Why is VCU Doing This?
The beginning of a sophisticated cyberattack usually starts with a phishing scam. A phishing scam is a social engineering attack that utilizes a phone call, an email, social media, or a text message to trick a victim into disclosing information that he or she would typically not disclose. The end goal of phishing scams is usually the theft of login credentials such as usernames and passwords. Armed with the username and password of an individual, a cyber adversary can then masquerade as the victim, steal his or her personal information protected by those credentials, or silently compromise the organization where the victim works while minimizing the chances of alarm.
The implementation of VCU 2Factor Authentication will significantly reduce the likelihood that these stolen accounts can be used by a cyber adversary, as individual identities are verified by not only assigned login credentials but also something the individual has in his or her possession.
How is This Done?
VCU already deployed its VCU 2Factor Authentication solution to various authentication services and will continue to integrate the VCU 2Factor Authentication solution with the VCU Central Authentication Service.
For VCU’s deployment of VCU 2Factor Authentication to the Central Authentication Service, VCU will utilize the combination of your eID credentials and a message delivered to your phone using VCU 2Factor Authentication provider.
How Will I Be Affected?
VCU will integrate VCU 2Factor Authentication to all new applications protected by the Central Authentication Service. By default:
-
VCU 2Factor Authentication will be required for all faculty, staff, and students accessing applications protected by the Central Authentication Service (CAS) when logging in from unknown and or untrusted locations (e.g., off-campus).
- Once enrolled in the VCU 2Factor authentication service, 2factor authentication will be mandatory for any applications used by the individual.
-
VCU 2Factor authentication is integrated with all web applications using the VCU Central Authentication Service (CAS).
-
All individuals using VCU 2Factor Authentication with the Central Authentication Service (CAS) will have the option to remember their device for 60 days when logging in from an unknown and or untrusted location (e.g., off-campus).
Registering with VCU 2Factor Authentication
Individuals who have never used VCU 2Factor Authentication will need to watch the video or follow the text instructions below to enroll in the service.
1. Step by Step on how to can set up a two-factor authentication device during the 'Claim my eID' process.
- Go to myeid.vcu.edu and click on the 'Claim me eID' button.
2. Click on 'Submit', after you have entered 2 out of 3 items.
-
You will need 2 out of the 3 items of information to verify your identity in order to Claim your Account:
- VNumber OR VCUCard Number
AND
- Birthdate
The Banner ID is also known as the VNumber. The VCUCard number is the 16-digit number on your physical VCUCard. You may not have VNumber if you are a VCU Health System employee, in that case, please use the 16-digit number on your badge.
3. You will now click on 'Start setup', to register your Duo device for VCU 2-factor authentication
4. Select the type of device you are registering with Duo and click on 'Continue'. 'Mobile Phone' is the recommended type.
5. Enter your mobile phone number for the device and confirm that the phone number is correct by checking the box. Click on 'Continue'.
6. Next you will be prompted to select the type of smartphone you have - iPhone, Android, or Windows Phone. Please select the type of phone and click on 'Continue'
7. You will be prompted to install the Duo Mobile App on your device. Instructions will be presented according to the phone type you selected in the previous step. Please follow the instructions and install the Duo mobile app on your device After you have installed the app on your device please click on the 'I have Duo Mobile' button to continue.
8. Now using your Duo mobile App you will scan the QR code presented on the screen during the registration process. After you have scanned the code the screen will show a green check box. Click on the 'Continue', button.
9. You will see an information box for your setting and device. You will see your phone number and type of phone. You will also be presented with the option, "When I log in:". You will have two options. Option 1. Ask me to choose an authentication method and Option 2. Automatically send this device a Duo Push
If you do not want to be prompted every time for the authentication method (Duo Push or Passcode) and would prefer to use the Duo push method (Recommended), then please select the 'Automatically send this device a Duo Push'. Click on 'Continue to Login' to proceed.
10. You should receive a push on your device. Please 'Approve', the request.
11. The above step completes the Duo registration of your phone. Please continue with the rest of the account claim process to set up personal information and password. Click on 'Next' to continue.
12. Add your personal email account (non-VCU email) and personal mobile number. This information will be used to allow you or VCU IT Support Center to reset your forgotten password in the future if needed. Click on 'Submit' to proceed.
13. Final step is to set a password for your eID account. Please enter a password that meets the VCU password policy as shown on the right-hand side of the screen. Re-type your password to confirm and click on 'Reset Password. This completes the account claim and Duo registration steps.
Logging into CAS with VCU 2Factor Authentication
Individuals who are already enrolled in VCU 2Factor Authentication follow the instructions below to use with the VCU Central Authentication Service.
1. Once you have registered with the VCU 2Factor Authentication System, log in with your VCU eID to any VCU 2Factor Authentication protected application or website.
2. Choose a secondary authentication method by clicking on the corresponding button.
- Send Me a Push - This option allows you to receive a Push notification to your phone on your DUO Mobile App. The DUO Mobile app will notify you of a login attempt, simply check your phone and press the Green Checkmark button to log in.
- Enter a Passcode - This option allows you to enter passcodes generated from the DUO Mobile App (generated by tapping the Key icon in the app), codes generated from a hardware token (e.g. Yubikey), or codes received through SMS text messages. If you choose this option, you can also request the system to text additional passcodes to you via SMS text message.
As an option, you can also check the "Remember me for 60 days" checkbox, which will allow you to bypass VCU 2Factor authentication from the device you are using for up to 60 days. Please note, this option should only be used on your trusted computing devices and should not be used on shared computers or public computers.
3. Complete the login process.