What is Duo?
Duo is a two-factor authentication solution supporting the security of personal and university data for campus community members. Two-factor authentication is a method of confirming your identity using two separate elements: 1) Something you know (your NetID password), and 2) something you have (your registered mobile device or landline phone).
Duo provides an extra layer of security for your NetID, designed so that no one but you can access your account, even if your password becomes compromised. You will be prompted to authenticate through Duo each time you log-in to Duo compatible services.
The service provides multiple options for taking advantage of this additional authentication method, including push notifications through a smartphone app, short codes delivered through the app, or phone calls.
Why does KSU need Duo?
Passwords are increasingly easy to compromise. The 2018 Verizon Data Breach Investigations Report lists “Use of stolen Credentials” as the #1 top action contributing to organizational breaches and email phishing as #3. The institution receives thousands of malicious emails daily and, although most are routed to a user’s junk folder or blocked, some are delivered and trick the recipient to disclose their NetID password. At KSU, 80% of phishing attacks utilize compromised KSU credentials and as these attacks have gotten more complex, the effectiveness of passwords alone has eroded to the point of being inadequate to protect the data to which the institution is entrusted.
Two-factor authentication is required and actively used by the University System of Georgia and member institutions. It adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you’ll be alerted right away (on your phone) if someone is trying to log in to your account. This second factor of authentication is separate and independent from your username and password— Duo never sees your password.
What is it available for?
Duo is first available for OneUSG Connect and KSUmail, Office 365, Adobe Creative Cloud and these other select campus technologies:
- EverFi – Lawroom
- EverFi – Campus Clarity
- Explorance Blue
- Tapingo Administrative Access
- Register Blast
Duo will be required to access these services beginning Nov. 28, and you can begin using the service early on Nov.15. Duo will be rolled-out to other campus services through 2019.
Please see the timeline below for additional information.