What Is Multi-Factor Authentication?
Multi-factor authentication or MFA (also known as two-factor authentication or 2FA) adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.
What is Duo?
Duo is the district’s primary multi-factor authentication implementation. You can read more about Duo here or see what data we share with Duo on Codex. If you need to set up Duo to sign into services in the district, refer to our Enrollment Guide.
How it Works
- Enter username and password as usual
- Use your phone to verify your identity
- Securely logged in
Once you’ve enrolled in Duo you’re ready to go: You’ll login as usual with your username and password, and then use your device to verify that it’s you.
Why Do I Need This?
Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account.
Multi-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you’ll be alerted right away (on your phone) if someone is trying to log in as you.
This additional factor of authentication is separate and independent from your username and password — Duo never sees your password.
Frequently Asked Questions
What happens if I lose my device with Duo installed on it?
- See the Duo – Lost or Misplaced Devices article.
What happens when I get a new device?
- See the Duo – Add or Manage Devices article.
Is there a difference in using Duo on-site and off-site? Why am I not being prompted to authenticate via Duo when I am on the district network?
- Duo allows for Adaptive Authentication. This means that when you are logging into most applications while on the district network (SVVSD or a wired connection), you will not be prompted for MFA.
What if I don’t accept the Duo invitation on time?
- Follow the enrollment guide at your next login to a Duo enabled application.
Can I access resources (like Infinite Campus) from outside of the district?
- Yes, you will be able to access web applications outside of the district, but you will need to use Duo MFA to verify your login.
How often/where will I be prompted to provide two factor authentication?
- When on site and using the district network, you should not be prompted for MFA for most applications.
- When you are off-network you will be prompted at every login.
- Applications that contain more sensitive data such as Infinite Campus will prompt for Duo MFA both on and off the district network.
Can I use a personal device for the Duo Mobile App?
- Yes, personal devices can install and leverage the Duo Mobile application for MFA. The Duo mobile application is available for Android and iOS devices.
Is the Duo Mobile App Required?
Who is required to use two-factor authentication?
- Duo MFA is being phased in for most SVVSD staff. DTS and your department supervisor will communicate with you about your department’s implementation date and which users in your department will be required to use MFA.
Can I install the Duo Mobile app on multiple devices?
- Yes. You are encouraged to install Duo Mobile on more than one device.
Can I use my district iPad for Duo Mobile?
- Yes, the Duo Mobile app will be available for all users through Self Service or can be installed from the App Store.
Do I have to have a screen lock on my device?
- Yes, you must have a passcode or biometric authentication (Touch ID or Face ID) on your device for it to work with Duo.
What if I don’t want to install the Duo Mobile app on my smartphone? What if I don’t have a device that is compatible with Duo Mobile?
- The Duo Mobile app provides the most user-friendly experience and is strongly recommended as the best option for MFA. If you are unable to use a Duo Mobile compatible device like an iPad or smartphone, contact your supervisor.
Does installing Duo on my personal device allow the district to review the content on my device?
- No. Duo Mobile cannot access things like your contacts, photos, text messages, and emails. Duo Mobile may request permission for certain features on your phone to make the service easy to use:
- Permission to Send Push Notifications to send you a login request to approve or deny, or to alert you to a security issue we detect on your device. You can deny this permission, but you will have to manually go into Duo Mobile to approve or deny a login request each time you login.
- Camera Access for Duo Mobile to use your camera to scan QR codes that are used to quickly add multi-factor authentication accounts. You can deny this permission, but without this access you will have to type a long, alphanumeric “MFA secret” key to get your account working. Duo Mobile will never access your photos and will only use your camera when you are scanning a QR code.
Does using Duo on my device make my personal device subject to public records requests under CORA?
- Because no public records relevant data is submitted through Duo, using Duo on a personal device will not make that device subject to a public records request.
What do I do if I am a supervisor with an employee who doesn’t have a compatible Duo Mobile device?
- Contact DTS to purchase a hardware token for your employee. Hardware tokens are $35 per user and are not able to be reissued once assigned. Hardware tokens will need to be repurchased every 2 years.
Can I opt out of using Duo?
- No, Duo is required to access St Vrain resources.
I’m already set up with Duo for another organization. Can I set up Duo for both groups?
- Yes, you are able to add multiple accounts to the Duo app as well as personal resources that support MFA.
What do I do if I get a notification from Duo that didn’t come from me?
- Use the DENY option in the Duo app. Contact the DTS Help Desk immediately at x57730 or [email protected]
Will my mobile apps require two factor authentication every time I use the app?
- Applications like Gmail, Google Calendar, etc will require MFA authentication on the initial login and following any log out from the application.
I am in a location without cell service. How can I authenticate using Duo?
- Generate a passcode in the Duo Mobile app by tapping the key icon. The passcode will appear underneath. Then log into the application using the passcode as your Duo method.
What devices are supported by Duo Mobile?
- iOS (iPhone and iPad) running the latest iOS
- Apple Watch
- Android running the latest iOS
- Hardware tokens purchased by your department from DTS
- Duo – How to Use with Single Sign On
- Duo – Enrollment Guide
- Duo – Add or Manage Devices
- Duo – Lost or Misplaced Devices
- Duo – Using Duo With a Hardware Token
Curator: Patrick Coniway