FHDA Community College District Introduces Two-Factor Authentication for Employees
Two-factor authentication adds a second layer of security to your FHDA account. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password. Bookmark this page if you need to reference it on the rollout date.
Section 1: Enroll and Activate Duo Two-Factor Authentication
The following steps will help guide you through installing, enrolling, and activating your Duo 2FA. Skip Step 1 if you don’t have a mobile phone, your mobile device is not supported or you prefer receiving a phone call instead of a push notification to approve your MFA request. If you already use Duo Mobile app outside of FHDA, skip step 1 and proceed to step 2.
Step 1: (Skip this step if you prefer phone call/text message than push notification) Download and install Duo Mobile app on your mobile phone by following the instructions below
In the App Store(iOS 13+) or Play Store(Android 8+) on your mobile device, search for “Duo Mobile”.
Tap on "install" button to start downloading and installing the Duo Mobile app.
Note: You may be asked to add a payment method or create an account if you haven't done so. Follow the App Store or Play Store prompt to complete the installation process.
Step 2: On your computer, begin enrollment of your phone number
IMPORTANT: Please wait until your scheduled rollout date to perform step 2. You will not see the Duo Universal Prompt before your scheduled rollout date.
Log into MyPortal using your CWID and your password and follow the interactive Duo Universal Prompt to enroll your phone number.
Option 1: Enroll with Duo Mobile (skip and go to Option 2 if you prefer to receive a phone call/text messages instead of a push notification to approve your MFA request). Continue this step even if you already use Duo Mobile app outside of our school district.
Click on “Duo Mobile”, enter your mobile phone number, click on Add phone number and confirm.
Scan the QR code using your phone to activate Duo Mobile. (Go to Section 4: Scan QR Code using iOS and Android to see how it looks like on your phone.)
You can then click on “Skip for now” or continue setting up Touch ID if you have one with your device.
IMPORTANT: Please scan the QR code on your MyPortal screen after you sign in. Do not scan the QR code in this document.
Log in with Duo by approving the authentication request on your phone. Click on “Yes, trust browser” to remember your device for 15 days.
Option 2: Enroll with Phone number (This can be either a mobile phone # or a landline)
Click on “Phone number”. Enter your phone number. Check “This is a landline phone” if it is a landline. Confirm your number.
Confirm ownership of the phone number.
Log in with Duo. Duo will call your phone or send your a text message depending on if you register a landline or a mobile phone.
Approve your authentication request by answering the phone or enter the passcode sent to you by Duo. Click on “Yes, trust browser” to remember your device for 15 days.
Option 3: Enroll with TouchID (This option will only be available if your device is TouchID enabled)
Select Touch ID and follow the prompt to finish setup. After you complete enrollment with TouchID, continue to add another option (Duo Mobile or Phone number). TouchID is device specific. You will not be able to log in from other devices if you only enroll with TouchID. IMPORTANT: Be sure to add Duo Mobile or Phone number if you log in from multiple devices.
Section 2: Logging in to MyPortal with DUO MFA
Go to MyPortal and enter your CWID and password. If you have clicked on “Yes, trust browser” before, you will see the Duo Prompt flashes on your screen for a few seconds and then will be redirected to MyPortal homepage.
If you did not trust browser or it has been 15 days since you trusted browser, after you sign in with your CWID and password, depending the option you choose in Section 1, you may receive a Duo Push, a phone call or a text message. Approve your authentication request accordingly.
Section 3: Manage your devices
Log in to MyPortal using your CWID and your password. If you have already trusted the browser for 15 day, you will need to use an incognito/private window to log in to MyPortal again and click on "Other options”, navigate to the last option "Manage devices". It will ask you to prove your identity with your 2nd factor. Once approved, you will see the device management screen and follow along.
Review https://fhda.atlassian.net/wiki/spaces/UD/pages/2496626693/FHDA+Duo+2FA+Step-by-Step+Instructions#Step-3:-On-your-computer,-begin-enrollment-of-your-phone-number to add other options.
Section 4: Scan QR Code using iOS and Android
iOS Phone
Click on “Add” on the top right corner of the screen, then click on Use QR code. The camera screen will open and aim your camera at the QR code on your browser to scan. Give your account a name and save.
Android Phone
Click on the Plus sign on the top right corner of your screen. The camera screen will open and aim your camera at the QR code on your browser to scan. Give your account a name and save.
