Skip to end of metadata
Go to start of metadata

Obtaining and using MFA for the first time

If you've never used MFA before, you will first need to choose between using your phone and a "token" as your second factor.

These are instructions for setting up MFA for the first time. If you already have MFA set up and you need instructions on how to use it, please proceed to the following sections/pages. 

Tip: Most people will want to use their phone as their second factor, as it is the most convenient option.

 Click here to use your phone as the second factor

Using your phone as the second factor

First, you will need to download and install DuoMobile for your Android or iPhone Device

Second, you will need to enroll for multi-factor authentication using DuoMobile

NOTE: This process requires the use of both your computer and the device you plan to enroll. To start, use the computer and not the device you are trying to enroll.

1. On the computer, go to the UMD Multi-factor Authentication Self-Enrollment portal and click Enroll now!

Enroll in UMD MFA


2. You will be prompted with the University of Maryland CAS Login Screen. Enter your university Directory ID and Password. 
CAS login


3.The Two-Factor Authentication window opens. Click Start setup
Click Start setup


4. On the new window, select the type of device you are registering and click Continue.
Device registering


5. On the next window, select the country and enter your device phone number. Use the number of your mobile device when you're logging in.


6. After double-checking you entered it correctly, check the box and click Continue


7. Choose the operating system that your mobile device runs and click Continue.
Choose the OS


8. If you have not already installed the Duo Mobile app, do so now, or click I have Duo Mobile installed. 
Install Duo Mobile


9. Activate Duo Mobile by scanning the bar code on the computer screen with the built-in bar code scanner that was downloaded with Duo Mobile on your device. A green check will appear over the bar code on the computer. Click Continue.
Activate Duo Mobile

 

 Click here if you cannot scan the barcode

When prompted to scan the barcode with the Duo Mobile app, click Can't scan the barcode? then click Continue.



You will be prompted to enter an email address. Enter the address of an email account you can access using your smartphone or tablet and click Send Email.
Enter email address

An email will be sent to you with an activation link. Open the email on your smartphone and tablet and click on the link. This will activate your Duo Mobile account.

 

10. Enrollment is now complete. You may choose to enroll additional devices, or simply click Done. For systems you have been granted access to or normally use, you can now sign-in using multi-factor authentication.

Click Done

If you have successfully configured your phone, you do not need to configure a token as a second factor. You can proceed to the instructions on Using MFA to log-in after setup.

 Click here to use a token as your second factor

Using a token as your second factor

A hardware token is a small "key fob" device that will be used to generate passcodes at the press of a button. Hardware tokens must be registered before use. 

Image result for hardware token

First, you will need to acquire a token

1. Notify your department business manager or purchasing agent of your need for a token. 

2. The department business manager or purchasing agent will email the Terrapin Technology Store (terpstore@umd.edu) to request a quote for the number of tokens needed. 

3. The Terrapin Technology Store will provide a price quote and delivery options to the department business manager or purchasing agent. 

4. The department business manager or purchasing agent will provide a Kuali Financial System (KFS) number for payment and will select a delivery option. 

5. The Terrapin Technology Store will confirm the purchase and provide a tracking number for the shipment. 

6. Hardware Token(s) will be delivered to the Terrapin Technology Store. 

7. The Hardware Token(s) is picked up or delivered as decided in step 4.

Second, you will need to register your token

1. To register your hardware token, visit the Multi-Factor Authentication portal or click Register Token on the right of the catalog entry page.

Multi-factor authentication at UMD

2. The Central Authentication Service window will open. Enter your university Directory ID and Password. Click Login.

Central Authentication Service  

NOTE:
 If you have already registered a device for MFA, you will need to use it to complete the authentication using Duo Push or by generating a passcode with your Duo Mobile app and pressing Log In. Otherwise, proceed to the next step.

UMD Multi-factor Authentication Self-Enrollment Page

3. Enter the serial number found on the back of your hardware token above the barcode into the Serial Number field.

NOTE: Serial numbers for hardware tokens commonly begin with DSEC prefix.

4. Choose the brand of token found on the front of your token from the Brand drop down menu.

NOTE: The hardware token brand will be either DUO or Gemalto.

5. Click Register Hardware Token.

6. You will receive a message indicating that the hardware token has been successfully registered. If you encounter errors, contact the Call Center at 301.405.1500.

7. You may now use the six (6)-digit passcode generated by the token to authenticate into MFA protected systems.

If you have successfully configured the token, you do not need to configure your phone as a second factor. You can proceed to the instructions on Using MFA to log-in after setup.

  • No labels