Multi-factor authentication (MFA) requires two steps to verify your identity. Duo is the vendor for MFA.
Note: We recommend setting up more than one second-factor device to ensure you are able to log in even if you do not have access to your primary device.
University System Services
NDSU employees must use MFA to verify their identity before logging in to the PeopleSoft Finance portal and to access specific information within HRMS Self-Service or Campus Solutions. For these University System services, you need to log in with your University System ID and password as well as your second factor.
Employees and students may be required or have the option to use MFA for NDSU services, including all services that use NDSU CAS (Central Authentication Services), InCommon/eduGAIN and some remote desktop services. If you opt-in for multi-factor for NDSU services, you will use it for most NDSU services, including Office365, Google Apps and Navigate.
Set Up Multi-factor Authentication for University System Services
You must set up a secondary device (e.g., mobile phone, tablet, landline) before using MFA to access protected systems.
- Open a web browser and go to the NDSU Account Management system, and then log in with your NDSU electronic ID and password.
- Note: For easier enrollment, open the setup page using a computer and have your secondary device nearby.
- Click Multi-Factor Authentication in left menu.
- Click Enroll in Duo.
- Click the Start Setup button and follow the prompts to add a mobile phone (recommended), tablet (e.g., iPad, Nexus 7), or landline.
- Note: For in depth step-by-step instructions, please see the Duo enrollment guide
- Note: If using a mobile phone or tablet, you may be prompted to install the Duo Mobile app.
- Once completed, you will have access to NDUS systems protected by Multi-Factor Authentication.
- After you set up the first device, we recommend setting up an additional second-factor device to ensure you are able to log in even if you do not have access to your primary device.
Contact the NDSU IT Help Desk if you have questions or need assistance.
Once you have completed the setup process for the University System services, you will return to the main page and have the option to set up MFA for NDSU services.
Set Up Multifactor Authentication for NDSU Services
- If you are not yet logged in to the NDSU Account Management system, open a web browser and go to the NDSU Account Management system, and then log in with your NDSU electronic ID and password.
Note: For easier enrollment, open the setup page using a computer and have your secondary device nearby.
- Click Multifactor Authentication in left menu.
- Click the link "Opt in for MFA at NDSU"
- Approve the multi-factor prompt to complete the opt-in process
- You will receive a message indicating you have "Successfully enabled Duo for NDSU.” This process may take several minutes to complete.
Using Multi-Factor Authentication
Do not approve Duo challenges to logins if not currently expecting one. Immediately contact IT support for your area or NDSU Help Desk for assistance.
Remember Me Option
You can choose to reduce the need to MFA if you select the checkbox that says "Remember Me for 30 Days" (or for 10 hours in PeopleSoft applications or 60 days in Office365). This will work if you sign in to the same device and browser regularly. If you use a public device, do not choose this option. Managed computers on campus (including instructor workstations in classrooms) are reset every night, so this option will not work.
Supported Devices and Options
The currently supported devices include iPhone, iPad, Android, BlackBerry, Windows Phone, other cell phones and landlines, and USB tokens which can be purchased through the Bookstore.
Send Me a Push
Pushes a login request to a user's phone or tablet (if Duo Mobile is installed and activated on an iPhone, Android, or BlackBerry device). Just review the request and tap Approve to log in.
Authenticate via phone callback. The caller will be prompted to press "5" to approve the login.
Enter a Passcode
Log in using a passcode, generated from the Duo Mobile App or a token.
Authenticates when a user touches the configured USB token, which populates a passcode and approves the login. This option requires purchasing a USB token from the NDSU Bookstore and assistance from the IT Help Desk. Visit the NDSU Bookstore's website to purchase a token or get more information.
Code generating Tokens
Device generates code that can be entered when prompted for second factor. This option requires purchasing a token from the NDSU Bookstore and assistance from the IT Help Desk. Visit the NDSU Bookstore's website to purchase a token or get more information.
Manage your Devices and Settings
If you wish to add, edit or delete associated devices or change your Duo settings you may do so from the NDSU Account Management system. You will need to login using your NDSU electronic ID and Password to authenticate.
- Click Multifactor Authentication from the left menu
- Click Manage Duo Settings
- If you are automatically prompted by Duo, approve the prompt with one of your Duo devices.
- Click Add another device if you wish to add a new device or click the Device Options next to a device to change the settings for that device or to remove it
- Select the device you wish to be the default device under the Default Device drop down menu, select the desired action for the default device from the When I log in: drop down menu
If you are not able to authenticate, please contact the NDSU IT Help Desk for assistance.
Frequently Asked Questions
Who may use the service?
Students, staff and faculty at NDSU may use Duo MFA.
I am unable to check the "Remember me for 30 days" box because I am automatically prompted for my Duo Push.
To see the option to "Remember me for 30 days," simply click the Cancel button on the prompt, check the box, and click the Send Me a Push button to resend your prompt. Confirm the prompt.
My code-generating token is not working.
Your token may be out of sync. Call the IT Help Desk.
My USB token only works with Chrome.
Contact the IT Help Desk and they can help you configure your token to work with other browsers
How do I get backup codes?
You can have backup codes texted to your phone, but it must be done in advance. On the Duo authentication screen, click "enter a passcode". Then click "text me new codes". Print or write the codes and save them in your wallet or purse. They are good for five months.
Help & Support
If you have questions, or want to get started using this service, contact the IT Help Desk.
The multi-factor authentication service is available for:
- Former Employees
Multi-factor authentication is used as an additional layer of security to protect the confidentiality of private data, as defined by North Dakota University System Data Classification Standards. All NDSU students, faculty and staff are responsible for protecting private and restricted data, including data subject to export control regulations, FERPA, HIPAA, PCI and other pertinent state and federal laws and industry regulations. Contact the NDSU information security office if you have questions or concerns.