Two-Factor Authentication

 

UCFlex Duo

Beginning Monday, September 11th, UCFlex business users can self-enroll in Duo Two-Factor Authentication. On Wednesday, November 1st, all UCFlex business users will be required to use Duo when logging in.  

  • For participant self-enrollment information, please refer to the video and guides below.

Self-Enrollment Guide

 

  • UCFlex pilot participant login instructions can be found in the guide below.

UCFlex 2FA Guide

  • Pilot participants that experience any authentication issues while logging into UCFlex, must first refer the guide below.

UCFlex Troubleshooting Guide

If you would like to join this pilot program, please contact the Office of Information Security.

 

What is Duo Two-Factor Authentication?

Two-factor authentication (2FA) adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password. The University of Cincinnati utilizes Duo Security for two-factor authentication.

 

How It Works

Duo Process
  1. Enter username and password as usual
  2. Use your phone to verify your identity
  3. Securely logged in

You will login as usual with your username and password, and then use your device to verify that it is in fact you. Login approvals can be delivered via a smartphone app push notification, SMS, one-time passcode, or voice call.

What if I don't have a mobile phone? You are also able to utilize a landline or tablet.

What if I want to be removed? If you would like to be removed from Duo, please send a request to infosec@uc.edu.

 

Why Is Two-Factor Authentication Needed?

Passwords are becoming easier and easier to compromise. They can be stolen, guessed, or hacked, and sometimes you may not realize that someone is accessing your account.

Duo adds a second layer of security and keeps your account secure even if your password is compromised. If someone is attempting to login as you, Duo will alert you immediately.

This additional form of authentication is completely independent from your username and password. In other words, Duo never sees your password.

 

Supported Devices

Duo supports many devices including, but not limited to iPhones, Androids, Windows, and BlackBerrys. Click here to learn more about these devices that Duo supports.

Duo Devices

Is there a Duo App?

Duo Mobile is an app you can downoad and run on your smartphone. This app helps you authenticate quickly and easily. With this app you can quickly approve an authentication request by pressing a single button! This app generates time-based one-time passcodes (TOTP) for login and can send push notifications. For step-by-step instructions to install and use Duo Mobile, click here.

However, you do not have to install Duo Mobile, you can still log in using a phone call or text message. To use one of these methods, click here and follow the instructions. This will allow you to chose how it will verify your identity each time you log in.