Multi-factor authentication (MFA) requires something you know (your UMID password) and something you have (like a smartphone or tablet app, or a mobile phone or landline phone) as an added layer of security to prevent anyone else from accessing your account. Multi-factor authentication is one of the most effective methods to prevent phishing, helping to protect you and the UMB community. Duo is the multi-factor authentication solution at UMB.

Passwords are essential for security and privacy, but they are often not enough. They can often be stolen, guessed, and hacked — you might not even know who else has your password and is accessing your account. Multi-factor authentication adds a second layer of security to your account to make sure that it stays safe, even if someone else knows your password, by using your phone or other device to verify your identity. You will be alerted right away (on your phone — mobile or landline — or tablet) if someone tries to log in using your password. This prevents anyone but you from accessing your accounts.

• All faculty, staff, and students are required to use Duo to access MFA-protected applications. 
• Affiliates who are highly-privileged users of eUMB, SIMS/Banner, and ImageNow are required to use Duo. 
• All VPN groups are required to use Duo to login to the VPN.
• All users who access https://portal.office.com from off-campus are required to use Duo.

The Duo Mobile app is required. You can find details about the Duo enrollment process here: www.umaryland.edu/cits/services/duo/enrollment/.

For step by step instructions, view DUO – Registering a New Device.

You can use a landline or a tablet. Duo also lets you link multiple devices to your account, so you can use your mobile phone, a landline, and/or a tablet. We suggest that you enroll more than one device for redundancy in the event that a device is lost or unavailable.

If none of these options is available to you, you can be issued a hardware token, or "fob." Please coordinate with your local school or department IT team for approval:

• Central Administration - IT Help Desk
• HS/HSL — M.J. Tooey
• School of Dentistry — Kent Buckingham
• School of Law — Mike Green
• School of Medicine — Scott Stefan
• FPI — Tia Stokes
• School of Nursing — IT Help Desk
• School of Pharmacy — Tim Munn
• School of Social Work — David Pitts

If your account has been enabled to use Duo as the second factor, you will log in to the system as you usually do.  You will then be prompted to enter the second factor.

You will be prompted to select which Device you wish to use (Android, token, etc.) and to choose an Authentication Method (Duo Push, Call Me, etc.) depending on the device and method:

• Duo Push: Duo will send a notification to the Duo app on your mobile device. You will then select Approve and Confirm.
• Call Me: Duo will call the phone number and ask you to confirm or deny your identity.
• Passcode: For more information on passcodes, visit here: www.umaryland.edu/cits/services/duo/faq/bypass-codes-and-SMS/.

Below the list of authentication methods is a check box labeled "Remember me for 7 days." Select the check box if you want that device to be remembered for 7 days.

Here is the Duo login as seen in a Shibboleth-protected system, like the myUMB Portal:

Here is the Duo login in Office 365, via https://portal.office.com, for a user who has not yet set up Duo. 

Clicking on Start Setup will step you through the Enrollment process, described in greater detail here: www.umaryland.edu/cits/services/duo/enrollment/

Here is the Duo login in Office 365 for a user who has already set up Duo:

The VPN client will prompt all users for Group, Username, Password, and Second Password. Options for Second Password include:

1. push
   • this sends a DUO confirmation request to the DUO Mobile app on your phone or tablet
2. passcode
   • enter the passcode generated on the DUO Mobile app or hardware token
3. visit www.umaryland.edu/cits/services/duo/faq/no-duo-mobile-and-VPN/ for alternatives to the DUO Mobile app

To change the device settings for your DUO account, or to set up your DUO account for the first time, log in to https://directory.umaryland.edu and click on Multi-Factor Authentication.

‌

Here is a short video that shows how to register for and use Duo: http://cfapps.umaryland.edu/ondemandtraining/duointro02/duointro02.html.

‌

If you get a new phone, you will need to reactivate Duo Mobile. This can be done through our Account Management site. When accessing the portal, you will need to complete the two-factor authentication process. If you have a second device, you can use it to authorize. Otherwise, you will need to choose the option to have Duo call your phone before you can reactivate Duo mobile.

Contact the Help Desk via email or call 410-706-4357 immediately if you lose your phone or suspect that it has been stolen. The device will be disabled for authentication and you will be assisted in enrolling another phone/device.

While it is important that you contact the Help Desk if you lose your phone, remember that your password will still protect your account.

It is important to enroll more than one device (such as a smartphone and desk phone) in MFA to avoid difficulties authenticating if you lose or don’t have your only enrolled device with you.

To add a backup device, follow the procedures listed here - www.umaryland.edu/cits/services/duo/existing-user/.

We recommend that you have two devices registered with Duo in case one device is unavailable. In the event that you can't access your account due to your device(s) being unavailable, please contact the IT Help Desk via email or at 410-706-4357 for a temporary bypass code to allow access to your accounts.

You will have six chances to authenticate a request. After the sixth chance, your multi-factor account will be locked and you will not be able to access the system you are attempting to log into.

Your multi-factor account will automatically unlock after 10 minutes. If you continue to have issues, you will need to contact the Help Desk via email or 410-706-4357 for assistance with your account.

