Multi-factor authentication (MFA) requires two steps to verify your identity. This type of authentication is used to access N.D. University System and NDSU services that require higher levels of security. Duo is the vendor for MFA.
Note: We recommend setting up more than one second-factor device to ensure you are able to log in even if you do not have access to your primary device.
University System Services
NDSU employees must use MFA to verify their identity before logging in to the PeopleSoft Finance portal and to access specific information within HRMS Self-Service. For these University System services, you need to log in with your University System ID and password as well as your second factor.
Employees and students have the option to use MFA for NDSU services, including all services that use NDSU CAS (Central Authentication Services), InCommon/eduGAIN and some remote desktop services. If you opt-in for multi-factor for NDSU services, you will use it for most NDSU services, including Blackboard, Google Apps, and Navigate. You may also opt in to MFA on Office365 by contacting the IT Help Desk.
Set Up Multi-factor Authentication for University System Services
You must set up a secondary device (e.g., mobile phone, tablet, landline) before using MFA to access protected systems.
- Open a web browser and go to the NDSU Account Management system, and then log in with your NDSU electronic ID and password.
- Note: For easier enrollment, open the setup page using a computer and have your secondary device nearby.
- Click Multi-Factor Authentication in left menu.
- Click Enroll in Duo.
- Click the Start Setup button and follow the prompts to add a mobile phone (recommended), tablet (e.g., iPad, Nexus 7), or landline.
- Note: For in depth step-by-step instructions, please see the Duo enrollment guide
- Note: If using a mobile phone or tablet, you may be prompted to install the Duo Mobile app.
- Once completed, you will have access to NDUS systems protected by Multi-Factor Authentication.
- After you set up the first device, we recommend setting up an additional second-factor device to ensure you are able to log in even if you do not have access to your primary device.
Contact the NDSU IT Help Desk if you have questions or need assistance.
Once you have completed the setup process for the University System services, you will return to the main page and have the option to set up MFA for NDSU services.
Set Up Multifactor Authentication for NDSU Services
- If you are not yet logged in to the NDSU Account Management system, open a web browser and go to the NDSU Account Management system, and then log in with your NDSU electronic ID and password.
Note: For easier enrollment, open the setup page using a computer and have your secondary device nearby.
- Click Multifactor Authentication in left menu.
- Click the link "Opt in for MFA at NDSU"
- Approve the multi-factor prompt to complete the opt-in process
- You will receive a message indicating you have "Successfully enabled Duo for NDSU.” This process may take several minutes to complete.
Using Multi-Factor Authentication
Do not approve Duo challenges to logins if not currently expecting one. Immediately contact IT support for your area or NDSU Help Desk for assistance.
Remember Me Option
You can choose to reduce the need to MFA if you select the checkbox that says "Remember Me for 30 Days" (or for 10 hours in Campus Connection). This will work if you sign in to the same device and browser regularly. If you use a public device, do not choose this option. Managed computers on campus (including instructor workstations in classrooms) are reset every night, so this option will not work.
Supported Devices and Options
The currently supported devices include iPhone, iPad, Android, BlackBerry, Windows Phone, other cell phones and landlines, and USB tokens which can be purchased through the Bookstore.
Send Me a Push
Pushes a login request to a user's phone or tablet (if Duo Mobile is installed and activated on an iPhone, Android, or BlackBerry device). Just review the request and tap Approve to log in.
Authenticate via phone callback. The caller will be prompted to press "5" to approve the login.
Enter a Passcode
Log in using a passcode, generated from the Duo Mobile App or a token.
Authenticates when a user touches the configured USB token, which populates a passcode and approves the login. This option requires purchasing a USB token from the NDSU Bookstore and assistance from the IT Help Desk. The tokens range from $39-$49. Visit the NDSU Bookstore's website to purchase a token or get more information.
Manage your Devices and Settings
If you wish to add, edit or delete associated devices or change your Duo settings you may do so from the NDSU Account Management system. You will need to login using your NDSU electronic ID and Password to authenticate.
- Click Multifactor Authentication from the left menu
- Click Manage Duo Settings
- If you are automatically prompted by Duo, click Cancel before taking the next step.
- Click Add a new device if you wish to add a new device or click My Settings and Devices if you want to remove a device or change your Duo settings
- You will need to select an authentication device and authentication method and confirm a Duo prompt in order to make changes
- Select Device options next to the device you wish to manage or scroll down to change your Default Device or the When I log in setting
If you are not able to authenticate, please contact the NDSU IT Help Desk for assistance.
Multi-factor authentication is used as an additional layer of security to protect the confidentiality of private data, as defined by North Dakota University System Data Classification Standards, in HRMS Self-Service and the Finance portal. All NDSU students, faculty and staff are responsible for protecting private and restricted data, including data subject to export control regulations, FERPA, HIPAA, PCI and other pertinent state and federal laws and industry regulations. Contact the NDSU information security office if you have questions or concerns.
Frequently Asked Questions
Who may use the service?
At this time Faculty, Staff and student employees at NDSU are eligible to use Duo MFA.
I am unable to check the "Remember me for 30 days" box because I am automatically prompted for my Duo Push.
To see the option to "Remember me for 30 days," simply click the Cancel button on the prompt, check the box, and click the Send Me a Push button to resend your prompt. Confirm the prompt.
My code-generating token is not working.
Your token may be out of sync. Call the IT Help Desk.
My USB token only works with Chrome.
Contact the IT Help Desk and they can help you configure your token to work with other browsers.
Help & Support
If you have questions, or want to get started using this service, contact the IT Help Desk.
The multi-factor authentication service is available for:
- Former Employees
Multi-factor authentication is used as an additional layer of security to protect the confidentiality of private data, as defined by North Dakota University System Data Classification Standards, in HRMS Self-Service and the Finance portal. All NDSU students, faculty and staff are responsible for protecting private and restricted data, including data subject to export control regulations, FERPA, HIPAA, PCI and other pertinent state and federal laws and industry regulations. CContact the NDSU information security office if you have questions or concerns.