What is DUO?
Duo Security two-factor authentication (2FA)
Information Technology Services (ITS) implemented a necessary service to help improve the security of information at RISD.
ITS incorporated Duo Security as a two-factor authentication (2FA) solution for most faculty and staff when accessing Workday. Consider for a moment all the personal information (e.g. W2, pay slips, benefits and much more) stored in Workday. We need to take the necessary precautions to protect you, your personal information, as well as the institution. It is now necessary for us to enable Duo 2FA for additional services in order to retain full coverage under our current Cyber Security insurance agreement.
Why do we need two-factor authentication (2FA)?
Login credentials are more valuable than ever and are increasingly easy to compromise. Over 90% of breaches today involve compromised usernames and passwords. Passwords alone are no longer secure enough. 2FA is necessary.
What is 2FA?
Two-factor authentication enhances the security of your account by using a secondary device to verify your identity (e.g. mobile, landline, hardware token, etc.). This will prevent anyone from accessing your account, even if they know your password.
What is 2FA - video
Who/What is Duo Security?
Duo Security is a company that provides a cloud-based software service that utilizes 2FA to ensure secure access to services and data. Learn more by clicking here.
Will 2FA be implemented for additional services?
RISD will soon be expanding the use of Duo to include students and cover services like Google Workspace and Global Protect VPN (our Virtual Private Network software).
How do I enroll in Duo?
Please see Duo Security's instructions: https://guide.duo.com/enrollment *Instructions now available in several languages!*
Minimum requirements for all devices
Duo has minimum requirements to ensure that devices used to connect to the service and authenticate are secure. To avoid service disruptions make sure your devices are kept up to date with the most current operating system unless otherwise notified by ITS to delay a specific upgrade. **This includes both devices: the device you are using to access RISD services (computer, mobile phone, tablet) AND the device used for Duo two-factor authentication (mobile phone or tablet). The requirements are posted on our Minimum Requirements page. Devices that do not meet the minimum requirements will not be allowed to authenticate through Duo 2FA or access services protected under Duo (example: Workday).
Any further questions or concerns?
Please visit our Duo FAQs page for more information.