NCSA offers the Duo multi-factor authentication solution as a method of protecting and securing NCSA's resources.
Duo at NCSA accounts are available to all NCSA Kerberos account holders.
Duo enrollment process
Prerequisites
- NCSA Kerberos username and password
- If you need a password reset, use the NCSA Identity service - https://identity.ncsa.illinois.edu/
- iOS or Android device with the Duo mobile app installed
- U2F Token - User provided
Enrollment Steps
- Visit https://duo.security.ncsa.illinois.edu
- Log in with your NCSA Kerberos username and password
- If you experience any difficulties using the NCSA Identity and Access Management site, please contact NCSA ITS at help+its@ncsa.illinois.edu
- Choose Device Management Portal
- Follow the Duo process for enrollment
Backup Codes and Tokens
Duo at NCSA provides multiple methods to recover your account if the smart phone you used to register becomes unavailable.
- You can register a Yubico U2F token using the Duo Portal:
- U2F tokens only function with supported web browsers
- https://www.yubico.com/product/security-key-by-yubico
- Create backup codes:
- You can generate and save 2 non-expiring backup codes.
- You are urged to write these down and place in a safe location or save into a password vault.
- To use a backup code after rebuilding your (or getting a new) phone:
- Install the DUO app on your phone
- On a computer, go to: https://duo.security.ncsa.illinois.edu
- Launch Device Management Portal
- Click the "Enter a Passcode" button
- Enter your backup code and then click "Login"
- NCSA can provide a Duo hardware token:
- NCSA Employees should help+duo@ncsa.illinois.edu
- Industry Partners should contact their Industry program representative.
- LSST Staff should contact their project manager.