Students
Content (629)
If you don't see the Expand Where You Use Two-Step Login tab, your unit's leadership has mandated this expanded use of two-factor authentication. You will not be able to opt out of using Two-Step Login with all services protected by
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
When you have a new smartphone, there are a few steps you need to take to setup the phone you're using for your Two-Step Login account. What you do with your account depends on whether or not you kept your phone number or if you have a new number on your new smartphone.
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
Go to the Device Management Portal
Go to the Device Management portal using one of the following methods:
Use Append Mode Authentication
Some campus IT services, such as Desktop Everywhere using the VMware Horizon View client, do not support a web interface to specify how to complete the second step of authentication.
If you enter just your NetID and password with these non-web apps, Two-Step…
Remember a Device for 24 Hours
To avoid being prompted by Two-Step Login multiple times a day, select Trust browser during login. Two-Step Login won't prompt you again for most campus services for the next 24 hours.
Cornell has disabled the use of passcodes generated by the Duo Mobile App as an authentication method. Use one of the remaining authentication methods described below going forward.
With the Phone Callback method, Two-Step Login calls you on your mobile phone or landline.
To authenticate:
Log In Using the Duo Mobile App
Duo Push works with Duo Mobile, an app you install and activate on your smartphone or tablet. You can download Duo Mobile from your device’s app store.
You can grant others permission to see your calendar. You choose the level of detail (when you're free or busy, the subject of the event, or the details of the event). You also have the option of marking a calendar item as Private; this removes all privileges except seeing that you are busy for the…
I'm trying to use a hardware token but no passcode appears when I press the token's button.
Solution: Either the battery is dead or the token is damaged. You will need to replace the token.
You can use Two-Step Login when you travel internationally to countries other than those listed below.
All of the authentication methods will still work, although some destinations might not support telephony-based services, such as phone callbacks or retrieving a set of passcodes via…
If Two-Step Login displays the message, Your account has been locked out due to excessive authentication failures. Please contact your administrator when you try to log in, then contact the IT Service Desk to unlock your Two-Step Login account.
User Experience
I need to use Two-Step Login but I don’t have access to any of my enrolled devices or any passcodes. What should I do?
Solution
The IT Service Desk can issue an emergency bypass code that will allow you to log in up to ten times over the next twenty-four hours. To…
Remove the missing device immediately from Manage Your Two-Step Login using another device that you have enrolled. For details, follow the steps at Remove a Device from Two-Step Login.
Skype for Business has been replaced by Microsoft Teams.
By default, Skype will start automatically when Windows starts. You can change this setting.
You will not be able to enable FileVault on a computer that is managed by Cornell IT staff, because encryption will already be setup. If you are not sure whether your computer is managed, please contact your support provider.
To enable FileVault on a non-managed Mac computer,…
Two-Step Login blocks criminals from using stolen Cornell passwords by requiring something they don’t have. Something in your possession.
When it’s time to sign in using Two-Step Login, you confirm your identity by:
The following goals have been defined for these key areas of Cornell's Identity and Access Management program.