New DUO Two-Factor Authentication Enhances Data Security
October 4 marked the launch of security enhancements to Baylor’s BearWeb system, which houses course registration details, grades, payroll and other personal information of authorized users. Because passwords alone are insufficient for securing sensitive information, the University has implemented Duo.
“Baylor has taken a huge step forward in protecting users’ information with the implementation of Duo multifactor authentication,” said Jon Allen, assistant vice president and chief information security officer. “The new account protection will allow Baylor to better protect sensitive data as well as maintain the integrity of the academic process.”
The new protocol requires users to provide a password, not a personal identification number [PIN], with their Baylor ID. A second authentication factor, a numeric code, is randomly generated by Duo and delivered to the user via mobile app, phone call or text message. The combination of a password (something known) and a token (something provided) is key to the system’s effectiveness.
More than 19,000 students, faculty and staff are currently enrolled in Duo. In addition to BearWeb, Duo protects Banner and Virtual Private Network, Crashplan and Box.
COMMON FAQs Supported Browsers: Chrome, Firefox, Safari, and Internet Explorer 8 or later.
Can I opt out of Duo?
No. Two-factor authentication adds a second layer of security to online accounts. In an effort to keep the University systems and your personal account information secure, the University is enabling two-factor authentication on selected services.
What if I do not have a mobile phone?
You can use a landline or a tablet. Duo also lets you link multiple devices to your account, so you can use your mobile phone, a landline and/or tablet.
What if I don’t have a cell phone, landline or a tablet for a secondary device?
The ITS Security Group has a limited number of hardware tokens, devices that are approximately the size of a key fob that are to be carried with you at all times. When you need to authenticate, you will use the device to generate a code to enter at log-in. Call 254-710-4357 for more information.
What if I lose my mobile phone or it is stolen?
Contact the Help Desk immediately via email or 254-710-4357. The device will be disabled for authentication and you will be assisted in enrolling another phone/device. While it is important that you contact the Help Desk if you lose your phone, remember that your password will still protect your account.
What if I get a new mobile phone?
If you get a new phone, you will need to re-activate Duo Mobile. Please see the New Phone Reactivation instructions on the Duo website at baylor.edu/its/2factor.
What should I do if I get an authentication message and I am not trying to log in?
Deny the request and report the incident to the Help Desk immediately via email or by calling 254-710-4357.
Video Tutorials: Visit the Duo website at baylor.edu/its/2factor to view helpful video tutorials.