Protecting your Lafayette NetID with Two-Step Login

1. Browse to an application that uses SSO, such as webmail.lafayette.edu.
2. After authenticating with your Lafayette NetID and password, a two-step login frame will prompt you to enroll. Click the “Start setup” button.
3. Select the type of device you are adding. ITS recommends you register at least two devices, including a mobile phone and, as a backup, your office landline. Select “Mobile phone” and click the “Continue” button.
4. Enter your phone number. Make sure it is correct by clicking the checkbox. Click the “Continue” button.
5. Verify ownership by receiving a call or a text at the number you just entered. You will be given a 6-digit code.
6. Enter the code you received by call or text and click “Verify”.
7. Make sure the green check mark appears, then click “Continue”.
8. You will now see your phone added Under “My Settings & Devices”. The default “When I log in” setting of “Ask me to choose an authentication method” allows you to select a device and authentication method for each login. This is recommended because it will provide you with an option when you do not have access to your default device. From here, you can click on “Add another device” or “Continue to Login” to go to the service you were trying to access.
   
9. Clicking on “Continue to Login” will show a green “Enrollment successful” bar. Checking “Remember me for 30 days” allows you to skip the second step for 30 days on a trusted device. To proceed with logging in to the service, choose an authentication method.
10. To use Duo Push and generate passcodes with your mobile phone, install the Duo Mobile app.

Installing Duo Mobile on your smartphone enables you to use Push, an easy method for two-step login. Push notifications are sent to the Duo Mobile and you simply touch the screen to approve requests. Duo Mobile also generates passcodes and without needing a cell or wifi signal. You can easily install the Duo Mobile on your smartphone or tablet and activate it using a QR code. This guide also covers reactivating Duo Mobile.

1. Browse to an application that uses SSO, such as webmail.lafayette.edu.
2. After authenticating with your Lafayette NetID and password, the two-step login frame will display. Click on “My Settings & Devices” in the left menu.
3. To access your settings, you’ll need to first authenticate using two-step login. If you have “Remember me for 30 days” checked, or something other than the default “When I log in” setting of “Ask me to choose an authentication method”, you will need to open a new Private (in Firefox) or Incognito (in Chrome) in your browser to get to this screen. After authenticating, click on “Device Options” next to your mobile number.
4. Click on the blue “Activate Duo Mobile” button. If you are re-activating Duo Mobile because of an OS update or getting a new phone, you will see the “Reactivate Duo Mobile” button.
5. Select the radio button for the type of phone you have.
6. Download Duo Mobile to your phone through Google Play or the Apple App Store.
7. Scroll down and click the green “I have Duo Mobile Installed” button.
8. Open the app on your phone, tap the “+” button, and move your phone’s camera over the QR code to scan it. You may need to scroll down to see the code.
9. When it scans successfully, a green check mark will appear over the QR code. An entry for Lafayette College will show in Duo Mobile.
10. Scroll down and click the green “Continue” button. You will be returned to “My Settings & Devices”.

Activate Duo Mobile using an email address instead of a QR code

You can activate Duo Mobile using email instead of scanning a QR code. To do this, you need to be able to access an email account from the same device where the mobile app is installed. First, follow steps 1. through 7. above.

8. Instead of scanning the QR code, click the “Or, have an activation link emailed to you instead.” link.
9. Enter a valid email address for an account you can access from your mobile phone.
10. A blue bar will appear instructing you to click on the link in the email.
11. Click the emailed link and open a window in either a browser or the app. This will add an account to the app. Click the green “Continue” button to be returned to “My Settings & Devices”.
12. “Send Me a Push” will appear as an authentication method. Click on it and then open Duo Mobile on your phone. Touch the green “Request waiting. Tap to respond … “ bar, then the green “Approve” button.

1. Browse to an application that uses SSO, such as my.lafayette.edu.
   
2. Select “Add a new device” from the menu on the left.
3. Select the U2F token radio button and click “Continue”.
4. A pop-up window will open. If it does not, check your browser settings to make sure that pop-ups are not being blocked.
5. Next, insert your YubiKey. It is important that you do not click off of the pop-up when you insert your token. If you do, you will have to close the pop-up and open a new one for it to recognize the key. The pop-up will open and prompt you to insert the U2F token and as long as the token flashes while being inserted, you can tap it to authenticate.
6. A green check mark will show up showing success.
7. You will now see the U2F token in the list of devices in “My Settings & Devices”.
8. Now when attempting to login in, if a U2F token is present and plugged in, you will see a blue alert pop-up and tell you “Use your U2F token to login.”
9. Once you tap the U2F key, the alert will change to green and tell you “Success! Logging you in…”.

1. After entering your Lafayette credentials, check “Remember me for 30 days” and click the appropriate green button for your authentication method (e.g., Send Me a Push, Call Me).
2. If the checkbox is greyed out and you automatically received an authentication request, click [Cancel]. It means you had chosen a method for your “When I log in” setting other than the default of “Ask me to choose an authentication method”. Continue by following step 1 above.

You can use Duo Mobile with the passcode method of authentication on your cell phone or tablet without wifi or a cell signal. To generate a passcode, click the key or arrow icon next to your account in Duo Mobile. In the two-step login frame in your browser, click the green “Enter a Passcode” button, enter the code from your mobile device, then click “Log In”.

You can also text yourself SMS passcodes to keep with you in case you do not have access to any of your devices. They are especially useful when travelling abroad. SMS codes are one-time use only and sent in groups of ten. To use them, click on the green “Enter a Passcode” button in the two-step login frame in your browser. Then click on “Text me new codes” in the blue bar. Each time you use the passcode method for two-step login, the first digit of the next code in the series will be shown in the blue bar.

1. Browse to an application that uses SSO, such as my.lafayette.edu.
   
2. Select “Add a new device” from the menu on the left.
3. Select the Landline (or another) device type and click the green “Continue” button.
4. Enter your phone number and make sure the box is checked confirming it is correct. Click the green “Continue” button.
5. Click the “Call me” button. You will receive an automated call with a message containing a 6-digit code. Enter the code and click “Verify”.
6. Make sure the green check mark appears, then click the green “Continue” button.
7. Under “My Settings & Devices”, you will now see two phones as options for two-step login. You can change your default device if you like.

1. Browse to an application that uses SSO, such as my.lafayette.edu.
   
2. If you have “Remember me for 30 days” checked or something other than “Ask me to choose an authentication method” set, you will need to open a new Private or Incognito window in your browser to get to the two-step login frame.
3. Choose an authentication device and method.
4. After you authenticate, you will be able to access My Settings & Devices.