Duo Authentication

Duo authentication improves the security of your LMU account by requiring an additional level of authentication beyond your username and password. Faculty and Staff, enroll in Duo today!

IMPORTANT: Faculty and Staff Must Enroll in Duo for HR Benefits Enrollment

When you access HR's Self-Service, on-campus or off-campus, you will be prompted to verify your identity through Duo Security. If you have not enrolled in Duo, from a computer, login to MyLMU, click the HR Self-Service link and follow the instructions. Basic cell phones, tablets, smartphones, or landlines are acceptable devices. If you have already enrolled in Duo, you will be prompted to send a Push (recommended) to your registered device. From your registered device, tap the Accept button. 

Need Additional Help?

How Does Duo Work?

Duo authentication provides additional security by requiring both something you know (your username and password) and something you have (such as a smartphone, a tablet, a phone, etc.) any time you access any Duo-protected services. Duo-supported devices include iPhone, Android, Blackberry, Windows Phone, tablet. Other methods, such as text message, landline, phone call, or a hardware token (upon request), are available as well.


Implementation Phases and Services Required to Use Duo

  • Initial Phase:
    • Starting in February 2017, Virtual Private Network (VPN) users who need to access some services off-campus are required to verify their identity with Duo.

      IMPORTANT: Emails from Duo Security are legitimate and contain a unique link for each user.
  • Expansion Phase:
    • Starting November 16, 2017, Oracle eBusiness Suite Power Users (Human Resources, Finance, Payroll) who access these applications daily as part of their work, will be required to use Duo on-campus and off-campus. Power Users will only have to authenticate their access with Duo on the same computer and on the same browser once per day.

    • Starting January 5, 2018, users of these two services will be required to use Duo.
      • HR Self-Service for anyone who uses HR's Self-Service to modify LMU Alert, Campus Directory, or Benefits, will be required to enroll in Duo and authenticate with a registered device.
      • Outlook Email via mail.lmu.edu or MyLMU > System Logins > Email and Calendar (Outlook) from off-campus. Users who access emails via MyLMU on campus, Outlook Desktop or a mobile device will not be affected.
    • Starting in October 2018, users of Banner system will be required to use Duo. A pilot group testing will begin shortly.

Why Duo Authentication?

About 24,000 potentially malicious emails are blocked daily by the ITS Information Security team. Many of these spam emails contain disguised links that appear to be for familiar websites but in fact, lead to phishing websites or sites that are hosting malware (short for malicious software) or ransomware (a type of malware that blocks or limits user access to their computer or certain files until a sum of money is paid). To learn more about identifying phishing emails, visit ITS Phishing and Malware pages.

Sophisticated phishing emails may bypass even the most advanced spam filter and sit in your Inbox. Clicking on links on phishing emails leads to compromised user accounts and allows hackers to send more phishing emails to your colleagues, friends, and family. Compromised usernames and passwords create a huge security risk to the information stored in the key applications you use in your workplace every day.

Duo Security manages multi-factor authentication services to enhance the security of LMU’s information technology services. Multi-factor authentication creates a layered defense, making it more difficult for an unauthorized person to access users’ information. Duo is currently being used with LMU’s VPN services and is being expanded to help protect additional services.

The following video provides an overview on the authentication process.