two-step
Content (16)
If you don't see the Expand Where You Use Two-Step Login tab, your unit's leadership has mandated this expanded use of two-factor authentication. You will not be able to opt out of using Two-Step Login with all services protected by
I'm trying to use a hardware token but no passcode appears when I press the token's button.
Solution: Either the battery is dead or the token is damaged. You will need to replace the token.
If Two-Step Login displays the message, Your account has been locked out due to excessive authentication failures. Please contact your administrator when you try to log in, then contact the IT Service Desk to unlock your Two-Step Login account.
User Experience
I need to use Two-Step Login but I don’t have access to any of my enrolled devices or any passcodes. What should I do?
Solution
The IT Service Desk can issue an emergency bypass code that will allow you to log in up to ten times over the next twenty-four hours. To…
Remove the missing device immediately from Manage Your Two-Step Login using another device that you have enrolled. For details, follow the steps at Remove a Device from Two-Step Login.
Two-Step Login blocks criminals from using stolen Cornell passwords by requiring something they don’t have. Something in your possession.
When it’s time to sign in using Two-Step Login, you confirm your identity by:
Why Two-Step Login?
NetID passwords belonging to Cornell community members are stolen, guessed, or hacked daily. Two-Step Login means a thief would also need to have your device in order to do anything with your password.
Typically, by the time a password theft is detected or reported,…
If you don't see the Expand Where You Use Two-Step Login tab described below, then you are required to use Two-Step Login with any service where you log in with CUWebLogin and cannot opt out of this expanded use of Two-Step Login.
Expand Your Use of Two-Step Login
To better protect…
About Hardware Tokens
A hardware token is a keyfob-like device where you press a button to generate a one-time passcode for use in the second step of logging in. Hardware tokens are an option for situations where using a landline, cell phone, or other mobile device with Two-Step Login is not…
To go to the Two-Step Login Device Management Portal, either:
To improve data security, Cornell has disabled Duo Mobile Passcodes. Plan to use one of the remaining authentication methods going forward.
When you log in to a Cornell service that requires Two-Step Login, an authentication method will be triggered, allowing you to confirm your identity.
Support Documentation
For more information about the product that Cornell uses to provide Two-Step Login, see Duo Security's Guide to Two-Factor Authentication.
Setting Up a Duo Application
Duo Security supports integration with a broad range of applications and technologies, listed on the top page of their online documentation.
User Experience
The Remember me for 24 Hours or Trust browser checkboxes do not work with Safari 13.0.4 and up on devices running macOS Mojave 10.14.
Solution
There are two options:
Switch to a different browser, such as Firefox or Chrome.
OR
Complete the Two-Step Login…
For more information about Logging In with Touch ID see the Duo article about Touch ID.
For information about how to set up your Apple device to use Touch ID, visit Apple's documentation, Use Touch ID on Mac.
New Users: Get Started with Two-Step Login
Two-Factor Authentication
Two-Step Login adds an extra layer of security to your Cornell NetID and password by requiring: