Login Guide for First-Time Users

To ensure the security of your digital information, SJSU uses Duo Multi-Factor Authentication (MFA). There are two required procedures and two optional procedures for your SJSU account activation and setup of Duo MFA:

• Set Up Your SJSUOne Password for the First Time (Required)
• Set Up Duo Mobile MFA (Required)
• Set Up Recovery with Duo Restore (Optional)
• Enable Auto-Push for MFA (Optional)

1. Go to the SJSUOne Password Set/Reset page
2. Enter your nine-digit SJSU ID.
3. Read and accept the CSU Responsible Use Policy [pdf]
4. Click Continue.
5. Choose one of the following methods to verify your identity:
   • Provide your birth date and the last four digits of your SSN
   • Send a reset link to your email address
6. Click Continue.
7. Enter your new password.
   Passwords should adhere to the following requirements:
   
   • • Passwords must be between 15 - 64 characters
     • Capital letters, numbers, spaces, and special characters are optional
     • Do not use your name, SJSU ID, date of birth, any part of your SSN, SJSU-specific terms, or keywords associated with the university
     • Do not use common words

You will receive a prompt notifying you that your password has been successfully changed.

Note: If you do not have a smartphone or do not want to install DUO on your phone, you may contact the IT Service Desk (408-924-1530) to request a hardware token (key fob). Requesting a key fob will take more time than the self-service Duo Mobile app activation process.

IMPORTANT: To set up two-factor authentication with DUO, you will need two devices -- one to show a QR code and one to scan the QR code.

1. Go to The Spartan App Portal at One.SJSU
2. Click the "Sign In" button on the top right side of the screen under the search bar
   
3. Enter your SJSU ID and password on the SJSU Single-Sign On page
4. Click "Sign In" at the bottom of the page
   
5. Click "Set Up" at the end of the prompt titled "Set up security methods", then click the "Enroll" button on the following prompt.
   
6. After that is an options menu for authentications. We recommend installation of "Duo Mobile", the mobile phone app with the green icon.
   
7. The prompt will then ask for some information on your phone, including the complete phone number.
   
8. If setting up on a mobile device, tap the "Continue" button and open the link to proceed to the app.
   
9. If logging in on a desktop or laptop, scan the QR code with the Duo Mobile app, then open the link. Remember to use the Duo Mobile app for this step, and to adjust permission for use of the camera where necessary.
   
10. If the account setup is good, there should be a screen setting an account name. The default account name is "San Jose State University".
    
11. Go back to the setup prompt in your browser and select the "Continue" button to proceed with logging in.
    
12. Follow the Duo Universal Prompt to complete your login. "Send me a Push" brings up a yes-or-no prompt within the app, while "Enter a Passcode" uses the six-digit passcode displayed in your app account listing.
    

When you complete your Duo Mobile enrollment: You will be prompted by OKTA to provide a security question and a secondary email.
Choose a security question from the drop down menu, or make your own question then provide an answer.

The secondary email should match the email you used when you applied. If you need to update your secondary email, you must first complete all OKTA steps.
Click “Create Account.” You will be able to access MySJSU.

For instructions on changing  your secondary email, see Set My Preferred Email Address

Congratulations! 

You are now enrolled in DUO two-factor authentication and your SJSUOne ID account is fully activated.

This procedure is optional but recommended to ensure that you maintain access to your SJSU account if you get a new device or need to reset your device to factory settings.

• If you have an iPhone or iPad, Duo uses iCloud Backup and iCloud Keychain to back up your Duo Mobile app and restore it when you set up a new phone. Please ensure your phone is backing up to iCloud so you can restore to a new phone without losing your Duo Mobile.
  
• Android phones and tablets need to enable Duo Restore in the Duo Mobile app. When choosing a Google Account to back up to, choose the personal Google Account you used to activate your phone when you purchased it. When installing on a new phone set up with the same personal Google Account, you can choose to restore your Duo settings from that account.

You can streamline your multi-factor authentication process when logging in by enabling auto-push to automatically prompt you to authenticate using your method of choice via the Duo Mobile app.

This procedure is optional.

To enable auto-push:

1. Visit the Multi-Factor Authentication Profile page.
2. Enter your SJSU ID and password and click Login.
3. Before authenticating with MFA, select Settings > My Settings & Devices.
   
4. Complete multi-factor authentication as normal.
5. Under Default Device, select your default device from the drop-down list.
6. Under When I log in, select Automatically send this device a Duo Push.
   
7. Click Save.

NOTE: To turn off auto-push for MFA, select Ask me to choose an authentication method.

• Do I need a smartphone to use Duo?
  • If you don't have a smart device or tablet, your smartphone is too old (iOS 13 and older or Android 8 and older), or you would prefer not to use your personal smartphone with the Duo Mobile app, you may request a hardware token (key fob) to use instead. 
    
    The Duo Mobile App can be installed on iOS or Android tablets
• I did not get a “push” request from Duo on my phone . How do I get in?

  • If you request a “push” notification and it doesn’t pop up on your phone, Try these steps:
    Check your phone to ensure it has a good cellular data connection. If it doesn't, and there's Wi-Fi available, connect your phone to WiFi.
    
    Open the Duo Mobile app on your phone. Opening the Duo Mobile app on your phone will cause the app to collect any outstanding requests, and still let you tap to validate.
    
    If your computer has a wired network connection, but your phone has no data connection, you can still use the "enter a passcode" option. Open the Duo Mobile app on your phone and tap the "key" icon to generate a passcode.

• What do I do if I get a Duo push notification when I'm not trying to log in?

  • Tap the big red "Deny" button. This will notify us that someone is trying to get into your account and that someone isn't you.

• What is the "Duo Restore" option in the Duo Mobile Android app?

  • Duo Restore allows you to save your Duo Mobile app settings to your personal Google Drive. Visit Guide to the Duo Restore feature for Duo Mobile account recovery for more information on how to back up your Android Duo Mobile app.

• I have a new phone, and need to set up Duo on it. How can I do that?
  • If you restore your iPhone’s backup to your new phone, your Duo will automatically be set up. For this to work, your phone must be backing itself up to iCloud Backup.
    
    Android phones back up to your personal Google Drive using Duo Restore. To restore your Duo Mobile app, please see Duo’s Guide to the Duo Restore feature for Duo Mobile account recovery
    
    If you still have your old phone and can connect it to Wi-Fi, it is still a valid Duo Mobile push device. You can still use it to authenticate to the Duo "device management" page during login. From there, you can manage your devices and add a new phone.
    
    If for any reason you are unable to complete a self-service transfer, contact the IT Service Desk at 408-924-1530, or visit them on the first floor of Clark Hall. After they have confirmed your identity, they will delete your old device from Duo so you can enroll your new device.
• I forgot my phone or key fob at home. How can I get in?
  • Contact the IT Service Desk. After they have confirmed your identity, the service technician will provide you with a "bypass code" good for 8 hours.
• My key fob stopped creating passcodes. What do I do?
  • Bring your failed key fob to the IT Service Desk on the first floor of Clark Hall. After they have confirmed your identity, they will replace it with a new one.

• Schedule a Zoom support session with a Service Desk technician
• Call the Service Desk during our business hours at (408) 924-1530
• Visit the Service Desk on the first floor of Clark Hall (room 102)