Loyola University Maryland

Technology Services

Two Factor Authentication is Here!

image divider

Two Factor Authentication (2FA) is a second layer of security that protects your accounts, even if someone obtains your password. With one click, you can use a device you always have with you, like your smartphone, to ensure that it’s really you accessing your accounts. View a video of how easy it is to use 2FA to log in to Workspace.

Two Factor Authentication logo

Temporary exclusion for MAC Users:

MAC users are temporarily excluded from 2FA for Office 365. To give MAC users the best experience with Office 365 and Two Factor Authentication, Technology Services will be upgrading all MACs to Office 2016 and the latest Mac OS, Sierra. Right now, however, several important University applications are not yet certified to function with Sierra. These include campus printing, lecture capture, antivirus, and others. Technology Services is working with our vendors to resolve these compatibility problems. Once all of our software is Sierra-certified, we will bring the latest upgrades to you, including Two Factor Authentication for Office.

Why?

More people are becoming victims of phishing attempts. Hackers are getting more sophisticated. Two Factor Authentication will protect your account even if someone gets your password. A hacker would have to obtain BOTH your password AND the phone (or other device) you are using to access your account. 

Using 2FA will protect you and Loyola.

Learn more by watching this 2FA overview (< 2 minutes).

Who?

All Loyola employees who are using Windows machines will need to enroll in and use Two Factor Authentication for logging in to systems that contain “restricted” data. A small number of students who are also Loyola employees accessing restricted data will need to enroll in 2FA. (MAC users are required to enroll in 2FA, however 2FA will only be required to log in to Loyola Workspace and Inside Loyola, not Office 365. This is a temporary exclusion until MACs are upgraded.)
 

When?  

12/1/16: You must use 2FA for logging into Loyola Workspace (replacing Anywhere Apps/Citrix). Citrix will be retired on 1/5/17.
 
3/20/17: You must use 2FA for logging into Office 365 (including email) and Inside Loyola.

What do you need to do?

Enroll in 2FA on 12/1/16 or shortly thereafter. The sooner the better for you and for Loyola.

Enrollment Email Coming 12/1/16

The enrollment process is very simple. It takes only a few minutes to complete. But, if you would like help enrolling, we will have drop-in sessions starting 12/1/16.

Your Technology Services Relationship Manager (Robin Smith or Tom Wilson) will be in touch with reminders and more information. Contact the Help Center (ots@loyola.edu) if you have any questions.

Enroll in 2FA prior as soon as you get the enrollment email on 12/1/16. This email will come from Duo Security, the vendor we are using to provide 2FA. Here is an example of the enrollment email so you know what to expect.

Checklist for Two Factor Enrollment using Duo

In preparation for enrolling in Two Factor Authentication using the FREE Duo application, we suggest you complete the checklist below. This will improve the enrollment process.

Decide which device to enroll

Smartphone is recommended, but you can also use:

  • A landline phone
  • A regular cellphone
  • A tablet

*If you do not have any of these devices, you may be eligible to use a physical authentication token instead. Please review the Two Factor Token Policy on our policy page.

Have your app store password (i.e. iTunes, Google Play).

Note: If you do not have a credit card associated with your Apple ID and do not wish to add one, please follow the instructions for using your Apple ID without a credit card or other payment.

Download the FREE Duo application

For iPhone, iPad, and Apple Watch devices:

  • Launch the App Store on your phone or tablet and search for “Duo Mobile” Duo logo
  • Select “Free” and then tap “Install” to download the app
  • Tap “OK” again when asked if DUO Mobile should be able to send push notifications
  • If the application asks for access to your camera, tap "Allow"

For Android Devices:

  • Open the Google Play Store app on your phone and search for “Duo Mobile”
  • You will have to tap “OK” again when asked if Duo Mobile should be able to send push notifications
  • If the application asks for access to your camera, tap "Allow"

Important: Don’t try to add an account in the mobile app before you receive the enrollment email on 12/1/16.

Need Help Enrolling?

All Loyola employees who are using Windows machines will need to enroll in and use Two Factor Authentication for logging in to systems that contain “restricted” data. A small number of students who are also Loyola employees accessing restricted data will need to enroll in 2FA. (MAC users will be addressed at a later date.)

We will have drop-in enrollment sessions on the following dates:

  • 12/1/16 & 12/2/16  11:00 AM - 1:00 PM  Outside Boulder Café
  • 12/5/16  10:00 AM - 12:00 PM  Technology Training Center, Knott Hall 104
  • 12/13/16  2:00 PM - 4:00 PM  Technology Training Center, Knott Hall 104

Two Factor Authentication FAQs

Will I need to use Two Factor to log into my computer?

No, 2FA will only be required to log into certain systems; Loyola Workspace on 12/1/16 and Office 365 and Inside Loyola on 3/20/17.

I was told MAC users are excluded from using Two Factor Authentication. Is this true?

MAC users are only excluded temporarily from using 2FA for logging into Office 365, until the technical issues are resolved. MAC users are still required to use 2FA to log into Loyola Workspace and Inside Loyola.

Should I register more than one device?

Yes. You should register more than one device so that you can still log in if you leave your primary device at home or lose it. For instance, you might register your mobile phone as your primary device and your landline (office phone) as your secondary device.

What should I do if I receive a push notification or phone call when I have not tried to log in to a service?

You should deny the request and report it to the Help Center at x5555. Someone may have compromised your password and may be trying to use it to log in to services.

I am a retired professor with Emeritus status and still use my Loyola Office 365 email account. Do I have to use 2FA to log into Office 365 email at home?

As of 3/20/17, yes, you must use 2FA to log into Office 365 (unless you are a MAC user.).