two step login
Content (19)
If you're not already using Duo Mobile for Two-Step Login, it's easy to set up for secure, convenient access wherever you are. Make your Two-Step Login experience simple and seamless with Duo Push, supported by the Duo Mobile app. Quickly verify your login by approving push notifications on your…
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
When you have a new smartphone, there are a few steps you need to take to setup the phone you're using for your Two-Step Login account. What you do with your account depends on whether or not you kept your phone number or if you have a new number on your new smartphone.
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
Go to the Device Management Portal
Go to the Device Management portal using one of the following methods:
Use Append Mode Authentication
Some campus IT services, such as Desktop Everywhere using the VMware Horizon View client, do not support a web interface to specify how to complete the second step of authentication.
If you enter just your NetID and password with these non-web apps, Two-Step…
Remember a Device for 24 Hours
To avoid being prompted by Two-Step Login multiple times a day, select Trust browser during login. Two-Step Login won't prompt you again for most campus services for the next 24 hours.
Cornell has disabled the use of passcodes generated by the Duo Mobile App as an authentication method. Use one of the remaining authentication methods described below going forward.
With the Phone Callback method, Two-Step Login calls you on your mobile phone or landline.
To authenticate:
Why Two-Step Login?
NetID passwords belonging to Cornell community members are stolen, guessed, or hacked daily. Two-Step Login means a thief would also need to have your device in order to do anything with your password.
Typically, by the time a password theft is detected or reported,…
If you don't see the Expand Where You Use Two-Step Login tab described below, then you are required to use Two-Step Login with any service where you log in with CUWebLogin and cannot opt out of this expanded use of Two-Step Login.
Expand Your Use of Two-Step Login
To better protect…
About Hardware Tokens
A hardware token is a keyfob-like device where you press a button to generate a one-time passcode for use in the second step of logging in. Hardware tokens are an option for situations where using a landline, cell phone, or other mobile device with Two-Step Login is not…
First Time Setup for Two-Step Login
If you need information about the many types of devices you can use with Two-Step Login, you can explore device options, then return here to enroll your chosen device(s).
If you have already selected your authentication device(s), continue with these…
To go to the Two-Step Login Device Management Portal, either:
To improve data security, Cornell has disabled Duo Mobile Passcodes. Plan to use one of the remaining authentication methods going forward.
When you log in to a Cornell service that requires Two-Step Login, an authentication method will be triggered, allowing you to confirm your identity.
Support Documentation
For more information about the product that Cornell uses to provide Two-Step Login, see Duo Security's Guide to Two-Factor Authentication.
Setting Up a Duo Application
Duo Security supports integration with a broad range of applications and technologies, listed on the top page of their online documentation.
User Experience
If you use the macOS Contacts app, you may not be able to sync your contacts after opting in to Two-Step Login for Office 365.
What to Do
Select System Preferences.
Select iCloud.
Deselect (uncheck) iCloud Keychain.
Select OK.
Office 365 Applications and Mobile Apps
You will rarely, if ever, need to authenticate with Two-Step Login when you use an app on your computer or mobile device to access Office 365. You might be prompted when you install a fresh copy of the software.