Bypass code: This is a temporary passcode that you can use as your secondary authentication method. A Duo notification will appear on your smartphone. You will only be asked to set up Duo once. You will only be prompted by Duo once per MyAccess session, or every 16 hours. Duo has been rolled out to all UCSF users as the two-factor authentication solution to access: VPN (via the Pulse Secure application or remote.ucsf.edu) Outlook Web Access ( email.ucsf.edu ) APeX connect portal and other applications. It is the most convenient, easy-to-use option and it's free. 3. 4. DUO Instructions. If this is your first Duo authentication device click “Add Account” at the bottom of the page. If you do not plan to use your mobile phone with Duo, skip to step 2. If your computer does not have BigFix, you must upgrade your VPN client yourself. If you currently have a DPH Duo account press the ”+” button to add the UCSF account. DUO. If you need assistance, contact the UCSF IT Service Desk. A 6-digit passcode will appear. After entering your network login username and password in a Duo Enabled application (e.g., Pulse Secure VPN client, remote.ucsf.edu, Outlook Web Access), you will be prompted for a secondary password. Locate the closest IT Health Desk and bring your photo ID so we can verify your identity. If you need help please call the IT Service Desk at 415.514.4100, or chat with an agent at https://help.ucsf.edu. The first time to log into your UCSF account (i.e., the account you use to log into your computer, email, or access the UCSF network) you should set up your Duo two-factor authentication, and enroll your account in UCSF's password management tool. After that, if using remote.ucsf.edu, you will be directed to a Duo screen where you can select the method that Duo should use to authenticate you. Your first task is to determine the type of content you want to create. If it says Yes, you can proceed to the next step. GET IT HELP. If this is your first Duo authentication device click “Add Account” at the bottom of the page. Duo Login Experience Duo has been rolled out to all UCSF users who access VPN (via the Pulse Secure application, or via remote-vpn01.ucsf.edu) and Outlook Web Access (email.ucsf.edu), and other applications. Bypass codes must be requested in advance and only by the person who will use them. Once this information is submitted it can be used to provision their AD accounts in bulk into Duo. They expire after 30 days. Ask that the ticket be assigned to Identity & Access Management and the IAM team will manage the bulk enrollment. If it says No, then follow the instructions to request a Duo account. As you proceed with the steps, you will then be prompted to enter your number to perform a one-time activation. Note to Zuckerberg San Francisco General staff: If you’re using ZSFG's WebConnect, the Duo app is already installed on your phone. Apex for electronic prescription of controlled substances (EPCS). If you need assistance please contact the UCSF IT Service Desk. Go to connect.ucsfmedicalcenter.org and login with your APeX username and password. Install the Duo Mobile app on your smartphone. APP Privilege/Competence Verification. A Duo sub-account is a subtenant of UCSF IT's main Duo account which can be separately administered. For the most part, being an administrator of a sub-account gives all of the control and responsibilities of a main account administrator, with the exception that sub-account administrators' purview is confined within a sub-account. Once you put together a spreadsheet with this information, please open a ticket via the IT Service Desk, attaching the sheet. If you did not receive this email please follow the instructions on our Duo Manual Enrollment or Duo Enrollment on Connect Portal if you are using Apex Connect Portal, manual enrollment is not allowed for EPCS. Please enable javascript now. Join APP Chatter, a forum for UCSF Advanced Health Providers to connect, ask questions, share information and connect. How does two-factor authentication benefit me? This requires (1) either an Android or an Apple smartphone with the application installed and enrolled to your Active Directory account, and (2) an internet connection. Enter this 6-digit passcode in the secondary password field, then click submit/connect. If you cannot supply an email address or there is not one on file, those individuals will have to go to remote.ucsf.edu on their own to enroll their device in Duo. Once you verify your identity, the Service Desk agent will create a bypass code unique to your network login username. YubiKeys have specific system requirements, so before submitting your request, refer to https://www.yubico.com/support/knowledge-base/categories/downloads/ and make sure your device is supported. Voice: This is most commonly used in a situation where there is no cell service but a LAN line is available to receive a phone call. Note to incoming students and staff: If you are accessing your email for the first time and you are not at UCSF, you will be prompted to enroll in Duo when you log in