Duo Security

DUO Security

You are here:

Home
Duo Security

Two-Factor Authentication

Long Island University’s, Information Technology, to better protect your information, will be using Two-Step Login as an extra layer of security on select websites and services.

Two-Step Authentication to our University systems and web based applications will be rolled out in phases and the sites that this extra layer is enabled will prompt you to use that authentication mode.

Passwords provide only so much protection—even the strongest ones can be stolen. Requiring login verification from a device only you possess (for example, your mobile phone) prevents hackers from accessing your accounts and pretending they’re you.

Chances are you already use two-factor authentication systems with your bank and even your social media accounts. Your employment or academic records, bank account numbers, and other sensitive information stored at LIU information systems and services deserve the same protection.

The university uses Duo Security tools—including the Duo Mobile app—to administer the Two-Step Login process. We recommend using the Duo Mobile app to complete your logins because it is safer, faster, and the most reliable way to complete two-step logins. If you’re currently using phone calls or other methods, switch to push notifications now.

Supported Browsers: Chrome, Firefox, Safari, Edge, Opera, and Internet Explorer 8 or later. Some browsers do not support all of Duo’s authentication devices (for example, Security Keys won’t work with Internet Explorer). For the widest compatibility with Duo’s authentication methods, we recommend recent versions of Chrome and Firefox.

How It Works

Enter username and password as usual
Verify your identity via the selected Duo authentication mechanism (see options below)
Securely logged in

You will login as usual with your username and password, and then use your device to verify that it is in fact you. Login approvals can be delivered via a smartphone app push notification, SMS, one-time passcode, or voice call.

For step-by-step instructions on how to enroll in Two-Step Login using the Duo Mobile app, follow the steps below.

Learn more about authenticating with Duo in the guide to using the Duo Prompt.

Two-Factor Enrollment on the Web

On your computer, Go to duo.liu.edu and follow the steps below.

After logging in with your LIU credentials you will be greeted with a welcome screen to start the enrollment process.

Step 1: Welcome Screen

Click Next to begin enrolling your device.

Step 2: click next through the following screens

Step 3: Enter Your Phone Number

Select your country code from the drop-down list and type your phone number. Use the number of your smart phone, or cell phone that you’ll have with you when you’re logging in to a Duo-protected service. (If you’re enrolling a tablet click on “I have a Tablet”)

Step 4: Verify that your number is correct

Step 5:
Install the DUO Mobile App on your device. You can get it from both the App Store or Google Play.

Step 6:
Open the duo app on your phone then click Continue on your computer.
You will get a QR code similar to this on your screen.

Step 7:
From the Duo App, Add a new account and choose the option “from QR code”. Scan the QR code to add it, then
Click Continue.

Congratulations!

Your device is ready to approve Duo push authentication requests. Click Send me a Push to give it a try. All you need to do is tap Approve on the Duo login request received at your phone.

Two-Factor Enrollment for Mobile Devices

Before Setting up your Duo Two-Step Authentication from your device, you must download the Duo app from either Google Play or the Apple Store.

Step 1

Open a browser on your mobile device and go to: duo.liu.edu.

At the Login screen, enter your FULL LIU email address and LIU password.

Step 2

Click “Next” through the following screens.

Step 3

Click on the recommended “Duo Mobile” option as shown below, then enter your phone number on the following screen.

Step 4

If you have already installed the App, click ”Next.” Then click “Get an activation link instead.”

Step 5

Enter an alternate address that you have access to on your device.

Example: email@live.com, email@gmail.com, etc.

(This is only to receive the link, it’s just an email being sent.)

Step 6

Open the email, and click on the provided link:

Step 7

Your account has been added to the Duo app. You can give it a custom name and click “Save.”

Adding a new Device

To start enrolling a new device, you must first go to duo.liu.edu and log in with you LIU credentials.

At the push notification screen, click the link that says Other options

From the menu select Manage devices

You will need to verify this choice and may receive an additional push notification. Select either of the top two options for the verification.

Once verified, you will be brought into the device management center. Select the Add a device tile and follow the prompts as you did during the first set up.

You will be prompted with a QR code similar to the one below. Install DUO Mobile on the new device and add a new account using the QR code.

The new device is now added and listed with your other enrolled devices.

