Two Factor Authentication
On January 24, 2018, two-factor become a requirement for accessing many critical web-based systems containing sensitive and private data, including Office 365 Web Access, SOLE, WVU+kc, SEI, Portal, DegreeWorks and other WVU systems.
Two-factor authentication is a second layer of security besides your password. It requires you to confirm your identity with two things – something you know and something you have. Two-factor authentication will also help WVU comply with new regulatory standards and reduce the risk of data breaches. More than 60 percent of confirmed data breaches today involve weak or stolen passwords.
Where will two-factor authentication be required?
- Two-factor authentication will be required if you connect to the HSC student or WVU.Encrypted (wireless) networks. This also includes the HSC instructor computer in HSC Classrooms.
- Two-factor authentication will be required if you connect to systems from off-site locations
- Two-factor authentication will be required if you travel elsewhere on WVU campuses
Please note that HSC users will not be required to use two-factor authentication from our internal (wired) networks because we have hardware controls already in place for security.
- Includes Morgantown, Charleston and Eastern campuses
- Includes HSC managed off-site locations (CED, CPRC, ICRC, RDTP)
- Includes Ruby Memorial Hospital and WVUH clinics
What will you need in order to get setup?
- You will need to use your smartphone (recommended) as your second-layer authentication device.
- If you do not have a smartphone, then a Duo Display Token is available for purchase at $20 at the website listed below. WVU also has a YubiKey available for purchase, however, due to limited browser compatibility and clinical enterprise security measures HSC is not recommending the YubiKey.
How do I setup my account for two-factor authentication?
To activate your Smartphone as your second-layer authentication device (RECOMMENDED):
To purchase and activate the Duo Display Token (Recommended ONLY IF you do not have a Smartphone OR require a second authentication device):
- IT Purchase Request Form.
See detailed instructions on how to setup the Duo Display Token.
- In February, the Duo Display Token will also be available for purchase at $20 in Mountaineer Marketplace using state or Research Corp funds. Additionally, main campus will have the hardware tokens available in the bookstores for personal purchases.
What happens if I don’t have my Smartphone or authentication device available?
Users can generate Bypass codes that will allow you to authenticate with Duo if you do not have your phone or authentication device available. You can generate ten codes at WVU Login Self Service and each code can only be used once. These codes should be kept in a safe location. If you generate new codes, all old codes will become invalid. See detailed instructions for generating bypass codes.
When will two-factor authentication be required?
- HSC users should begin the enrollment process now. Mandatory use of two-factor authentication by HSC users was effective January 24, 2018.
- Windows, macOS and Linux users must authenticate using two-factor no later than January 24
- iOS and Android native applications (email, calendar) will not require two-factor authentication
- Students will be required to use two-factor authentication beginning of the fall 2018 semester
- WVU main campus ITS is in process of implementing two-factor authentication for faculty and staff university-wide over the spring semester
Please note that after you complete the enrollment process, the following systems will require two-factor authentication immediately
- HSC Office 365 Web Access
- Wireless (WVU.Encrypted)
- HSC Classroom instructor PC
HSC users should contact the HSC Help Desk at firstname.lastname@example.org or 304.293.3631 for any questions on setup. Additional helpful FAQ on setup is available at twofactor.wvu.edu