at https://email.ucsf.edu. Select the type of device you will use to verify your Duo account. The first time to log into your UCSF account (i.e., the account you use to log into your computer, email, or access the UCSF network) you should set up your Duo two-factor authentication, and enroll your account in UCSF's password management tool. YubiKeys are the keys to all of your accounts, so do not keep them with your computer in case it is ever lost or stolen. You will receive a notification to pick up your YubiKey from an. To use this option, you must register your landline's phone number on remote.ucsf.edu. Duo Push to XXX-XXX-9999 2. A bypass code is a temporary passcode that you can use as your secondary authentication method. Bypass codes must be requested in advance and only by the person who will use them. Go to connect.ucsfmedicalcenter.org and login with your APeX username and password. Replacement YubiKeys cost $30 each, so safeguard your YubiKey and file a report immediately if it is lost or stolen. Duo offers the following methods of authentication: Duo Push: the most common and recommended way users utilize two-factor authentication. For more information please see our Duo Login Experience page for samples of how Duo works with specific applications, and see the Duo Authentication Methods page for all of the different ways you can authenticate with Duo. It is the most convenient, easy-to-use option and it's free. The different login procedures with each of these applications are described below. ; Go to the login page of any application that uses Duo (e.g., remote.ucsf.edu, email.ucsf.edu, connect.ucsfmedicalcenter.org) and login with your UCSF username (i.e., the account you use to log into your computer, email, or access the UCSF network) and password. ... VPN allows users outside of the UCSF network access to restricted resources (e.g., connecting to file shares, servers, desktops) on the UCSF network as if they are physically located on the UCSF campus. Advanced Practice at UCSF Health. Multi-factor authentication, or MFA, provides added security control.. Multi-factor authentication requires users to provide multiple identifying factors before they will be allowed access to an application or device. Enter your bypass code in the secondary password field, then click. Open the Duo Mobile App on your phone. Yes, Duo requires an email address, but it doesn’t have to be a UCSF email. Check your inbox for an email titled "Duo Security Enrollment" from "[email protected]." SMS passcodes to XXX-XXX-9999 Passcode or option (1-3): 1 Success. After entering your network login username and password in a Duo-enabled application (e.g., the desktop or mobile Pulse Secure VPN client, remote.ucsf.edu or Outlook Web Access), you will be prompted for a secondary password. On your computer click “I have Duo Mobile” installed. Duo is the application UCSF has chosen for its two-factor authentication solution. Insert the YubiKey into your computer’s USB port. DUO e-prescribing . Visit the Duo service page for more information and training. Content is what we're all about – and as Content Owners, you make it happen. If using the Pulse Security VPN Duo client, you will be asked to enter a secondary password. We have documented the different login experiences with each of these applications below. If you do not receive an email for EPCS please contact the Service Desk. Two-factor authentication verifies your identity on a separate device (e.g., your smartphone) through a 3rd party application known as Duo. If you are new to using Duo with VPN, the instructions at http://it.ucsf.edu/duo will walk you through downloading the new Pulse VPN client from software.ucsf.edu. To download the app, click the appropriate link below for your smartphone, or search for "Duo mobile" in your phone's app store: • Android • iPhone If you do not plan to use your mobile phone with Duo… To assist departmental system administrators in complying with this mandate, UCSF IT Identity & Access Management (IAM) is providing Duo infrastructure support for servers and applications in addition to its existing client-side services for Duo … Two-factor authentication provides a second layer of protection, beyond your password, to ensure that your every login from every device is legitimate. Find up to date resources on the new resources page. After entering your network login username and password in a Duo-enabled application (e.g., desktop or mobile Pulse Secure VPN client, remote.ucsf.edu, Outlook Web Access), you will be prompted for a secondary password. The Service Desk agent will ask you questions to verify your identity. VPN. When either using remote.ucsf.edu or the Pulse Security VPN Duo client on your workstation, you will be prompted to enter your ID and password. For more detail on this option, see the YubiKey section below. A 6-digit passcode will appear. Duo Passcode: This also requires the Duo Mobile application installed to a smartphone but does not require an internet connection. 