This project is a phased effort to enroll all UO faculty, staff, and students in two-step login with Duo Security.
- Project Status
- How Does Duo Work?
- Why Two-Step Login?
- Enrolling in Duo: When and How
- Instructions and FAQs
- More Information
- Contact Us
|UO Groups||Duo Enrollment Status|
|IT staff||Completed 2019|
|Banner users and other employees with access to high-risk data||Completed 2019|
Deadline: July 29, 2020
- First you'll register a mobile phone, tablet, desk phone or small hardware token. Instructions: Getting Started with Two-Step Login (Duo).
- Within a day, two-step login will go into effect for your Duck ID account.
- From that point on, when you log in to certain UO services, Duo will prompt you to confirm your identity using the device you've registered.
- So far, those services include Canvas, Zoom, MyTrack, Concur, and any other UO service that uses Shibboleth single sign-on, with that familiar "Login Required" screen (see below).
- Starting on June 3, 2020, protected services will also include UOmail and Microsoft Office 365 (Word, Teams, Outlook, OneDrive, etc.).
- Using the Remember me for 7 days option, most people will only have to do that verification step once per week for most UO services (per browser or app, per device).
- Universities around the world, including the UO, are high-priority targets for hackers. An example is the phishing attack of August 2018. Those attacks have only increased during the COVID-19 outbreak.
- Stolen UO credentials can be leveraged to gain unauthorized access to personal information, research data, and intellectual property.
- Multi-factor authentication blocks almost 100% of attacks based on credential theft, according to research by Google and Microsoft.
- Two-step login protects your account wherever you are, whether on campus, at home, or on the road.
Employees: By July 29
- UO faculty, staff, and graduate employees are required to enroll in Duo by July 29, 2020.
- Starting on that date, you won't be able to log in to protected UO services without enrolling in Duo.
- You can enroll yourself now! Instructions: Getting Started with Two-Step Login.
- You may also be contacted by IT staff in your area asking you to enroll during a particular time frame this spring or summer.
- Enrollment for student employees is currently voluntary but encouraged.
- For students who aren't UO employees, Duo isn't yet available.
- Students will be required to enroll in Duo in a future phase of this rollout.
The UO Service Portal contains a lot of information about two-step login. We suggest starting here:
- Getting Started with Two-Step Login (Duo)
- Two-Step Login (Duo) Video Learning
- Two-Step Login (Duo) FAQ
- Enrollment in two-step login (Duo) required by July 29 — email from CIO Jessie Minton and CISO Leo Howell to UO faculty, staff, and GEs (5/20/20)
- "Two-step login will extend to Office 365 starting June 3" — Around the O (5/18/20)
- Faculty and staff to start using two-step login (Duo) — email from CIO Jessie Minton to UO employees (2/19/20)
- "Two-step login is now available to all UO employees" — Around the O (2/18/20)
- "Two-step login starts Nov. 20 for 1,500 UO employees" — Around the O (11/18/19)
- "Cybersecurity efforts will strengthen university defenses" — Around the O (7/10/19)
If you have questions about the Two-Step Login Project, please contact the project team at email@example.com.
For tech support:
- During business hours:
- After hours: