Duo Security

Home/Duo Security
Duo Security2021-07-14T15:53:01-04:00

Two-Factor Authentication

 
Long Island University’s, Information Technology, to better protect your information, will be using Two-Step Login as an extra layer of security on select websites and services.
 
Two-Step Authentication to our University systems and web based applications will be rolled out in phases and the sites that this extra layer is enabled will prompt you to use that authentication mode.
 
Passwords provide only so much protection—even the strongest ones can be stolen. Requiring login verification from a device only you possess (for example, your mobile phone) prevents hackers from accessing your accounts and pretending they’re you.
 
Chances are you already use two-factor authentication systems with your bank and even your social media accounts. Your employment or academic records, bank account numbers, and other sensitive information stored at LIU information systems and services deserve the same protection.
 
The university uses Duo Security tools—including the Duo Mobile app—to administer the Two-Step Login process. We recommend using the Duo Mobile app to complete your logins because it is safer, faster, and the most reliable way to complete two-step logins. If you’re currently using phone calls or other methods, switch to push notifications now.
 

Supported Browsers: Chrome, Firefox, Safari, Edge, Opera, and Internet Explorer 8 or later. Some browsers do not support all of Duo’s authentication devices (for example, Security Keys won’t work with Internet Explorer). For the widest compatibility with Duo’s authentication methods, we recommend recent versions of Chrome and Firefox.

How It Works

  1. Enter username and password as usual
  2. Verify your identity via the selected Duo authentication mechanism (see options below)
  3. Securely logged in

You will login as usual with your username and password, and then use your device to verify that it is in fact you. Login approvals can be delivered via a smartphone app push notification, SMS, one-time passcode, or voice call.

For step-by-step instructions on how to enroll in Two-Step Login using the Duo Mobile app, follow the steps below.

Learn more about authenticating with Duo in the guide to using the Duo Prompt.

Two-Factor Enrollment on the Web

Go to any LIU secured site using Duo and follow the steps below.

After logging in with your LIU credentials you will be greeted with a welcome screen to start the enrollment process.

Step 1: Welcome Screen

Click Start setup to begin enrolling your device.

Step 2: Choose Your Authentication Device Type

Select the type of device you’d like to enroll and click Continue. We recommend using a smartphone for the best experience, but you can also enroll a, a security key, or iOS/Android tablets.

Step 3: Type Your Phone Number

Select your country from the drop-down list and type your phone number. Use the number of your smart phone, or cell phone that you’ll have with you when you’re logging in to a Duo-protected service.

Double-check that you entered it correctly, check the box, and click Continue.

If you’re enrolling a tablet you aren’t prompted to enter a phone number.

Step 4: Choose Platform

Choose your device’s operating system and click Continue.

Step 5: Install Duo Mobile

Duo Mobile is an app that runs on your smartphone and helps you authenticate quickly and easily. Without it you’ll still be able to log in using a phone call or text message, but for the best experience we recommend that you use Duo Mobile.

Follow the platform-specific instructions on the screen to install Duo Mobile. After installing our app return to the enrollment window and click I have Duo Mobile installed.

Step 6: Activate Duo Mobile

Activating the app links it to your account so you can use it for authentication.

On iPhone, Android, and Windows Phone activate Duo Mobile by scanning the barcode with the app’s built-in barcode scanner. Follow the platform specific instructions for your device:

The “Continue” button is clickable after you scan the barcode successfully.

Step 7: Configure Device Options (optional)

You can use Device Options to give your phone a more descriptive name, or you can click Add another device to start the enrollment process again and add a second phone or another authenticator.

If this is the device you’ll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from “Ask me to choose an authentication method” to “Automatically send this device a Duo Push” or “Automatically call this device” and click Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone or a phone call to your device (depending on your selection).

Click Continue to login to proceed to the Duo Prompt.

Congratulations!

Your device is ready to approve Duo push authentication requests. Click Send me a Push to give it a try. All you need to do is tap Approve on the Duo login request received at your phone.

Two-Factor Enrollment for Mobile Devices

Before Setting up your Duo Two-Step Authentication from your device, Be sure to Download the Duo app from either Google Play or the Apple Store.

