setting up duo multi-factor...

25
Setting Up DUO Multi-factor Authentication

Upload: others

Post on 09-Aug-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting Up DUO Multi-factor Authentication

Page 2: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Duo Basics

Page 3: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

What is Multi-Factor Authentication (MFA)?

Two-Factor Authentication (MFA) adds a second layer of security to your SDSUid account.

Page 4: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

How Does MFA Work?

MFA serves as an extra layer of security that uses a second source of validation.

Page 5: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

What are the Benefits of MFA?

MFA protects against phishing, social engineering, and password brute force attacks and secures the login from attackers exploiting weak or stolen credentials.

MFA protects against phishing, social engineering, and password brute force attacks and secures the login from attackers exploiting weak or stolen credentials.

Page 6: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

What Devices Can Be Used?

Page 7: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Getting StartedSetting up DUO

Page 8: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 1

Enter the portal address of duoportal.sdsu.edu in the browser and click Login.

Enter the portal address of duoportal.sdsu.edu in the browser and click Login.

Page 9: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 2

Type in your SDSUid identifier and password.Type in your SDSUid identifier and password.

Page 10: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 3

Start the setup to enable multi‐factor authentication and follow the on‐screen prompts.

Start the setup to enable multi‐factor authentication and follow the on‐screen prompts.

Page 11: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 4

Select the type Device you would like to enroll.

A smartphone is recommended for the best experience, but you can also enroll a landline telephone, a security key, or iOS/Android tablets.

Select the type Device you would like to enroll.

A smartphone is recommended for the best experience, but you can also enroll a landline telephone, a security key, or iOS/Android tablets.

Page 12: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 5Select your country from the drop‐down list and type your phone number.

Use the number of your smartphone, landline, or cell phone that you'll have with you when you're logging in to a Duo‐protected service.

You can enter an extension if you chose "Landline" in the previous step.

If you're enrolling a tablet, you will not be prompted to enter a phone number.

Select your country from the drop‐down list and type your phone number.

Use the number of your smartphone, landline, or cell phone that you'll have with you when you're logging in to a Duo‐protected service.

You can enter an extension if you chose "Landline" in the previous step.

If you're enrolling a tablet, you will not be prompted to enter a phone number.

Page 13: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 6

Confirm the type of device you are enrolling and click Continue.

Confirm the type of device you are enrolling and click Continue.

Page 14: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 7Follow instructions on the screen to install Duo Mobile. 

After installing the Duo app, return to the enrollment window and click I have Duo Mobile installed.

Follow instructions on the screen to install Duo Mobile. 

After installing the Duo app, return to the enrollment window and click I have Duo Mobile installed.

Page 15: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 8Activating the Duo app links it to your account so that you can use it for authentication.

On iPhone, Android, and Windows phones, activate Duo Mobile by scanning the barcode with the app's built‐in barcode scanner.

Follow the platform‐specific instructions for your device.

Activating the Duo app links it to your account so that you can use it for authentication.

On iPhone, Android, and Windows phones, activate Duo Mobile by scanning the barcode with the app's built‐in barcode scanner.

Follow the platform‐specific instructions for your device.

Page 16: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 9

With the Duo mobile app open on your cell phone, scan the barcode.

If you are prompted on the mobile app to allow access to your camera, select the OK option.

An automatic passcode will be generated that will register your device with the SDSU Duo security.

With the Duo mobile app open on your cell phone, scan the barcode.

If you are prompted on the mobile app to allow access to your camera, select the OK option.

An automatic passcode will be generated that will register your device with the SDSU Duo security.

Page 17: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 10

After a successful registration, you will see the following screen, which confirms that you can authenticate to any Duo‐protected service.

Click on the Dismiss button to finish.

After a successful registration, you will see the following screen, which confirms that you can authenticate to any Duo‐protected service.

Click on the Dismiss button to finish.

Page 18: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Setting up DUO: Part 11

After your device is registered, you can add another device (recommended) and select what authentication method behavior you will get when you log in (e.g. Push notification or call). You can select Logout when you are done.

After your device is registered, you can add another device (recommended) and select what authentication method behavior you will get when you log in (e.g. Push notification or call). You can select Logout when you are done.

Page 19: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Managing Duo Devices

Page 20: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Managing Duo Devices

After your device is registered, you can log in to duoportal.sdsu.edu at any time to manage, add, or remove devices.After your device is registered, you can log in to duoportal.sdsu.edu at any time to manage, add, or remove devices.

Page 21: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Managing Duo DevicesIf you lose or forget your authentication device, visit the following site to obtain your Bypass Codes: 

https://duoportal.sdsu.edu/Duo/BypassCodes

If you lose or forget your authentication device, visit the following site to obtain your Bypass Codes: 

https://duoportal.sdsu.edu/Duo/BypassCodes

Page 22: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Enabling G Suite

Page 23: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Enabling G SuiteTo enable Duo on G Suite, go to the following link and log in:

https://duoportal.sdsu.edu/Duo/Apps

Authenticate with your SDSUid, sign in, and then click on Enable Duo and then on the Update button.

To enable Duo on G Suite, go to the following link and log in:

https://duoportal.sdsu.edu/Duo/Apps

Authenticate with your SDSUid, sign in, and then click on Enable Duo and then on the Update button.

Page 24: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

Additional Resources

Page 25: Setting Up DUO Multi-factor Authenticationit.sdsu.edu/security/files/20200625-duo-presentation.pdfJun 25, 2020  · MFA protects against phishing, social engineering, and password

SDSU Duo Device Management● To manage your Duo devices, go to the Duo Portal.

Getting Help● Submit a Ticket ‐ If you are having problems, please submit a ticket 

through SDSU ServiceNow. ● Help Desk ‐ You can also visit the Help Desk at https://it.sdsu.edu/help.

IT Security Office MFA Website● https://it.sdsu.edu/security/security‐operations‐and‐services/mfa.aspx

Duo Resources● Help Guide ‐ https://help.duo.com/s/article/3516?language=en_US● Duo’s YouTube Channel ‐ https://www.youtube.com/user/duosec

SDSU Duo Device Management● To manage your Duo devices, go to the Duo Portal.

Getting Help● Submit a Ticket ‐ If you are having problems, please submit a ticket 

through SDSU ServiceNow. ● Help Desk ‐ You can also visit the Help Desk at https://it.sdsu.edu/help.

IT Security Office MFA Website● https://it.sdsu.edu/security/security‐operations‐and‐services/mfa.aspx

Duo Resources● Help Guide ‐ https://help.duo.com/s/article/3516?language=en_US● Duo’s YouTube Channel ‐ https://www.youtube.com/user/duosec