Duo Two-Factor Authentication is Coming

With increasingly sophisticated cyber attacks targeting higher education and healthcare institutions, passwords alone are no longer a sufficient way to protect resources. Two-factor authentication decreases the risk of compromises and data breaches by making a username and password alone insufficient for accessing sensitive resources.

Two-factor authentication is something that you have, like a mobile device, as well as something you know, such as your password. You are probably using two-factor authentication already without knowing it. If you’ve ever had your bank text you a code to enter on their website before logging in, you’ve used two-factor authentication.

Duo two-factor authentication is a smartphone app that will prompt you to confirm your login request when you login with your NetID and password to one of the Duo-protected systems mentioned below. Simply confirm the request, and you'll be logged in. Alternatively, you can enter a code sent to you via text message, or receive a phone call on your cell phone or landline.

In the coming months, Emory will be enabling two-factor authentication, provided by Duo Security, across a number of sensitive systems. These include: Outlook Web Access (e-mail), PeopleSoft HR, OPUS, Compass, VPN, Healthcare VDT, and others. You will only be required to use Duo when you connect to these services from an off-campus location (such as your home, a hotel, a coffee shop, etc.). Along with all of Emory’s campuses and Healthcare locations, Children’s Healthcare of Atlanta and Grady Hospital will be considered on-campus because of the number of Emory staff that work in those locations.

Be on the lookout soon for more detailed communications about Emory’s implementation of Duo two-factor authentication, along with instructions for enrolling in the service.