Two-factor authentication, also referred to as 2FA, protects users from unauthorized access to Lehigh accounts in the event that a password is compromised. You may already be familiar with 2FA if you've accessed sites that require it, such as for online banking. Two-factor authentication uses two pieces of information to establish your identity when you are trying to access a site or service:
- The first factor is something you know, such as your password.
- The second factor is something only you have, such as your mobile phone.
If your password is compromised through a phishing attack or other malicious means, a cybercriminal would also need your second factor to access your account.
Lehigh has contracted services from Duo Security to enable two-factor authentication on your Lehigh computing account. Duo's services allow you to choose the type of authentication method that works best for you: a push notification sent to your mobile device through the Duo Security app, a generated code each time you log in to a site or service, or another device such as a telephone to call you when two-factor authentication is needed.
| Getting Started | How-to Articles |
|---|---|
Get started with two-factor authentication by completing your enrollment process using the Lehigh University Two-Factor Authentication with Duo Enrollment Portal and adding your second factor device(s). For more information, refer to Two-Factor Authentication with Duo Enrollment Process. Using your devices for two-factor authentication with Duo Duo Mobile (Push Notifications or Passcodes): Apple iPhone, Apple Watch, Android Phone, and Windows Phone Other Devices: Cell Phones and Landlines (Voice Callback), Hardware Tokens and U2F Authenticators. | Two-Factor Authentication with Duo Prompt (SSO): How to provide your second factor when using Lehigh SSO. Two-Factor Authentication with Duo Prompt (Cisco AnyConnect VPN): How to provide your second factor when using Cisco AnyConnect. Note: Duo documentation references "Second Password", Lehigh users will see "Duo Method (push, phone, sms)". To connect to the LTS test Cisco AnyConnect VPN, use vpn-test.lehigh.edu for the VPN connection. Type "push", "phone" or "sms" without the quotes for the second password. Adding and removing New Devices: How to add and remove devices, sometimes referred to as authentication methods. |
The initial Duo setup screen
Two-Factor Authentication with Duo Prompt
