Change in DUO Multi-Factor Authentication

We are all aware of the increasing threat posed by cybercriminals and how they continue to become more sophisticated in their attempts to harm individuals and businesses. As they adapt to our defenses and shift their strategies, we must also enhance our security measures.

Effective February 1, 2025, the following options will be the only methods faculty and staff can use to authenticate their accounts and access systems through DUO MFA:

DUO Push – If you have the DUO Mobile App installed on your smartphone or tablet, you can receive a push notification. From the app, you can approve or deny the login attempt.
Passcodes via DUO Mobile App – By tapping the FDU logo in the DUO Mobile app, you can generate a single-use passcode. This code must be used immediately.
Passcodes via SMS – Users can receive a one-time code via text message. To obtain the code, click Enter Passcode and then click the blue “Text me new codes” button. These codes do not expire until used. This option does not require a smartphone.
Passcodes via Token (Departmental Approval Only) – Departments can request a physical token that generates passcodes for an employee’s MFA authentication. Departments will be charged for the token and are responsible for its return if the employee leaves the University. Tokens can be requested through a SAMI Support ticket.
Security Key – Employees can purchase and use physical WebAuthn/FIDO2 security keys. After purchasing a key, employees can enroll their devices online. Once enrolled, the device validates the employee’s identity whenever the key is connected.