什么是多因素身份验证(MFA)?
多因素身份验证, 简称“MFA”, is a process that protects an account by using different “factors” or types of authentication in an account login process. 常见的因素是“你知道的事情”(例如.e. 一个帐户密码)，“你拥有的东西”(例如.e. 一种设备，比如手机)，以及“你是什么”(比如手机).e. 指纹).
Your NetID password is the first factor when logging into an application or service. 然而，由于各种原因，密码经常存在缺陷. 因此，通过引入第二个身份验证因素, we are able to help you protect your account and 大学 resources at the same time. When logging into an MFA enabled service, you must have your additional factor available to you.
Many campus applications and services require MFA and more are added regularly, 尤其是那些存放敏感数据的.
什么是Duo?
Duo is the cloud based service currently being used to facilitate the “something you have” factor in our MFA process.
Before you can use Duo you will need to register at least one device with the Duo service. The Duo enrollment process establishes an account with Duo and links your NetID to one or more physical devices that you will use as your additional factor of authentication.
双身份验证方法
Duo支持许多用于额外身份验证因素的方法:
- 智能手机或平板电脑[1]运行两人移动应用程序. 如果你有智能手机或平板电脑, it is highly recommended you enroll the device and install the 两人移动 app. This is the most common and convenient way to validate your additional factor. The app allows you to receive a “push” notification to your device and does not incur any text messaging charges. Alternatively, you can obtain a 6-digit passcode from the 两人移动 app to enter.
- “非智能”手机. A cellular phone that cannot run the 两人移动 app but is able to receive SMS text messages may be used. Duo将发送一个6位数的密码. (根据您的服务合同，可能需要支付短信费用.)
- 座机电话. Duo可以拨打固定电话，提供6位数字的密码.
注意: 十大博彩推荐排名州立大学 will never share the information entered in the device enrollment process, 包括手提电话及固定电话号码, 与其他内部或外部服务.
Enrollment is performed through a self-service web portal and typically takes a few minutes.
注意: 此时，您必须预先获得批准才能使用自助服务门户. 如果您正在尝试访问需要Duo MFA的服务, 并且无法使用自助服务门户进行注册, 请与IT服务台联系, x7971, 选择.1 or itservicedesk@yuncao.net 寻求帮助.
Through the self-service web portal you can set up multiple smartphones and landline numbers and then choose which one to use by default.
注意: 强烈建议在注册主设备之后, 比如你的智能手机, that you also enroll a secondary device such as your work desk phone or home phone. This will provide you with an alternative method for validation and access to your Duo settings in the event your primary device is lost, 损坏的, 或替换. 更多信息见附录A.
重要的是: 如果你将使用智能手机或平板电脑, it is recommended that you install the 两人移动 app prior to enrolling the device(s) with the Duo self-service web portal. 这将使注册过程更容易.
Duo应用程序可以从 应用程序商店 为苹果iOS设备或 Google Play商店 适用于安卓设备. 在商店里搜索“双核手机”. 供应商是Duo Security, Inc .. 这个应用程序的标志是绿色的，上面有白色的字母. 下面是这款应用在每个商店里的样子.
在你的智能手机上安装Duo移动应用程序后, 访问十大博彩推荐排名州立大学的任何服务, 例如 巢 or 工作日 启动安装过程.
You will be presented with the single-sign on login page and asked to enter your MSU NetID and password and press “Login”.
You will be logged into the Duo cloud service and shown a welcome screen before proceeding:
The first step is to select the type of device you want to add to your Duo profile. 可以添加多个设备, 包括一个以上相同类型的, 但你必须一次加一个. 我们建议从您的主要手机开始. 建议选择 两人移动 对于多因素身份验证. 下面的屏幕说明了这一点:
注意: that MSU currently does not support the “U2F” or “Yubikey” 选择ions, so they can be ignored.
输入您的手机号码, area code included (ex: 202-555-5555) – you do not need to include parentheses or dashes. Select 继续.
请确认输入的电话号码是否正确.
*此时此刻, if you are using a smartphone or tablet and have NOT already installed the 两人移动 app, please see the APPENDIX B for instructions on how to download the app during the registration process.
