This project is a phased effort to enroll all UO faculty, staff, and students in two-step login by Duo Security.
- Project Status
- How Does Duo Work?
- Why Two-Step Login?
- Enrolling in Duo: When and How
- Instructions and FAQs
- More Information
- Contact Us
|UO Groups||Duo Enrollment Status|
|IT staff||Completed 2019|
|Banner users and other employees with access to high-risk data||Completed 2019|
||In Progress (February 2020)
- First you'll register a mobile phone, tablet, desk phone or small hardware token. Instructions: Getting Started with Two-Step Login.
- Within a day, two-step login will go into effect for your Duck ID account.
- From that point on, when you log in to Canvas, MyTrack, Concur, or any other UO website that uses Shibboleth single sign-on — that familiar "Login Required" screen — Duo will prompt you to confirm your identity using the device you've registered.
- Using the Remember me for 7 days option, most people will only have to do that verification step once per week (per browser, per device).
- Universities around the world, including the UO, are high-priority targets for hackers. An example is the phishing attack of August 2018.
- Stolen UO credentials can be leveraged to gain unauthorized access to personal information, research data, and intellectual property.
- Multi-factor authentication blocks almost 100% of attacks based on credential theft, according to research by Google and Microsoft.
- Enrollment for UO employees is currently voluntary but strongly encouraged.
- You can enroll yourself. Instructions: Getting Started with Two-Step Login.
- You may be contacted by IT staff in your area asking you to enroll during a particular time frame in winter or spring term.
- Trainings and enrollment sessions will be offered by Information Services and other UO IT staff (details TBA).
Coming Soon: Mandatory
- In the next couple of months, we'll announce a deadline for enrolling in Duo.
- After that date, Duo will be mandatory. You won't be able to log in to Canvas, MyTrack, Concur, or any other UO website that uses Shibboleth single sign-on without enrolling in Duo.
- Duo isn't yet available to students who aren't UO employees.
- Non-employee students will be included in a future phase of this rollout.
The UO Service Portal contains a lot of information about two-step login. We suggest starting here:
Around the O stories about this project:
- "Two-step login is now available to all UO employees" (2/18/20)
- "Two-step login starts Nov. 20 for 1,500 UO employees" (11/18/19)
- "Cybersecurity efforts will strengthen university defenses" (7/10/19)
Two-step login for UO employees was also announced in an email from CIO Jessie Minton (2/19/20).
If you have questions about the Two-Step Login Project, please contact the project team at firstname.lastname@example.org.
For tech support:
- During business hours:
- After hours: