Duo Authentication

Why Duo Authentication?

About 24,000 potentially malicious emails are blocked daily by the ITS Information Security team. Many of these spam emails contain disguised links that appear to be for familiar websites but in fact, lead to phishing websites or sites that are hosting malware (short for malicious software) or ransomware (a type of malware that blocks or limits user access to their computer or certain files until a sum of money is paid). To learn more about identifying phishing emails, visit ITS PhishingMalware pages.

Sophisticated phishing emails may bypass even the most advanced spam filter and sit in your Inbox. Clicking on links on phishing emails leads to compromised user accounts and allows hackers to send more phishing emails to your colleagues, friends, and family. Compromised usernames and passwords create a huge security risk to the information stored in key applications you use in your workplace every day.

Duo Security manages multi-factor authentication services to enhance the security of LMU’s information technology services. Multi-factor authentication creates a layered defense, making it more difficult for an unauthorized person to access users’ information. Duo is currently being used with LMU’s VPN services and is being expanded to help protect additional services. 

The following video provides an overview on the authentication process.

Implementation Phases and Services Required to Use Duo

  • Initial Phase:
    • Starting in February 2017, Virtual Private Network (VPN) users who needs to access some services off-campus are required to verify their identity with Duo.

      IMPORTANT: Emails from Duo Security are legitimate and contain unique link for each user.
  • Expansion Phase:
    • Starting November 16, 2017, Oracle eBusiness Suite Power Users (Human Resources, Finance, Payroll) who access these applications daily as part of their work, will be required to use Duo on-campus and off-campus. Power Users will only have to authenticate their access with Duo on the same computer and on the same browser once per day.

    • Starting January 5, 2018, users of these two services will be required to use Duo.
      • HR Self-Service for anyone who uses HR's Self-Service to modify LMU Alert, Campus Directory, or Benefits, will be required to enroll in Duo and authenticate with a registered device. 
      • Outlook Email via mail.lmu.edu or MyLMU > System Logins > Email and Calendar (Outlook) from off-campus. Users who access emails via MyLMU on campus, Outlook Desktop or a mobile device will not be affected. 

How Does Duo Work?

Duo authentication provides additional security by requiring both something you know (your username and password) and something you have (such as a smartphone, a tablet, a phone, etc.) any time you access any Duo-protected services. Duo-supported devices include iPhone, Android, Blackberry, Windows Phone, tablet. Other methods, such as text message, landline, phone call, or a hardware token (upon request), are available as well.

Need Additional Help?