Multi-Factor Authentication


Multi-Factor Authentication (MFA) adds a second layer of security to your SJSUOne account. SJSU has licensed Duo MFA for the entire SJSU community including staff, faculty, students, applicants, and alumni. All members of the SJSU community are required to use Duo MFA when accessing apps at SJSUOne.

You can learn more about Duo MFA at Duo’s Guide to Two-Factor Authentication

What You Need to Know

  1. Multi-factor Authentication (MFA) adds a second layer of security to your SJSUone account.

  2. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in to your account, even if they know your password. 

  3. MFA setup instructions are automatically sent to new applicants by Enrollment Services and are accessible below.

  4. MFA is a simple and extremely effective way to protect an organization from digital attacks and can help keep bad actors from gaining access to SJSU and our community.

  5. According to Microsoft, this extra barrier and layer of security “makes it incredibly difficult for attackers to get past as MFA can block over 99.9 percent of account compromise attacks.”

SJSU has implemented Multi-factor Authentication to protect IT services used by:

  • Students
  • Faculty
  • Staff
  • Applicants
  • Faculty and Staff Emeriti

What You Need to Do

If you choose to authenticate with the Duo Mobile App on your Apple or Android smartphone, set-up is a self-service process. At your next one.SJSU login, a series of prompts will guide you through the Duo Mobile enrollment process.

If you choose to authenticate with a hardware token (key fob), the IT Service Desk will let you know when your hardware token is ready to be picked up. After your hardware token has been activated and issued to you, you will be prompted at each login to enter the special security code provided by your hardware token.

You can learn more about setting up Duo Mobile.

Additional Resources


Login support is provided by the IT Service Desk. You may:
Because login and MFA are security services, the IT Service Desk must confirm your identity before providing assistance.