Adding Multiple Accounts

How Use Duo Mobile for Two-Step Authentication with Multiple Accounts
If you have an affiliation with more than one school, organizations, or company you can add an account to your Duo Mobile app so you can use one device to obtain the second factor authentication for any of them.
Install and activate Duo Mobile for two-step authentication for Long Island University on your smartphone or tablet. For instructions, go to the Two Factor Enrollment for Mobile Devices section.
Once your device is activated, you can add and activate the account of the other organization(s) with which you are affiliated.
1) On your computer, go to duo.liu.edu and complete the steps to add and activate the account.
2) When the registration of the new account is complete, the additional account appears in the Duo Mobile app on your device.

Services that Use Duo

eAccounts

eaccounts.liu.edu

Download the App :

FAQ

What is Two-Factor Authentication?

Online security is a complicated issue. In order to fully and effectively protect the information of students, faculty, and staff at LIU, IT utilizes the two-factor authentication tool Duo. Two-factor authentication is the act of using a two-step login process. The first factor is always the same: your LIU email password. The second factor involves creating randomized access codes every time you log into certain University resources. This extra step is designed to help verify that you are, in fact, who you say you are. Malicious actors trying to gain access to your account may have the password, but they wouldn’t have access to the second factor.

How do I get started using Duo?

Enrolling in Duo is quick, easy, and painless. Most users will be automatically prompted to enroll in Duo at the same time they are setting up their online accounts when starting at LIU (whether as a student, faculty member, or staff). When you enroll, you will need to choose your default method for receiving access codes.

LIU, IT Services recommends that you download the green Duo Mobile app to your smartphone or tablet as your primary method of authentication. It’s the most convenient, cheapest way to authenticate.
IMPORTANT: None of the phone numbers collected through an individual’s enrollment in two-factor authentication will be shared with any other applications or offices.

How do I receive two-factor access codes? (What are the acceptable devices?)

There are several ways you can receive access codes. At LIU, you can:

- RECOMMENDED: Install the Duo Mobile app on your smartphone, smart watch, or tablet. With the app, you have two options: push notifications or Mobile Passcode.

- Sign up to receive a code via landline phone call.

- Opt into receiving SMS messages.

- Contact IT Help to receive a temporary bypass.

We recommend that if you have a smartphone or tablet, you download the Duo Mobile app and utilize it as your primary method of authentication. It’s quick, easy, free, and painless.

How do I authenticate using Duo?

How you authenticate depends on the device and method you choose for two-factor authentication.

- If you choose to receive notifications from the Duo Mobile app on your smartphone or other smart device, when you log in, you will simply have to grant access from the app. A push notification will be sent to your device, and you review the request and tap Approve to authenticate. Internet or cellular access is required.

- If you opted to use a Duo Mobile Passcode, simply launch the Duo Mobile app on your device and click the key icon to see your current six-digit code. Internet or cellular access is NOT required for this option, since the passcodes are attached to a certain time stamp.

- If you choose to receive phone calls, you will receive an automated phone call that requires you to press or tap any key on your phone to authenticate.

I am having trouble logging into Gallagher Student Health Insurance Website?

If you are having issue logging into the Gallagher’s website.
You will need to have your LIU Student credentials AND enrolled with Duo Two Factor Authentication. Please follow the instructions below:

Click on this link and login with your LIU Student credentials (e.g. john.smith@my.liu.edu)
To proceed you will must enroll with Two-Factor Authentication. If you have not done so, please see instructions by clicking on this link and select Two-Factor Enrollment on the Web(desktop – recommended) or Two-Factor Enrollment for Mobile Devices.
- if you choose Enrollment on the Web (desktop) you will need your smartphone camera during the Duo Mobile installation
- if you choose Enrollment for Mobile Devices, you will need Chrome installed on your smartphone* once you start process, make sure to complete it, as you will not be able to go back
After you installed the Duo Mobile App onto your smartphone, you can obtain Passcode or accept Push requests to access Gallagher’s website.

After following the instructions and if you are still having issues please submit a ticket to it@liu.edu.

How often do I need to authenticate?

For the typical user, you will authenticate once every 8 hours on your primary computer and browser. However, there are a few factors that may cause that number to vary, including:

- The website you’re accessing (for added security, some sites always require a two-factor authentication.

