at  

NCSA offers the Duo multi-factor authentication solution for the purpose of increasing the security of NCSA's resources.

Duo at NCSA accounts are available to all NCSA Kerberos account holders.

Duo enrollment process

• Duo Prerequisites
  • NCSA Kerberos username and password
  • Android or iPhone phone with the Duo Mobile app installed
    • if you do not have an available smart phone a hard token and be provided please contact help+security@ncsa.illinois.edu
    • Android: https://play.google.com/store/apps/details?id=com.duosecurity.duomobile&hl=en
    • iPhone: https://itunes.apple.com/us/app/duo-mobile/id422663827?mt=8
• Proceed to: https://duo.security.ncsa.illinois.edu
• Log in with your NCSA Kerberos username and password
  • Use the NCSA Identity service you require a password reset - https://identity.ncsa.illinois.edu/
  • If you experience any difficulties using the NCSA Identity and Access Managment site please contact NCSA IST: help+its@ncsa.illinois.edu
• Follow the Duo process for enrollment

Backup Codes and Tokens

Duo at NCSA provides multiple methods to recover your acocunt in the case of the smart phone you use to register is no longer available.

• You can register a Yubico U2F token using the Duo Portal, U2F tokens only function with supported web browsers - https://www.yubico.com/solutions/fido-u2f/
• Create backup codes: You can generate and save 2 non-expiring backup codes. You are urged to write these down and place in a safe location or save into a password vault.
• NCSA can provided a Duo hardware token - https://guide.duo.com/tokens - please contact NCSA Security: help+security@ncsa.illinois.edu