Two Factor at NC State

At NC State University, we have two services that provide multi-factor authentication to the most vital resources on campus. We use Google 2-Step to protect our Google services, like email and everything stored in Google Drive, and we use Duo to protect services that use our Shibboleth login services. Shibboleth may not be a name you know, but you use it to log in to services like MyPackPortal, WolfWare, and library resources. To be fully protected, you must turn on both Google 2-Step and Duo.

In December 2016 and February 2017, the Chancellor and OIT sent memos to campus, requiring all staff (e.g., faculty, staff, student employees, and no-pay employees) to be enrolled in 2-Factor for Google and Shibboleth on campus by October 31, 2017. This is required to be compliant with secure services as well as to cut down on compromised accounts due to phishing. See more on phishing...

 

Follow these steps below to secure your accounts:

Setup User Identification and Authorization (UIA) Questions

Click the above link to set your UIA questions.


What is User Identification and Authentication

User Identification and Authentication (UIA) is an online verification procedure implemented by the Office of Information Technology and used by University help desks to identify customers who make telephone requests to have their passwords reset.

With UIA set, if you need a password reset or backup codes for 2-Factor generated, call OIT at 515-HELP, and an OIT Help Desk staff member will locate these questions and answers and will verify your identity by asking you for your response to one or more of your questions prior to resetting your password or giving you a backup code for Duo or Google 2-Factor.

If you cannot answer any of the questions asked by Help Desk personnel you will be required to bring a picture ID to the West Dunn Building in order for your password to be reset or to be given backup codes. Therefore, it is important to set these questions as your first step in securing your account.

Next, enroll in Duo and Google 2 Step.....

Set Up Duo

The above link provides information on enrolling and the following...

  • Information on how to enroll in Duo
  • Information on how to add additional devices and manage them
  • List of authentication methods

QUICK SETUP:

Log into NCSU Email as unityid@ncsu.edu: NCSU Email. If you are not enrolled in 2-Step, you will receive a page popup asking you to "enroll in 2-Step Verification now", click Enroll.

  • Have your phone and/or U2F Security Key available.
  • After you enroll your phone and get to the list of authentication methods, we strongly recommend printing backup codes as a "fail-safe" and put the list in your wallet in case your phone is not available for any reason.
OIT Google 2-Step Instructions

The link above provides more detailed information on enrolling and information such as...

  • Links to enroll in Google 2-Step
  • Information on adding devices
  • How to create Application Specific passwords for devices, such as:
    • Devices running Android 2.3.x or older
    • Mail app on Apple iOS devices (not the Gmail app)
    • Email clients (e.g., Thunderbird, Outlook, Mac Mail)
    • Instant messengers (e.g., Pidgin, Adium)
  • List of Authentication Methods

 

See how CALS as a whole is doing and how departments in CALS are reaching their goal to be enrolled in 2FA by October 31! See Race to 2FA!

 

Please review the links to the left first to enable UIA, Duo for Campus Shibboleth, and 2-Step for Google.

View some helpful
"How To" videos that clearly demonstrate the steps to take:

If you still need help, you may attend an in-person session.

Hands-on Session

Register for a Hands-on Session

Come to a CALS IT Hands-on Help for 2-Factor and Duo Activations 1-hour sessions, for CALS staff. Sessions will run February through October 2017*.

*For those who do not have a smartphone available for authentication, we will have a limited number of U2F USB security keys at our hands-on session to hand out.