Step 1

Launch the eAccounts app on your mobile device and click the button to sign in.

Step 2

At the CAS screen, enter your FULL LIU email address and LIU password.

Step 3

Follow the prompts on the following screens.

Step 4

If you have already installed the App, click ” I have Duo Mobile” and follow the promts.

Step 5

Your account has been added to the Duo app.

Step 6

Go back to eaccounts.liu.edu and log in again.

Step 7

Select the way in which you would like to authenticate.

Step 7a

If you select “Send Me a Push”, A notification request will be sent to your phone for you to accept.

Step 7b

If you Select ” Enter a Passcode”, You will need to enter the code generated by the Duo app

 

Adding a new Device

To start enrolling a new device, click Add a new device. If you don’t see this link then your organization may not have enabled this functionality. Contact your Duo administrator to have a new device added.

Choose an authentication method and complete two-factor authentication to begin adding your new device.

If you’re adding a new device to replace one that you previously activated for Duo Push, don’t select the Duo Push authentication method on this page unless you still have the original device. If you don’t have the original device, but you have a new device with the same phone number, then you can authenticate with a phone call or SMS passcode.

You can’t add a new device from this page if you do not have access to any of your previously enrolled authentication devices; you’ll need to contact your Duo administrator for help.

Proceed with the device enrollment process as shown in the initial Enrollment Guide. As an example, let’s add another phone.

Enter and confirm the second phone’s number.

Select the new phone’s operating system.

Install Duo Mobile on the new phone and scan the barcode to activate.

The new phone is added and listed with your other enrolled devices. You can click Add another device to start the enrollment process again and add another authenticator.

Configure Device Options

Click the Device Options button next to any of your enrolled devices to view the actions available for that type of device. You can Reactivate Duo Mobile for an enrolled smartphone, Change Device Name for any type of phone, or delete any authentication device.

Change Device Name

Clicking Change Device Name will open up an interface to change the display name of your phone (hardware tokens can’t be renamed). Type in the new name and click Save.

After successfully modifying your phone’s name, not only will you see this from now on when managing devices, but it will also be how your phone is identified in the authentication dropdown.

If you want to continue using your original device with Duo, you can specify which of your devices you would like to be the default. Click the Default Device: drop-down menu and pick your default device for authentication. Click Save if you’re done making changes.

If this is the device you’ll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from “Ask me to choose an authentication method” to “Automatically send this device a Duo Push” or “Automatically call this device” and click Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone or a phone call to your device (depending on your selection).

Remove a Device

If your new device is replacing the one you previously enrolled, you can remove the device you won’t be using any more for authentication. Click the Device Options button next to the device you want to remove, and then click the trash can button to delete that device.

You’ll have the chance to confirm that you want to delete that device.

The authentication device is removed from your profile.

eAccounts

eaccounts.liu.edu

Download the App : 

Online security is a complicated issue. In order to fully and effectively protect the information of students, faculty, and staff at LIU, IT utilizes the two-factor authentication tool Duo. Two-factor authentication is the act of using a two-step login process. The first factor is always the same: your LIU email password. The second factor involves creating randomized access codes every time you log into certain University resources. This extra step is designed to help verify that you are, in fact, who you say you are. Malicious actors trying to gain access to your account may have the password, but they wouldn’t have access to the second factor.

Enrolling in Duo is quick, easy, and painless. Most users will be automatically prompted to enroll in Duo at the same time they are setting up their online accounts when starting at LIU (whether as a student, faculty member, or staff). When you enroll, you will need to choose your default method for receiving access codes.

LIU, IT Services recommends that you download the green Duo Mobile app to your smartphone or tablet as your primary method of authentication. It’s the most convenient, cheapest way to authenticate.

IMPORTANT: None of the phone numbers collected through an individual’s enrollment in two-factor authentication will be shared with any other applications or offices.

There are several ways you can receive access codes. At LIU, you can:

    • RECOMMENDED: Install the Duo Mobile app on your smartphone, smart watch, or tablet. With the app, you have two options: push notifications or Mobile Passcode.

