Two-Step Login (Duo) Project

The University of Oregon is undertaking a phased effort to enroll all UO students, faculty, and staff in two-step login with Duo Security.

How Does Duo Work?

Three-part graphic: Step 1 is a laptop labeled Duck ID and password, step 2 is a cell phone labeled Prove it's you, and step three is a checkmark labeled Secure access.

  • Two-step login adds a powerful layer of security to your Duck ID account.
  • When you log in to a protected UO service, Duo will prompt you to confirm your identity using a secondary device, such as your mobile phone, tablet, landline, or small hardware token.
    • Protected services include Canvas, Zoom, MyTrack, Concur, and any other UO service that uses Shibboleth single sign-on, with that familiar "Login Required" screen (see below).
    • They also include UOmail and Microsoft Office 365 (Word, Teams, Outlook, OneDrive, etc.).
  • You'll get to choose which devices to use with Duo. The most popular option is the Duo Mobile app on your smartphone. Visit Getting Started with Two-Step Login (Duo).
  • Using the Remember me for 7 days option, most people will only have to do the verification step once per week for most UO services (per browser or app, per device).
  • If you get a Duo push notification or phone call when you're not logging in, that means a cybercriminal is trying to use your account! To stop them, tap "Deny" in the Duo Mobile app or "9" on a phone call.

Screenshot of UO's green-and-yellow Login Required screen (Shibboleth single sign-on).
UO's "Login Required" screen for Shibboleth single sign-on.

Timeline

UO Group Duo Enrollment Status
IT staff Completed 2019
Banner users and other employees with access to high-risk data Completed 2019
All employees
  • Faculty
  • Staff
  • Graduate employees
Completed July 29, 2020
All students
  • Opt-in: Completed March 12, 2021
  • Mandatory: Spring 2021

Students

Duo is now available to all UO students through a phased rollout.

  • Phase 1: Opt in (Winter 2021)
    • The opt-in phase closed on March 12.
  • Phase 2: Mandatory (Spring 2021)
    • Any student who hadn't enrolled in Duo by March 12 has been assigned a mandatory Duo enrollment deadline. See below for details.

Employees

  • Duo has been required for all UO faculty, staff, and graduate employees since July 29, 2020.
  • Emeritus faculty and retired staff aren't required to enroll in Duo at this time.

Student Duo Enrollment Deadlines

Any current UO student who hadn't enrolled in Duo by March 12 has now been assigned a mandatory Duo enrollment deadline during spring term 2021.

Overview of Duo Deadlines

  • Deadlines have generally been assigned based on the last digit of your 95 number (UO ID number). See schedule below.
    • Exception: The deadline for all students in the School of Law will be April 7.
  • The deadlines will occur on Wednesdays during weeks 2-10 of spring term.
  • We strongly encourage you to register a device for Duo before your deadline. However, for spring-term Duo enrollment, you won't start seeing Duo prompts until your deadline day.

What to Expect on Your Duo Deadline

  • Duo will be required starting between 5am and 8am Pacific Time on your deadline day.
  • When you log in to protected UO services — such as Canvas, Zoom, UOmail, and Microsoft applications — you'll start getting a Duo prompt to verify your identity.
  • If you haven't yet registered a device for Duo, you'll be prompted to do so on your next login. **You'll need to complete that process before you can attend remote classes in Canvas or Zoom.**
  • The Duo device registration process usually takes just a few minutes.
  • On the morning of your Duo deadline, you'll also be logged out of all UO Microsoft services, including Word, Excel, Teams, Outlook, etc., as well as UOmail, if applicable. You'll be required to log in to these services the next time you use them.

Getting Help

  • The Technology Service Desk is here to help!
  • Contact the Tech Desk by live chat or phone (541-346-4357) 6am–midnight every day, except university holidays and winter break.

Spring 2021 Deadline Schedule

Last Digit of Student 95# Duo Enrollment Deadline
1 or School of Law April 7
2 April 14
3 or 4 April 21
5 April 28
6 May 5
7 May 12
8 May 19
9 May 26
0 June 2

Student Prize Drawing

On March 15, 2021, UO Information Services notified 82 winners of the prize drawing.

Students who signed up for Duo by March 12 were automatically entered into a prize drawing.

  • There are 82 prizes: two $50 prizes and eighty $10 prizes!
  • Each winner may choose to receive their prize as Duck Bucks or as a gift card to the Duck Store or Starbucks.
  • Winners will be notified by email after March 12 at their @uoregon.edu address and must respond within the timeframe noted in the email to claim their prize and choose how to receive it.
  • Limit one prize per person.
  • All prizes will be delivered electronically.
  • To qualify, students had to be currently enrolled at the University of Oregon at the time of the drawing.
  • Students who enrolled in Duo by March 12 were eligible to participate in the prize drawing whether they signed up for Duo before or after the announcement of the prize drawing.

UO Information Services reserves the right to refuse awarding a prize to anyone for any reason whatsoever, at our sole discretion.

Why Two-Step Login?

Two-step login is a critical part of our strategy to fortify UO's defenses against cyberattacks, enabled by strategic funding approved in May 2019.

  • Universities around the world, including the UO, are high-priority targets for hackers. An example is the phishing attack of August 2018. Those attacks have only increased during the COVID-19 outbreak.
  • Stolen UO credentials can be leveraged to gain unauthorized access to personal information, research data, and intellectual property.
  • Multi-factor authentication blocks almost 100% of attacks based on credential theft, according to research by Google and Microsoft.
  • Two-step login allows you to protect your account from wherever you are, whether on campus, at home, or on the road.

Instructions and FAQs

The UO Service Portal contains a lot of information about two-step login. We suggest starting here:

More Information

Contact Us

UO IT staff are here to help you with Duo!