接下来，您将被要求确认您的移动设备的所有权. Select 给我发个密码.
After receiving the passcode to your mobile device, enter the 6 digit code and select 验证.
You will then be prompted to download the 两人移动 app if you have not yet already done so. 下载应用程序并选择 下一个.
在两人移动应用程序上，选择 使用二维码 扫描屏幕上的二维码. 相反，您可以选择接收激活链接.
扫描二维码后, you will now be able to use Duo to complete multifactor authentication. Select 继续.
You can now, 选择ionally, add additional devices 对于多因素身份验证. It is recommended to add an additional device in case your primary device becomes unavailable.
一旦您注册了一个或多个设备, 您可以登录任何需要Duo MFA的MSU应用程序或服务. 登录屏幕因服务而异, 然而, during the login process you will usually be directed to a page that requires you to select one of your enrolled devices to complete the authentication process:
Successfully completing one of the authentication methods will allow you to login 到应用程序或服务.
强烈建议在注册主设备之后, 比如你的智能手机, that you also enroll a secondary device such as your work desk phone or home phone. This will provide you with an alternative method for validation and access to your Duo settings in the event your primary devices is lost, 损坏的, 或替换.
重要的是: 因为你已经在Duo中注册了一个设备, you will need to use that device to verify your identity with Duo before you can modify that device’s settings or add/remove any other devices.
首先，访问十大博彩推荐排名州立大学的任何服务 巢 or 工作日 开始这个过程. 您将看到Duo多因素身份验证屏幕. Select 其他选项.
在下一个屏幕上，选择 管理设备.
完成身份验证过程.
接下来，您将看到DUO设备管理屏幕. 在这个屏幕上选择 添加设备.
选择一个登录选项. 建议选择“双核手机”进行多因素认证.
输入您的电话号码.
请确认输入的电话号码是否正确.
接下来，您将被要求确认您的移动设备的所有权. Select 给我发个密码.
After receiving the passcode to your mobile device, enter the 6 digit code and select 验证.
You will then be prompted to download the 两人移动 app if you have not yet already done so. 下载应用程序并选择 下一个.
在两人移动应用程序上，选择 使用二维码 扫描屏幕上的二维码. 相反，您可以选择接收激活链接.
扫描二维码后, you will now be able to use Duo to complete multifactor authentication with your additional device. Select 继续.
*重复这些步骤向您的Duo帐户添加其他设备.
These instructions are for installing the 两人移动 app for your particular brand of device during the initial enrollment process. (It is recommended that you install the 两人移动 app on your phone prior to enrolling your first device since it makes the enrollment process a bit easier.)
iPhone / iOS
打开应用程序商店，搜索 “双核手机”. Select 得到.
安卓
打开Google Play商店，搜索 “双核手机”. Select 安装.
These instructions are for reactivating 两人移动 on a new device with the same phone number. (It is recommended that you install the 两人移动 app on your new phone prior to re-activating your device since it makes the activation process a bit easier.)
首先，访问十大博彩推荐排名州立大学的任何服务 巢 or 工作日 开始这个过程. 您将看到Duo多因素身份验证屏幕. Select 其他选项.
在下一个屏幕上，选择 管理设备.
完成身份验证过程.
接下来，您将看到DUO设备管理屏幕. Select 我有一部新手机 在之前注册的设备上.
将出现手机设置屏幕. Select 开始.
接下来，您将被要求确认您的移动设备的所有权. Select 给我发个密码.
After receiving the passcode to your mobile device, enter the 6 digit code and select 验证.
You will then be prompted to download the 两人移动 app if you have not yet already done so. 下载应用程序并选择 下一个.
在两人移动应用程序上，选择 使用二维码 扫描屏幕上的二维码. 相反，您可以选择接收激活链接.
扫描二维码后, you will now be able to use Duo to complete multifactor authentication with your new device. Select 继续.
When traveling internationally you can still connect to 十大博彩推荐排名州立大学 applications or vpn using DUO as long as you ensure the following:
- 您拥有DUO注册设备.
- 你可以使用本地WiFi.
- 您设备上的DUO移动应用程序是最新的.
- 你使用DUO推送通知. 他们不需要国际通话计划.