Two-Step Login (Duo) Project

The University of Oregon is undertaking a phased effort to enroll all UO students, faculty, and staff in two-step login with Duo Security.

How Does Duo Work?

Three-part graphic: Step 1 is a laptop labeled Duck ID and password, step 2 is a cell phone labeled Prove it's you, and step three is a checkmark labeled Secure access.

  • Two-step login adds a powerful layer of security to your Duck ID account.
  • When you log in to a protected UO service, Duo will prompt you to confirm your identity using a secondary device, such as your mobile phone, tablet, landline, or small hardware token.
    • Protected services include Canvas, Zoom, MyTrack, Concur, and any other UO service that uses Shibboleth single sign-on, with that familiar "Login Required" screen (see below).
    • They also include UOmail and Microsoft Office 365 (Word, Teams, Outlook, OneDrive, etc.).
  • You'll get to choose which devices to use with Duo. The most popular option is the Duo Mobile app on your smartphone. Visit Getting Started with Two-Step Login (Duo).
  • Using the Remember me for 7 days option, most people will only have to do the verification step once per week for most UO services (per browser or app, per device).
  • If you get a Duo push notification or phone call when you're not logging in, that means a cybercriminal is trying to use your account! To stop them, tap "Deny" in the Duo Mobile app or "9" on a phone call.

Screenshot of UO's green-and-yellow Login Required screen (Shibboleth single sign-on).
UO's "Login Required" screen for Shibboleth single sign-on.

Timeline

UO Group Duo Enrollment Status
IT staff Completed 2019
Banner users and other employees with access to high-risk data Completed 2019
All employees
  • Faculty
  • Staff
  • Graduate employees
Completed July 29, 2020
All students
  • Opt-in: Completed March 12, 2021
  • Mandatory: Completed June 2, 2021
  • Incoming students: Deadline of August 4, 2021

Students

  • New UO students — those who claimed their Duck IDs after March 12, 2021 — will be required to start using Duo on August 4, 2021. See below for details.
  • Duo became mandatory for all other UO students during spring term 2021.

Employees

  • Duo has been required for all UO faculty, staff, and graduate employees since July 29, 2020.
  • Emeritus faculty and retired staff aren't required to enroll in Duo at this time.

Student Duo Enrollment Deadlines

All new, incoming UO students — essentially, all students who aren't yet using Duo — will be required to start using Duo on August 4, 2021.

We strongly encourage you to register a device for Duo before your deadline. However, you won't start seeing Duo prompts until August 4.

What to Expect on Your Duo Deadline

  • Duo will be required starting between 5am and 8am Pacific Time on your deadline day.
  • When you log in to protected UO services — such as Canvas, Zoom, UOmail, and Microsoft applications — you'll start getting a Duo prompt to verify your identity.
  • If you haven't yet registered a device for Duo, you'll be prompted to do so on your next login.
  • The Duo device registration process usually takes just a few minutes.
  • On the morning of your Duo deadline, you'll also be logged out of all UO Microsoft services, including Word, Excel, Teams, Outlook, etc., as well as UOmail, if applicable. You'll be required to log in to these services the next time you use them.

Getting Help

  • The Technology Service Desk is here to help!
  • Contact the Tech Desk by live chat or phone (541-346-4357) 6am–midnight every day, except university holidays and winter break.

Why Two-Step Login?

Two-step login is a critical part of our strategy to fortify UO's defenses against cyberattacks, enabled by strategic funding approved in May 2019.

  • Universities around the world, including the UO, are high-priority targets for hackers. An example is the phishing attack of August 2018. Those attacks have only increased during the COVID-19 outbreak.
  • Stolen UO credentials can be leveraged to gain unauthorized access to personal information, research data, and intellectual property.
  • Multi-factor authentication blocks almost 100% of attacks based on credential theft, according to research by Google and Microsoft.
  • Two-step login allows you to protect your account from wherever you are, whether on campus, at home, or on the road.

Instructions and FAQs

The UO Service Portal contains a lot of information about two-step login. We suggest starting here:

More Information

Contact Us

UO IT staff are here to help you with Duo!