are available by contacting the CaTS Help Desk at 937-775-4827.
Enroll in Duo Mobile
CaTS recommends you go through the enrollment process using a computer (laptop, desktop) with your phone in your possession.
Login to https://was.wright.edu/wsuduooptin/duooptin.htm with your campus username and password.
Select Two-Factor Opt-In.
Select Start setup.
Select the type of device you will be using to authenticate. Click Continue.
Note: CaTS recommends enrolling both a mobile phone and your office phone in this service.
Enter the phone number of the device you are enrolling and check the box confirming the number is correct. Click Continue.
Select the operating system of the device you are enrolling in (i.e. iPhone, Android, etc). Click Continue.
Note: If you have already enrolled a device and want to enroll in additional devices, select Other, and follow the steps for enrollment.
If you do not have the Duo Mobile app installed on your device, download it from your application store now. Once you have downloaded the app, select I have Duo Mobile installed. You will then be asked to scan a QR code that will appear on your computer screen. Open the Duo Mobile app and take a picture of the code to continue enrollment.
Activate Duo Mobile by following the instructions on the screen. Click Continue to Login.
Note: You can rename your device in Duo by clicking on the Device Options button.
You can choose to have Duo send you a Push notification (SMS message) or call your device when you are logging in by choosing that option from the drop down menu. Once you have your account set up, click Saved. Click Continue to Login.
There will be a green banner at the bottom of the next screen confirming your enrollment. Depending on your settings, Duo will either send a Push notification or call your device. Once you have authenticated, the app will send you a Login request in the same form. Once you approve the Login request, you will be taken to the service you want to access.
Once you approve the Login request, you will be taken to a final confirmation screen. Click the Continue onto WINGS button to access the service you want to log in to.
Usage Instructions
Authenticate with Duo Mobile | View Your Devices | Manage Your Devices | Forgotten Device | Lost or New Devices | Duo Security Tokens
Authenticate with Duo Mobile
There are several different methods to authenticate. If you select the 'Ask me to choose an authentication method' option upon enrollment, you will be prompted to choose from the following:
Send Me a Push: verify your identity by approving a push notification on your smartphone.
Call Me (faculty and staff only): this method calls your phone and waits for you to pick up and press any key to authenticate before granting you access to your account.
Enter a Passcode: you will receive a passcode via an SMS text message on your smartphone which you can then enter to access your account.
Important Note: If you check the box next to 'Remember me for 180 days', the service will not require you to use two-factor authentication on that computer using that browser. However, the 'Remember me' option is cookie-based, so if you clear your cookies or your browser settings automatically clear your cookies when you exit a session (i.e. Firefox), you will be prompted the next time you attempt to login to your account.
View Your Devices
Login to wings.wright.edu with your campus username and password
Under Personal Information in the righthand sidebar in WINGS, select Manage Two-factor Authentication
Hit Cancel if you have it set to auto-send a push notification
Click on My Settings & Devices
Authenticate using Duo
Manage Your Devices
Adding a New Device
Follow steps 1-3 in the Viewing Your Devices section
Select Add a new device and choose your method of authentication
Follow the steps to enroll a new device, similar to how you enrolled your first device
Removing a Device
If you want to remove an old device from Duo Mobile, contact the CaTS Help Desk at 937-775-4827.
Changing Devices
Follow Steps 1-3 in the Viewing Your Devices section
Select My Settings & Devices
Forgotten Device
If You Have Multiple Devices Registered (Recommended)
Login to wings.wright.edu with your campus username and password.
If you have an additional device registered in the system, select that device using the dropdown menu next to Device: to authenticate.
If You Do Not Have Multiple Devices Registered
Login to wings.wright.edu using your campus username and password.
Call the CaTS Help Desk at 937-775-4827. A technician will provide you with a 12-hour Passcode after verifying your identity. Once you have received your Passcode, select Enter a Passcode.
Lost or New Devices
Important Note: When managing your account using the link through WINGS, remove any old devices that are no longer in your possession, and add any new devices you will use to authenticate in the future.
For Lost Devices
If You Have Multiple Devices Registered (Recommended)
Login to wings.wright.edu with your campus username and password.
