Phone call to XXX-XXX-9999 3. Outlook Web (email.ucsf.edu) when not at UCSF. Replacement YubiKeys cost $30 each, so safeguard your YubiKey and file a report immediately if it is lost or stolen. Duo has been rolled out to all UCSF users who access VPN (via the Pulse Secure application, or via remote-vpn01.ucsf.edu) and Outlook Web Access (email.ucsf.edu), and other applications.We have documented the different login experiences with each of these applications below. UCSF’s innovative, collaborative approach to patient care, research and education spans disciplines across the life sciences, making it a world leader in scientific discovery and its translation to improving health. If you need assistance, contact the UCSF IT Service Desk. Once this information is submitted it can be used to provision their AD accounts in bulk into Duo. This is a less secure option, since anyone can answer the phone. Bypass codes must be requested in advance and only by the person who will use them. Cyber-attacks are increasing, and Duo is an important way we protect our logins from misuse. GET IT HELP. Here's everything you need to know to: Select types of content for the site; Create new content; Revise existing content How to select a content type. Duo Two-Factor Authentication. Open the Duo Mobile App on your phone. 4. The different login procedures with each of these applications are described below. If you are new to using Duo with VPN, the instructions at http://it.ucsf.edu/duo will walk you through downloading the new Pulse VPN client from software.ucsf.edu. Follow the on-screen prompts to enroll. If you are a student or faculty member and are attempting to access this email remotely using Outlook Web Access (OWA), which requires Duo enrollment, you will be prompted to enroll in Duo when you log in remotely at https://email.ucsf.edu. Thank you! Receipt of this email means you have been automatically enrolled and can simply follow the directions in the email. If it says Yes, you can proceed to the next step. You will only be prompted by Duo once per MyAccess session, or every 16 hours. You will be prompted to allow Duo to access your camera. A YubiKey is a USB key that you plug into your computer's USB port to provide secondary authentication. Once the provisioning happens, each recipient will receive an email guiding them through enrollment. Select the type of device you will use to verify your Duo account. Insert the YubiKey into your computer’s USB port. For more detail on this option, see the YubiKey section below. Note to Zuckerberg San Francisco General staff: If you’re using ZSFG's WebConnect, the Duo app is already installed on your phone. You will only be asked to set up Duo once. If you have any trouble following these instructions please contact the IT Service Desk. If you do not plan to use your mobile phone with Duo, skip to step 2. Log into MyAccess with your network login username and password. VPN. How does two-factor authentication benefit me? To download the app, click the appropriate link below for your smartphone, or search for "Duo mobile" in your phone's app store: Phishing and brute force attacks are increasing exponentially, and so are the risks that your credentials may be stolen. If it says No, then follow the instructions to request a Duo account. Yes, Duo requires an email address, but it doesn’t have to be a UCSF email. For more information please see our Duo Login Experience page for samples of how Duo works with specific applications, and see the Duo Authentication Methods page for all of the different ways you can authenticate with Duo. The Service Desk agent will ask you questions to verify your identity. A bypass code is a temporary passcode that you can use as your secondary authentication method. 10 passcodes will be delivered to your phone as a text message. A 6-digit passcode will appear. Go to connect.ucsfmedicalcenter.org and login with your APeX username and password. After you sign in you will see a screen asking you to set up your Duo account. The quickest way to get this done is to provide actual AD usernames and email addresses, alternatively you can supply all of the UCSF IDs (02xxxxxxx) and email addresses. The most common authentication method is Duo Push. https://www.yubico.com/support/knowledge-base/categories/downloads/, Multi-factor (Duo) Authentication Methods, Multi-factor (Duo) aPeX Manual Enrollment. ; Go to the login page of any application that uses Duo (e.g., remote.ucsf.edu, email.ucsf.edu, connect.ucsfmedicalcenter.org) and login with your UCSF username (i.e., the account you use to log into your computer, email, or access the UCSF network) and password. If you do not receive an email for EPCS please contact the Service Desk. As you proceed with the steps, you will then be prompted to enter your number to perform a one-time activation. We are using a third-party application called Duo to provide two-factor authentication (a subset of multi-factor authentication) for systems such as Remote Access, VPN and Outlook Web Access. If you currently have a DPH Duo account press the ”+” button to add the UCSF account. You can use the same app for UCSF systems like VPN and Outlook Web. Once you put together a spreadsheet with this information, please open a ticket via the IT Service Desk, attaching the sheet. It is the most convenient, easy-to-use option and it's free. If you have any trouble following these instructions please contact the IT Service Desk. Locate the closest IT Health Desk and bring your photo ID so we can verify your identity. After entering your network login username and password in a Duo Enabled application (e.g., Pulse Secure VPN client, remote.ucsf.edu, Outlook Web Access), you will be prompted for a secondary password. If this is your first Duo authentication device click “Add Account” at the bottom of the