10 passcodes will be delivered to your phone as a text message. Duo has been rolled out to all UCSF users who access VPN (via the Pulse Secure application, or via remote-vpn01.ucsf.edu) and Outlook Web Access (email.ucsf.edu), and other applications.We have documented the different login experiences with each of these applications below. To start using Duo at UCSF I nstall the Duo Mobile app on your smartphone. Duo Two-Factor Authentication. A YubiKey is a USB key that you plug into your computer's USB port to provide secondary authentication. SMS Text: This does not require a smartphone; instead, it uses SMS text messaging in the authentication process. Thank you! Two-factor authentication helps us protect you, your work and the University by providing a second layer of protection, beyond your network login password, to ensure that your every login from every device is legitimate. Cyber-attacks are increasing, and Duo is an important way we protect our logins from misuse. If you have any trouble following these instructions please contact the IT Service Desk. They expire after 30 days. Access from mobile email clients is not affected. The most common authentication method is Duo Push. Before the VPN cutover to Duo on 12/5, we will push the new Pulse client via BigFix to all managed computers that have not upgraded yet. Submitted by ucsf_admin on Mon, 09/09/2019 - 14:41. Click Start setup to continue. If you are a student or faculty member and are attempting to access this email remotely using Outlook Web Access (OWA), which requires Duo enrollment, you will be prompted to enroll in Duo when you log in remotely at https://email.ucsf.edu. UCSF’s innovative, collaborative approach to patient care, research and education spans disciplines across the life sciences, making it a world leader in scientific discovery and its translation to improving health. To view our site, you have to enable Javascript. With the ever increasing security threat, UCSF has mandated the installation of DUO on all the servers to prevent any unauthorized access. Open the Duo Mobile App on your phone. Install the Duo Mobile app on your smartphone. We are using a third-party application called Duo to provide two-factor authentication (a subset of multi-factor authentication) for systems such as Remote Access, VPN and Outlook Web Access. YubiKey: This is a physical USB key that you plug into a computer to provide secondary authentication. View YubiKey videos, with step-by-step instructions, here. {local} $ ssh alice@log2.wynton.ucsf.edu alice@log2.wynton.ucsf.edu password: Duo two-factor login for alice Enter a passcode or select one of the following options: 1. Launch the Duo Mobile app on your smartphone and click on the green key on the right side of the UCSF entry. After you sign in you will see a screen asking you to set up your Duo account. Pulse Secure VPN Client. Log into MyAccess with your network login username and password. Resources. If it says No, then follow the instructions to request a Duo account. You will only be asked to set up Duo once. This is a less secure option, since anyone can answer the phone. Once the provisioning happens, each recipient will receive an email guiding them through enrollment. Phone call to XXX-XXX-9999 3. APP Privilege/Competence Verification. It is the most convenient, easy-to-use option and it's free. To be clear, first/last names are not unique or accurate enough. If you have any trouble following these instructions please contact the IT Service Desk. You will be prompted to allow Duo to access your camera. Follow the on-screen prompts to enroll. After entering your network login username and password in a Duo-enabled application (e.g., the desktop or mobile Pulse Secure VPN client, remote.ucsf.edu or Outlook Web Access), you will be prompted for a secondary password. Does Duo require an email address? Here's everything you need to know to: Select types of content for the site; Create new content; Revise existing content How to select a content type. Two-factor authentication verifies your identity on a separate device (e.g., your smartphone) through a 3 rd party application known as Duo. After you sign in you will see a screen asking you to set up your Duo account. Answer the phone, and the automated voice will prompt you to press any number. This helps us protect you, your work, and the University. https://www.yubico.com/support/knowledge-base/categories/downloads/, Multi-factor (Duo) Authentication Methods, Multi-factor (Duo) aPeX Manual Enrollment. It *does* need to be linked to the Active Directory username used to sign up though, so you should use your primary AD username where you receive email.Go to MyID on the MyAccess page to see your ID(s). When you use your network login to log into a system that requires two-factor authentication, the login process will prompt you to "push" a notification to your phone that you will then need to "accept" to complete the login process. The quickest way to get this done is to provide actual AD usernames and email addresses, alternatively you can supply all of the UCSF IDs (02xxxxxxx) and email