If you have an additional device registered in the system, select that device using the dropdown menu next to Device:
Once you have authenticated into WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service.
If You Do Not Have Multiple Devices Registered
Login to wings.wright.edu using your campus username and password.
Call the CaTS Help Desk at 937-775-4827. A technician will provide you with a Passcode after verifying your identity. Once you have received your 12-hour Passcode, select Enter a Passcode.
Once you are logged in to WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service.
For New Devices
For New Devices Using the Same Number
Login to wings.wright.edu using your campus username and password.
Select the My Settings & Devices option on the authentication screen. If you have Duo set to automatically send push notifications, click the Cancel option on the blue ribbon that appears at the bottom of the screen.
Select the Call Me option on the authentication screen. If you have Duo set to automatically send push notifications, click the Cancel option on the blue ribbon that appears at the bottom of the screen.
You will receive a call from Duo Mobile. Press any number on your keypad to authenticate.
Select Device options for the phone number that is associated with the new device.
Click on Reactivate Duo Mobile.
Follow the prompts to reactivate your new device.
For New Devices Using a New Number
Login to wings.wright.edu with your campus username and password.
If you have an additional device registered in the system, select that device using the dropdown menu next to Device:. If you do not have any additional devices registered, call the CaTS Help Desk at 937-775-4827. A technician will provide you with a Passcode after verifying your identity. Once you have received your Passcode, select Enter a Passcode.
Once you are logged in to WINGS, click on the Manage Two-factor Authentication link under Personal Information in order to manage your account. You will be prompted to re-authenticate when accessing this service.
Duo Security Tokens
Duo Security Tokens are fobs that are able to be used in place of a phone or phone number. A small button on the key fob is pressed and a 6-digit number is displayed. This number is typed into the passcode field on your computer and you proceed with your login. Duo Security Tokens do not require network or cellular connectivity to work. They also work worldwide.
Duo Security Tokens are available through the CaTS Help Desk, however, your department will be responsible for the $20 purchase cost. For more information, or to request a Security Token, visit the Duo Token Purchase Request form.
Training
Currently, there are no training sessions scheduled for two-factor authentication. Walk-in training is available to faculty and staff at the CaTS Help Desk, 025 Library Annex.
Frequently Asked Questions
-
What Devices can I Use?
You can enroll in 2FA with a mobile device (recommended), tablet (iPad, Nexus 7, etc), landline (home or office phone), or a Duo Security Token. Multiple devices can be enrolled in this program.
Note: Duo Security Tokens are available through the CaTS Help Desk, however your department will be responsible for the $20 purchase cost. For more information and to request a Security Token, visit the Duo Token Purchase Request form.
-
What is 'Remember Me', and How Does It Work?
If you check the 'Remember Me' box when authenticating you won't need to perform Duo two-factor authentication again for 180 days when using the same workstation and browser. However, if you are using a different workstation or browser than when you selected this option, you will still be prompted to authenticate into the service you are trying to access.
'Remember Me' is cookie-based. To deactivate this service, clear the cookie settings in your browser. For instructions on clearing your browser cookies, visit Clear Cache and Cookies.
-
How do I Cancel the 'Remember Me' Option in Duo?
You can cancel the 'Remember Me' option by clearing the cookies out from your browser. For instructions on clearing your cookies, visit Clear Cache and Cookies.
-
Are There Any Known Issues With 2FA?
Common Issues With Two-Factor Authentication
To read about common issues users have experienced when using Two-Factor Authentication, visit https://guide.duo.com/common-issues. These issues are not Wright State specific.
-
Will updating my contact information through HR/WINGS Express update Duo?
Updating your contact information through HR/WINGS Express will NOT update you information in Duo. Duo is a separate service that doesn't sync with your Wright State account settings. Changes to your phone number will need to be manually updated in Duo via the self-service options, or by contacting the CaTS Help Desk.
-
Where will Two-Factor Authentication Not be Required?
All campus wired network connections will not require two-factor authentication into most services. All campus wireless and off campus locations will challenge you with two-factor authentication.
