Multi-Factor Authentication

Because login credentials have become increasingly easy to compromise, the University is implementing a multi-factor authentication request to ensure secure access to services and data. This email is to notify you that due to the sensitive nature of our data the Division of Enrollment Management will be an early adapter for this initiative and we will be using Multi-Factor Authentication from Duo Security (MFA-Duo) to access any applications using NetID Login for authentication.  Each department in DEM will be implementing this at slightly different times before the end of September according to the needs of their office. Department point people for MFA-Duo are as follows:  Cameron Olson – Admissions, Cori Splain – Financial Aid, Angie Rieves – Registrar’s Office and Margaret Maly – Office of the Vice Provost. Please read the information below (from DoIT) to learn more about MFA-Duo, including how to set up your account now. What is multi-factor authentication? Multi-factor authentication adds a verification step to the NetID login process. It requires an individual to verify their identity using something that only they possess–for example, a smartphone or token.  To access UW–Madison digital assets, an individual will login with their NetID and password AND verify their identity using their smartphone or token. Why do we need multi-factor authentication? By requiring two different channels of authentication, we can protect user logins from remote attacks that may exploit stolen usernames and passwords. Over 90% of breaches today involve compromised usernames and passwords. Multi-factor authentication enhances the security of your account by using a secondary device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password. Watch a short video (1:59) from Duo Security to learn why it’s needed.  You can also get there by going to youtube.com and searching for “What is Two-Factor Authentication? (2FA)”. What should I do now? MFA-Duo is now available for your use. Go ahead and set up your MFA-Duo account now, by logging it to http://mynetid.wisc.edu/duo-portal. If you do not have a smart device that can be used for MFA-Duo, talk to your MFA-Duo department point person (listed above) about acquiring a hard token. You won’t notice a difference in your login experience until your department starts using MFA-Duo.  All DEM staff will be using the new system by the end of September.  Following is a list of implementation dates for each department:
  • Registrar’s Office – Friday, September 21
  • Financial Aid – “Early Adopters” – Wednesday, August 22, rest of Financial Aid team by September 12
  • Office of the Vice Provost – Monday, August 20
  • Office of Admissions & Recruitment – Friday, September 28
If you’d like to start using MFA-Duo prior to the above implementation dates, please send an e-mail to your department point person. How will MFA-Duo change my login experience? When logging in to an application that is protected by MFA-Duo, you will still enter your NetID and password. After that you will be required to complete a second-factor authentication.  To see how easy it is, watch the “MFA-Duo: Logging In” video at the following web site (link) or by copying and pasting the following link: https://it.wisc.edu/learn/guides/how-to-use-multi-factor-authentication-mfa-duo/.  You’ll generally only need to authenticate via Duo once per day, if you use a feature called “Remember Me”. Think of MFA-Duo as a layer of security added to your pre-existing login method. You will be required to use your MFA-Duo account starting on the implementation date for your department (listed above).   What if I already use Symantec OTP for access to HRS and SFS? If you currently use a Symantec token for access to HRS or SFS, you will need to continue to use it in addition to using MFA-Duo for now. In the future, we’d plan to have only MFA-Duo be used to access HRS and SFS. Where can I find out more about MFA Duo? MFA-Duo Project Website MFA-Duo Training Website How to use MFA-Duo MFA-Duo Frequently Asked Questions MFA KnowlegeBase If you have any questions, please contact the DoIT Help Desk. If you’d like to share your thoughts, please use DoIT’s  Feedback Form. Thanks for your cooperation as we ensure the continued security of the student data for which we are responsible. Regards, Steve