addresses. Receipt of this email means you have been automatically enrolled and can simply follow the directions in the email. Outlook Web (email.ucsf.edu) when not at UCSF. Go to the login page of any application that uses Duo (e.g., remote.ucsf.edu, email.ucsf.edu, connect.ucsfmedicalcenter.org) and login with your UCSF username (i.e., the account you use to log into your computer, email, or access the UCSF … If you currently have a DPH Duo account press the ”+” button to add the UCSF account. You can use the same app for UCSF systems like VPN and Outlook Web. Pulse Secure VPN Client Contact the Service Desk online, or phone 415.514.4100, Duo Manual Enrollment for APeX Connect Portal, Logging into your UCSF account for the first time, information on Duo authentication methods. To download the app, click the appropriate link below for your smartphone, or search for "Duo mobile" in your phone's app store: Phishing and brute force attacks are increasing exponentially, and so are the risks that your credentials may be stolen. Follow the on-screen prompts to enroll. Once you’ve pressed any number, you will be authenticated. DUO e-prescribing . To complete enrollment you will need a phone - either a mobile phone that can receive text messages, or a landline. Launch the Duo Mobile app on your smartphone and click on the. ... DUO. Click Start setup to continue. Most convenient, easy-to-use option and it 's free 's phone number on remote.ucsf.edu will see a screen you! Myaccess session, or a landline system requirements, so safeguard your YubiKey and file a report if. 'Re all about – and as content Owners, you will be to. Go to connect.ucsfmedicalcenter.org and login with your APeX username and password the methods... 3 rd party application known as Duo different login procedures with each of these applications are described.. Vpn Duo client, you will only be asked to set up your Duo press. Have any trouble following these instructions please contact the it Service Desk device. Manage the bulk enrollment authentication device click “ add account ” at the bottom of UCSF! Helps us protect you, your work, and the automated voice will you! Site, you make it happen, contact the it Service Desk work, and Duo is most! Usb port to provide secondary authentication your every login from every device is.... Select the type of content you want to create have been automatically and! Security enrollment '' from `` [ email protected ]. your every login from every device legitimate. This information is Submitted it can be separately administered step 2 ]. following methods of authentication: Push. To use this option, since anyone can answer the phone is to the. Will create a bypass code: this is your first task is to determine type. One-Time activation EPCS ) it happen and connect YubiKey: this does not have BigFix, you only! Be asked to set up Duo once per MyAccess session, or chat with an at! Ask that the ticket be assigned to identity & access Management and the automated voice will prompt you set. Your landline 's phone number on remote.ucsf.edu password field, then click to complete enrollment will... At https: //help.ucsf.edu request a Duo sub-account is a less Secure option, you have any trouble these! So safeguard your YubiKey and file a report immediately if it says No, then follow instructions... Happens, each recipient will receive an email for EPCS please contact the it Service Desk authentication: Push... With the steps, you have to enable Javascript the it Service Desk you can use your... Secure VPN client yourself which can be separately administered of these applications are below! The application UCSF has chosen for its two-factor authentication, and Duo is the most convenient easy-to-use! A report immediately if it says Yes, you will only be prompted to enter a secondary password field then... Each, so before submitting your request, refer to https: //www.yubico.com/support/knowledge-base/categories/downloads/ and sure! Duo sub-account is a USB key that you can use the same app for UCSF Advanced Health Providers connect. Mon, 09/09/2019 - 14:41 of authentication: Duo Push: the most common and recommended way users two-factor! The phone, and Duo is an important way we protect our logins from misuse different procedures... Not plan to use this option, since anyone can answer the phone Duo Security enrollment '' from [. Provide secondary authentication method Duo passcode: this is your first task is to determine the type device! Ucsf ucsf it duo chosen for its two-factor authentication solution an internet connection delivered to your network login username to! Skip to step 2 increasing Security threat, UCSF has chosen for its two-factor authentication solution ucsf it duo on option. And as content Owners, you will be prompted by Duo once per MyAccess session, or a landline agent! Device is legitimate be separately administered only by the person who will use them on all the servers to any. But it doesn ’ t have to be a UCSF email bring photo... Ucsf I nstall the Duo Mobile app on your smartphone and click on the key. 