- Your individual browser settings (whether or not you clear cookies or are using an incognito browser—incognito sessions will be prompted for Duo every time.)

- Whether or not you use more than one device and web browser.

- Whether you check the “Remember me for 8 hours” box during the login process.
  - - Note: If you have Duo set up to automatically push a notification to your smartphone, the “Remember me for 8 hours” box will be grayed out. Simply “cancel” the push from the Duo login on your computer. This will allow you to check the box. Then, select “Send me a push” from the options once again to log in.

- Important note about internet browsers (e.g., Firefox, Chrome, Edge): When logging in via Duo, if your browser is out of date, it will notify you. Please update your browser to prevent receiving this notification.

- For VPN users: If you’re logging into VPN, you will be prompted for a Duo code each time.

Why do I need Duo?

The unfortunate reality of our world is that hackers are routinely trying to steal your passwords and use them for various evil things like stealing your identity, stealing money, changing grades, and a host of other terrible things. As more and more of the members of the LIU community have been affected in these ways, we have come to realize, as most universities have, that a solution like Duo is a necessity.
Students, faculty, and staff are required to use Duo and will be prompted to enroll when they attempt to access certain password-protected LIU services .

Why did we make the switch to mandatory, University-wide two-factor?

As an institution, LIU is responsible for the security of the personal information of all its faculty, staff, and students. Adding another step in the authentication process for accounts helps prove the person trying to access resources, which cuts down on phishing and safeguards data more effectively.

What happens when I lose my Duo device or leave it at home?

It happens to the best of us—either we misplace something or forget to grab it on the way out the door. In this situation, call IT Help and, once you’ve verified your identity, they will be authorized to give you bypass codes. At this point, you will not need two-factor to log in to your account for the next 24 hours.
Important note: This is a limited-use service. Don’t forget your second-factor device after this!

What if I’m traveling internationally?

We recommend that anyone who travels internationally and needs to log in to LIU websites use the Duo Mobile Passcode option or a hardware token. You can use the Duo Mobile Passcode option to generate your authentication code without an internet or cellular connection.

What is LIU SSO

Traditional Prompt
The ability to send SMS passcodes using the traditional Duo Prompt can be accessed via the Enter a Passcode option. To send an SMS passcode to your smartphone:

In the Duo Prompt, click Enter a Passcode.
A blue bar will appear at the bottom of the prompt. Click Text me new codes to send an SMS with new passcodes.

Note: After “Enter a Passcode” is selected, a hint will appear under the passcode input field indicating which number the next SMS passcode begins with.
You may then enter an SMS-delivered passcode in the field that appeared and complete two-factor authentication.

If you are an end-user, please note the following considerations:

It is possible that your administrator has disabled SMS as an authentication method, in which case you will not be permitted to authenticate with passcodes received via SMS.
- If you click Enter a Passcode and the blue bar does not appear with the option to text you new codes, you need to provide a passcode from the Duo Mobile application.
It is possible that your administrator has restricted the maximum credits per telephony action, in which case you may not see an option to request SMS passcodes.

Learn more about using different authentication methods with the traditional Duo Prompt.

Universal Prompt

In the Universal Prompt, select Other options.
” alt=”Other options link in the Universal Prompt” width=”300″ height=”364″ data-orig-src=”https://help.duo.com/servlet/rtaImage?eid=ka04u000000cYDC&feoid=00N700000039b6e&refid=0EM4u0000059HkF” />
Select Send text message passcode.
” alt=”Send text option in the Universal Prompt” width=”300″ height=”470″ data-orig-src=”https://help.duo.com/servlet/rtaImage?eid=ka04u000000cYDC&feoid=00N700000039b6e&refid=0EM4u0000059HkP” />
When you receive the text message, enter the passcode into the space provided and click or tap Verify.
” alt=”Text message sent enter passcode in Universal Prompt” width=”300″ height=”420″ data-orig-src=”https://help.duo.com/servlet/rtaImage?eid=ka04u000000cYDC&feoid=00N700000039b6e&refid=0EM4u0000059HkU” />

If you are an end-user, please note the following considerations:

It is possible that your administrator has disabled SMS as an authentication method, in which case you will not be permitted to authenticate with passcodes received via SMS.
It is possible that your administrator has restricted the maximum credits per telephony action, in which case you may not see an option to request SMS passcodes.