 

    • Sign up to receive a code via landline phone call.

 

    • Opt into receiving SMS messages.

 

    • Contact IT Help to receive a temporary bypass.

 

We recommend that if you have a smartphone or tablet, you download the Duo Mobile app and utilize it as your primary method of authentication. It’s quick, easy, free, and painless.

How you authenticate depends on the device and method you choose for two-factor authentication.

    • If you choose to receive notifications from the Duo Mobile app on your smartphone or other smart device, when you log in, you will simply have to grant access from the app. A push notification will be sent to your device, and you review the request and tap Approve to authenticate. Internet or cellular access is required.

 

    • If you opted to use a Duo Mobile Passcode, simply launch the Duo Mobile app on your device and click the key icon to see your current six-digit code. Internet or cellular access is NOT required for this option, since the passcodes are attached to a certain time stamp.

 

    • If you choose to receive phone calls, you will receive an automated phone call that requires you to press or tap any key on your phone to authenticate.

 

If you are having issue logging into the Gallagher’s website. 

You will need to have your LIU Student credentials AND enrolled with Duo Two Factor Authentication. Please follow the instructions below:

  1. Click on this link and login with your LIU Student credentials (e.g. john.smith@my.liu.edu)
  2. To proceed you will must enroll with Two-Factor Authentication. If you have not done so, please see instructions by clicking on this link and select Two-Factor Enrollment on the Web(desktop – recommended) or Two-Factor Enrollment for Mobile Devices.
    • if you choose Enrollment on the Web (desktop) you will need your smartphone camera during the Duo Mobile installation
    • if you choose Enrollment for Mobile Devices, you will need Chrome installed on your smartphone

      * once you start process, make sure to complete it, as you will not be able to go back

  3. After you installed the Duo Mobile App onto your smartphone, you can obtain Passcode or accept Push requests to access Gallagher’s website.

After following the instructions and if you are still having issues please submit a ticket to it@liu.edu.

For the typical user, you will authenticate once every 8 hours on your primary computer and browser. However, there are a few factors that may cause that number to vary, including:

    • The website you’re accessing (for added security, some sites always require a two-factor authentication.

 

    • Your individual browser settings (whether or not you clear cookies or are using an incognito browser—incognito sessions will be prompted for Duo every time.)

 

    • Whether or not you use more than one device and web browser.

 

    • Whether you check the “Remember me for 8 hours” box during the login process.

       

        • Note: If you have Duo set up to automatically push a notification to your smartphone, the “Remember me for 8 hours” box will be grayed out. Simply “cancel” the push from the Duo login on your computer. This will allow you to check the box. Then, select “Send me a push” from the options once again to log in.

       

       

 

    • Important note about internet browsers (e.g., Firefox, Chrome, Edge): When logging in via Duo, if your browser is out of date, it will notify you. Please update your browser to prevent receiving this notification.

 

    • For VPN users: If you’re logging into VPN, you will be prompted for a Duo code each time.

 

 

The unfortunate reality of our world is that hackers are routinely trying to steal your passwords and use them for various evil things like stealing your identity, stealing money, changing grades, and a host of other terrible things. As more and more of the members of the LIU community have been affected in these ways, we have come to realize, as most universities have, that a solution like Duo is a necessity.

Students, faculty, and staff are required to use Duo and will be prompted to enroll when they attempt to access certain password-protected LIU services .

As an institution, LIU is responsible for the security of the personal information of all its faculty, staff, and students. Adding another step in the authentication process for accounts helps prove the person trying to access resources, which cuts down on phishing and safeguards data more effectively.

It happens to the best of us—either we misplace something or forget to grab it on the way out the door. In this situation, call IT Help and, once you’ve verified your identity, they will be authorized to give you bypass codes. At this point, you will not need two-factor to log in to your account for the next 24 hours.

Important note: This is a limited-use service. Don’t forget your second-factor device after this!

We recommend that anyone who travels internationally and needs to log in to LIU websites use the Duo Mobile Passcode option or a hardware token. You can use the Duo Mobile Passcode option to generate your authentication code without an internet or cellular connection.

Go to Top