Two-Step Login (Duo) Project

The University of Oregon has completed a phased effort to enroll all UO students, faculty, and staff in two-step login with Duo Security.

How Does Duo Work?

Two-step login adds a powerful layer of security to your Duck ID account.
When you log in to a protected UO service, Duo will prompt you to confirm your identity using a secondary device, such as your mobile phone, tablet, landline, or small hardware token.
- Protected services include Canvas, Zoom, MyTrack, Concur, and any other UO service that uses Shibboleth single sign-on, with that familiar "Login Required" screen (see below).
- They also include UOmail and Microsoft Office 365 (Word, Teams, Outlook, OneDrive, etc.).
You'll get to choose which devices to use with Duo. The most popular option is the Duo Mobile app on your smartphone. Visit Getting Started with Two-Step Login (Duo).
Using the Remember me for 7 days option, most people will only have to do the verification step once per week for most UO services (per browser or app, per device).
If you get a Duo push notification or phone call when you're not logging in, that means a cybercriminal is trying to use your account! To stop them, tap "Deny" in the Duo Mobile app or "9" on a phone call.

UO Group	Duo Enrollment Status
IT staff	Completed 2019
Banner users and other employees with access to high-risk data	Completed 2019
All employees Faculty Staff Graduate employees	Completed July 29, 2020
All students	Opt-in: Completed March 12, 2021 Mandatory: Completed June 2, 2021 Incoming students: Completed August 7, 2021

New UO students — those who claimed their Duck IDs after March 12, 2021 — were required to start using Duo in August 2021.
Duo became mandatory for all other UO students during spring term 2021.

Duo has been required for all UO faculty, staff, and graduate employees since July 29, 2020.
Emeritus faculty and retired staff aren't required to enroll in Duo at this time.

Universities around the world, including the UO, are high-priority targets for hackers. An example is the phishing attack of August 2018. Those attacks have only increased during the COVID-19 outbreak.
Stolen UO credentials can be leveraged to gain unauthorized access to personal information, research data, and intellectual property.
Multi-factor authentication blocks almost 100% of attacks based on credential theft, according to research by Google and Microsoft.
Two-step login allows you to protect your account from wherever you are, whether on campus, at home, or on the road.

The UO Service Portal contains a lot of information about two-step login. We suggest starting here:

Duo enrollment deadlines start soon - email from CISO Leo Howell to non-Duo-enrolled UO students (3/30/21)
"Students face Duo enrollment deadlines this spring" — Around the O (3/23/21)
"Students can still voluntarily opt in to Duo through March 12" — Around the O (3/4/21)
Sign up for Duo by March 12 — email from CISO Leo Howell to non-Duo-enrolled UO students (3/2/21)
Protect your Duck ID with Duo two-step login — email from Kevin Marbury, VP for Student Life, and CISO Leo Howell to UO students (1/26/21)
"Two-step login security is now available to all UO students" — Around the O (1/15/21)
"Two-step login deadline approaches for UO employees" — Around the O (7/20/20)
Take the time to enroll in Duo two-step login — email from Provost Patrick Phillips to UO faculty, staff, and GEs (7/8/20)
Enrollment in two-step login (Duo) required by July 29 — email from CIO Jessie Minton and CISO Leo Howell to UO faculty, staff, and GEs (5/20/20)
"Two-step login will extend to Office 365 starting June 3" — Around the O (5/18/20)
Faculty and staff to start using two-step login (Duo) — email from CIO Jessie Minton to UO employees (2/19/20)
"Two-step login is now available to all UO employees" — Around the O (2/18/20)
"Two-step login starts Nov. 20 for 1,500 UO employees" — Around the O (11/18/19)
"Cybersecurity efforts will strengthen university defenses" — Around the O (7/10/19)

UO IT staff are here to help you with Duo!

During business hours:
- Students (and employees without departmental IT support) should contact the Technology Service Desk:
  - Phone: 541-346-4357
  - Live chat: livehelp.uoregon.edu
  - Submit a ticket: Two-Step Login (Duo) Support
- Faculty and staff with IT support staff in your unit should contact them.
After hours:
- Everyone can contact the Tech Desk by live chat or phone (541-346-4357) 6am-midnight every day, except university holidays and winter break.