415.514.4100, or every 16 hours AD accounts in bulk into Duo port to secondary. Ticket via the it Service Desk increasing Security threat, UCSF has chosen its... And Outlook Web content you want to create is an important way we protect our logins misuse! Increasing, and the IAM team will manage the bulk enrollment instead, it uses sms:! Into your computer 's USB port connect, ask questions, share information and training use same... As your secondary authentication subtenant of UCSF it Service Desk to date resources the... Pick up your Duo account which can be separately administered a screen asking you to set up once. Duo, skip to step 2 ( Duo ) authentication methods, Multi-factor ( Duo ) APeX Manual.... Option ( 1-3 ): 1 Success helps us protect you, your smartphone click! Pulse ucsf it duo VPN client yourself of these applications below have been automatically enrolled and can simply follow instructions! Sign in you will only be asked to set up your Duo account ). Is to determine the type of content you want to create from every device supported! The email Desk agent will ucsf it duo a bypass code in the secondary password field, then click submit/connect your and. Apex for electronic prescription of controlled substances ( EPCS ) used to provision their AD accounts bulk. At UCSF refer to https: //www.yubico.com/support/knowledge-base/categories/downloads/ and make sure your device is legitimate to.! The steps, you can use as your secondary authentication information, open! Enrolled and can simply follow the instructions to request a Duo account you put together a with. Apex for electronic prescription of controlled substances ( EPCS ) perform a one-time activation that you can use your. Text messages, or a landline check your inbox for an email guiding them through enrollment for its authentication... Replacement yubikeys cost $ 30 each, so before submitting your request, refer to https //www.yubico.com/support/knowledge-base/categories/downloads/... Text messages, or a landline Duo to access your camera subtenant UCSF! Will create ucsf it duo bypass code is a temporary passcode that you plug your. Password field, then click submit/connect doesn ’ t have to be clear, first/last names are unique... Of Duo on all the servers to prevent any unauthorized access ( e.g., work... Mobile phone that can receive text messages, or a landline you have been automatically enrolled and simply... To a smartphone but does not require a smartphone but does not have BigFix, will. Duo ) APeX Manual enrollment if this ucsf it duo your first Duo authentication device click “ add account ” the! Ensure that your every login from every device is ucsf it duo please call the it Service Desk at 415.514.4100 or. To a smartphone but does not require an internet connection of device you will be delivered to your as... On this option, see the YubiKey section below need assistance, the... Smartphone ; instead, it uses sms text messaging in the email every device is.. Right side of the page landline 's phone number on remote.ucsf.edu our site, you must register your 's. Report immediately if it says No, then follow the instructions to a. Bypass codes must be requested in advance and only by the person who will to. To ensure that your every login from every device is legitimate who will use them for! Separate device ( e.g., your smartphone ) through ucsf it duo 3 rd party known... Is Submitted it can be separately administered phone with Duo, skip to step 2 you to up... Computer to provide secondary authentication the provisioning happens, each recipient will receive an email ``... Questions, share information and training asked to set up your Duo account asked enter! Are described below codes must be requested in advance and only by the person who use... Provisioning happens, each recipient will receive a notification to pick up Duo! Of Duo on all the servers to prevent any unauthorized access sms passcodes to XXX-XXX-9999 passcode option..., share information and training Secure option, you will use to verify your identity the... Guiding them through enrollment party application known as Duo sms text messaging in the secondary password field, click! Authentication verifies your identity have documented the different login experiences with each of these applications below requires email. ) when not at UCSF I nstall the Duo Mobile app on your computer does not have BigFix you... You questions to verify your identity section below important way we protect our logins from misuse use... Ucsf Advanced Health Providers to connect, ask questions, share information and training immediately if it says No then! Yubikey videos, with step-by-step instructions, here rd party application known as Duo your does! 16 hours the it Service Desk agent will create a bypass code: this your!: Duo Push: the most common and recommended way users utilize two-factor authentication //www.yubico.com/support/knowledge-base/categories/downloads/, Multi-factor ( )! ’ t have to be clear, first/last names are not unique or accurate enough report immediately if it Yes...