Deny the request and report the incident to the Help Desk immediately via email or by calling 410-706-4357.

If you travel internationally and need access to resources protected by Duo, you may wish to use a passcode as your two-step verification method. Using the Duo Mobile app (available for smartphones or tablets), you can generate authentication codes even if you don't have an internet, Wi-Fi, or cellular connection.

To generate a passcode using the Duo Mobile app, simply launch the app, then click on the key icon next to University of Maryland, Baltimore.

Then enter the displayed code when prompted for Second Password, or Enter Passcode.

You can find additional information on Passcodes here: www.umaryland.edu/cits/services/duo/faq/bypass-codes-and-SMS/.

Please note that if you're traveling internationally (or have an international phone number) and are using SMS, or text messages, as your method of two-step verification, you may be subject to your carrier's roaming charges for SMS messages. Use of SMS is not recommended for international travelers.

If you cannot use the Duo Mobile app on your smart phone or tablet now - because your phone is broken, the battery is dead, the phone is not with you, the app was uninstalled, etc. the ability to generate a bypass code is available.

• From any browser, use this link. 
• In the UMID field, enter your UMID.
• On the next screen, enter your password.
• Click Submit
• The UMB Account Management page will appear. In the Setup your: menu to the left, select Multi Factor Authentication (Duo).
• The Duo Self Service page will appear:
• Click Generate Bypass Code.
• You will be asked to identify yourself by entering your date of birth and either the last 4 digits of your SSN or a UMB PIN.
• Click Submit.
• The Duo bypass code will appear. It will be valid for 10 minutes. Either write the code down or highlight the code by selecting Ctrl + C to copy it.

To use the code:

• When signing into an application requiring MFA, on the Choose an authentication method screen, click Enter a Passcode.
  
  • You can instead select My Settings and Devices to either add a landline or another smartphone if desired.
• Enter the provided passcode and then click Log In.

NOTE:  Generating a bypass code is meant to be typically a temporary solution. If you need a permanent solution because you do not have a smartphone or it is not available, please contact the Help Desk at 6-4357 for additional assistance and information on other alternatives.

If you cannot use the Duo Mobile app on your smart phone or tablet now or in the future - because you do not have a smart phone or cannot install the Duo Mobile app for some other reason, etc. - please call the Help Desk, at 706-4357.

We can issue you a temporary passcode so you can access your account and add another device, like a landline, or temporary mobile phone.

We can help you to setup one or more landlines so Duo can call your desk phone, home phone, mobile phone, etc.

We can also help you to determine whether a hardware token or "key fob" is a possible solution for you.

You can use the Duo Mobile app to generate a bypass code on your smartphone or tablet.

Simply launch the Duo Mobile app, then click on the key icon next to University of Maryland, Baltimore.

Then enter the displayed code when prompted for Second Password, or Enter Passcode.

You can receive a bypass code via SMS, or text messaging.

If you are logging in through Duo in a web browser, click on "Enter a Passcode."

Then click on "Text me new codes" at the bottom of the screen.

You will then receive a bypass code via SMS at the selected device.

If you are using the VPN client, enter "SMS" in the "Second Password" or "Enter DUO Key ..." field:

‌‌ or

If you have more than one device capable of receiving SMS or text messages enrolled with Duo:

• Enter SMS1 to send to the first device.
• Enter SMS2 to send to the second device.
• Enter SMS3 to send to the third device.

You can determine which phone is SMS1, SMS2 or SMS3 by logging in at https://directory.umaryland.edu, clicking on Multi-Factor Authentication, then clicking on My Settings and Devices.

 Or you can call the Help Desk at 706-4357 for assistance.

*Depending on your service provider and contract, SMS fees may apply.

All MFA-protected applications, including myUMB Portal, Quantum, SIMS/Banner, ImageNow, and VPN require Duo.

No. Two-factor authentication adds a second layer of security to our online accounts. In an effort to keep your personal account information secure, we are requiring two-factor authentication on selected services.

Duo will never ask for your user ID and password. If you receive such a request, do not respond.

To learn about Duo’s accessibility features, please visit Duo Accessibility.

Below the list of authentication methods is a check box labeled "Remember me for 7 days." Select the check box if you want that device to be remembered for 7 days.

This is a browser-specific setting, so your Duo connection is only remembered within that browser.  If you use a different browser to connect to another Duo-protected system, you will need to authenticate with Duo again.

This checkbox is based on a cookie; if you check the box, it will remain until the cookies are cleared on that browser. Once the cookies are cleared, the checkbox is cleared and you will need to authenticate with Duo again.

If Duo Mobile on your smartphone is not an option for you, you can be issued a hardware token, or "key fob."

When prompted for your Second Password, or Enter Passcode, simply press the button on the fob, then enter the passcode displayed.

Please coordinate with your local school or department IT team for approval:

• Central Administration - IT Help Desk
• HS/HSL — M.J. Tooey
• School of Dentistry — Kent Buckingham
• School of Law — Mike Green
• School of Medicine — Scott Stefan
• FPI — Tia Stokes
• School of Nursing — IT Help Desk
• School of Pharmacy — Tim Munn
• School of Social Work — David Pitts