Multi-Factor Authentication

Two-Factor Authentication (MFA) adds a second layer of security to your SJSUOne account. SJSU has licensed Duo MFA for the entire SJSU community including staff, faculty, students, applicants, and alumni. All members of the SJSU community are required to use Duo MFA when accessing apps at SJSUOne. You can learn more about Duo MFA at https://guide.duo.com/.

Setting up Duo MFA

If you choose to authenticate with the Duo Mobile App on your Apple or Android smartphone, set-up is a self-service process. At your next one.SJSU login, a series of prompts will guide you through the Duo Mobile enrollment process.

If you choose to authenticate with a hardware token (key fob), the IT Service Desk will let you know when your hardware token is ready to be picked up. After your hardware token has been activated and issued to you, you will be prompted at each login to enter the special security code provided by your hardware token.

Enable/Disable Auto-Push for MFA

Would you like to speed up your login time with multi-factor authentication? Turn on auto-push to automatically be prompted by the authentication method of your choice in the Duo Mobile app.

To turn on auto-push, follow the steps listed below:

1. Visit the Multi-Factor Authentication Profile page.
2. Enter your SJSU ID and password in the username and password fields. Click Login.
3. Before Authenticating with MFA, Click My Settings & Devices under Settings.

Devices and Settings

4. Then complete your multi-factor authentication.
5. Under Default Device, select your default device from the drop-down menu.
6. Under When I log in, select the Automatically send this device a Duo Push option.
Autotomatically Send Push

7. Click Save.

Additional Resources

Duo's Guide to Two-Factor Authentication.
Duo's YouTube Channel. Stock full of instructional videos on how to take advantage of Duo MFA

Cost

There is no cost to campus community members.

Using the smartphone app factor is covered by the CSU master license.

Hardware tokens (key fobs) are purchased by SJSU and provided to you. Replacements are available for broken or lost fobs.

Support

Contact the IT Service Desk at 408-924-1530.

Because Duo MFA is a security service, the IT Service Desk must confirm your identity before providing assistance.

Frequently Asked Questions

Do I need a smartphone to use Duo?
- If you don't have a smart device or tablet, your smartphone is too old (iOS 13 and older or Android 8 and older), or you would prefer not to use your personal smartphone with the Duo Mobile app, you may request a hardware token (key fob) to use instead.
  
  The Duo Mobile App can be installed on iOS or Android tablets
I did not get a “push” request from Duo on my phone . How do I get in?
- If you request a “push” notification and it doesn’t pop up on your phone, Try these steps:
  Check your phone to ensure it has a good cellular data connection. If it doesn't, and there's Wi-Fi available, connect your phone to WiFi.
  
  Open the Duo Mobile app on your phone. Opening the Duo Mobile app on your phone will cause the app to collect any outstanding requests, and still let you tap to validate.
  
  If your computer has a wired network connection, but your phone has no data connection, you can still use the "enter a passcode" option. Open the Duo Mobile app on your phone and tap the "key" icon to generate a passcode.
What do I do if I get a Duo push notification when I'm not trying to log in?
- Tap the big red "Deny" button. This will notify us that someone is trying to get into your account and that someone isn't you.
What is the "Duo Restore" option in the Duo Mobile Android app?
- Duo Restore allows you to save your Duo Mobile app settings to your personal Google Drive. Visit Guide to the Duo Restore feature for Duo Mobile account recovery for more information on how to back up your Android Duo Mobile app.
I have a new phone, and need to set up Duo on it. How can I do that?
- If you restore your iPhone’s backup to your new phone, your Duo will automatically be set up. For this to work, your phone must be backing itself up to iCloud Backup.
  
  Android phones back up to your personal Google Drive using Duo Restore. To restore your Duo Mobile app, please see Duo’s Guide to the Duo Restore feature for Duo Mobile account recovery
  
  If you still have your old phone and can connect it to Wi-Fi, it is still a valid Duo Mobile push device. You can still use it to authenticate to the Duo "device management" page during login. From there, you can manage your devices and add a new phone.
  
  If for any reason you are unable to complete a self-service transfer, contact the IT Service Desk at 408-924-1530, or visit them on the first floor of Clark Hall. After they have confirmed your identity, they will delete your old device from Duo so you can enroll your new device.
I forgot my phone or key fob at home. How can I get in?
- Contact the IT Service Desk. After they have confirmed your identity, the service technician will provide you with a "bypass code" good for 8 hours.
My key fob stopped creating passcodes. What do I do?
- Bring your failed key fob to the IT Service Desk on the first floor of Clark Hall. After they have confirmed your identity, they will replace it with a new one.