NCSA offers the Duo multi-factor authentication solution as a method of protecting and securing NCSA's resources.

Duo at NCSA accounts are available to all NCSA Kerberos account holders.

Duo enrollment process

NCSA Kerberos username and password
- If you need a password reset, use the NCSA Identity service - https://identity.ncsa.illinois.edu/
iPhone or Android phone with the Duo mobile app installed
- iPhone: https://itunes.apple.com/us/app/duo-mobile/id422663827?mt=8
- Android: https://play.google.com/store/apps/details?id=com.duosecurity.duomobile&hl=en
- If you do not have an available smart phone, a hard token can be provided by contacting Security

Visit https://duo.security.ncsa.illinois.edu
Log in with your NCSA Kerberos username and password
- If you experience any difficulties using the NCSA Identity and Access Management site, please contact NCSA IST at help+its@ncsa.illinois.edu
Follow the Duo process for enrollment

Backup Codes and Tokens

Duo at NCSA provides multiple methods to recover your account if the smart phone you used to register becomes unavailable.

You can register a Yubico U2F token using the Duo Portal:
- U2F tokens only function with supported web browsers
- https://www.yubico.com/solutions/fido-u2f/
Create backup codes:
- You can generate and save 2 non-expiring backup codes.
- You are urged to write these down and place in a safe location or save into a password vault.
NCSA can provide a Duo hardware token:
- Please contact Security to be assigned one.
- https://guide.duo.com/tokens