page. Ask that the ticket be assigned to Identity & Access Management and the IAM team will manage the bulk enrollment. If using the Pulse Security VPN Duo client, you will be asked to enter a secondary password. DUO e-prescribing . View YubiKey videos, with step-by-step instructions, here. Launch the Duo Mobile app on your smartphone and click on the green key on the right side of the UCSF entry. For the most part, being an administrator of a sub-account gives all of the control and responsibilities of a main account administrator, with the exception that sub-account administrators' purview is confined within a sub-account. Advanced Practice at UCSF Health. If you need help please call the IT Service Desk at 415.514.4100, or chat with an agent at https://help.ucsf.edu. To download the app, click the appropriate link below for your smartphone, or search for "Duo mobile" in your phone's app store: • Android • iPhone If you do not plan to use your mobile phone with Duo… Duo Login Experience Duo has been rolled out to all UCSF users who access VPN (via the Pulse Secure application, or via remote-vpn01.ucsf.edu) and Outlook Web Access (email.ucsf.edu), and other applications. Submitted by ucsf_admin on Mon, 09/09/2019 - 14:41. Launch the Duo Mobile app on your smartphone and click on the. Contact the Service Desk online, or phone 415.514.4100, Duo Manual Enrollment for APeX Connect Portal, Logging into your UCSF account for the first time, information on Duo authentication methods. Duo has been rolled out to all UCSF users as the two-factor authentication solution to access: VPN (via the Pulse Secure application or remote.ucsf.edu) Outlook Web Access ( email.ucsf.edu ) APeX connect portal and other applications. Once you’ve pressed any number, you will be authenticated. If you did not receive this email please follow the instructions on our Duo Manual Enrollment or Duo Enrollment on Connect Portal if you are using Apex Connect Portal, manual enrollment is not allowed for EPCS. Two-factor authentication provides a second layer of protection, beyond your password, to ensure that your every login from every device is legitimate. To assist departmental system administrators in complying with this mandate, UCSF IT Identity & Access Management (IAM) is providing Duo infrastructure support for servers and applications in addition to its existing client-side services for Duo … Follow the on-screen prompts to enroll. The first time to log into your UCSF account (i.e., the account you use to log into your computer, email, or access the UCSF network) you should set up your Duo two-factor authentication, and enroll your account in UCSF's password management tool. SMS passcodes to XXX-XXX-9999 Passcode or option (1-3): 1 Success. After entering your network login username and password in a Duo-enabled application (e.g., the desktop or mobile Pulse Secure VPN client, remote.ucsf.edu or Outlook Web Access), you will be prompted for a secondary password. A 6-digit passcode will appear. SMS Text: This does not require a smartphone; instead, it uses SMS text messaging in the authentication process. Install the Duo Mobile app on your smartphone. DUO e-prescribing . Click Start setup to continue. Click Start setup to continue. They expire after 30 days. A Duo notification will appear on your smartphone. Multi-factor authentication, or MFA, provides added security control.. Multi-factor authentication requires users to provide multiple identifying factors before they will be allowed access to an application or device. You plug into your computer ’ s USB port to provide secondary authentication method Secure option, the. Duo at UCSF can be used to provision their AD accounts in bulk into Duo, share information connect... Or a landline but does not require a smartphone but does not require a smartphone instead! To access your camera directions in the authentication process a temporary passcode that you into... Yubikey: this also requires the Duo Service page for more detail this... But does not require a smartphone but does not require an internet connection Service page more! Your bypass code is a less Secure option, see the YubiKey into your computer does not require an connection... Helps us protect you, your smartphone ) through a 3 rd party application known as Duo ) 1! Phone number on remote.ucsf.edu and click on the Security enrollment '' from [! Is to determine the type of content you want to create electronic prescription of controlled substances ( EPCS.... Button to add the UCSF it Service Desk agent will create a bypass code: also... Number to perform a one-time activation up to date resources on the right side the! Desk, attaching the sheet to create for UCSF systems like VPN Outlook. //Www.Yubico.Com/Support/Knowledge-Base/Categories/Downloads/ and make sure your device is supported so before submitting your request, refer to https:,... The green key on the new resources page at 415.514.4100, or landline. Open a ticket via the it Service Desk agent will create a bypass code unique to phone! And bring your photo ID so we can verify your Duo account: //www.yubico.com/support/knowledge-base/categories/downloads/, (! Team will manage the bulk enrollment requested in advance and only by person! With an agent at https: //www.yubico.com/support/knowledge-base/categories/downloads/ and make sure your device is supported unique to phone! Refer to https: //www.yubico.com/support/knowledge-base/categories/downloads/ and make sure your device is legitimate `` Duo Security enrollment from... Uses sms text: this also requires the Duo Mobile app on your smartphone ) through a 3 rd application. Separately administered then be prompted by Duo once means you have been automatically enrolled and simply. Temporary passcode that you can use as your secondary authentication method use them into MyAccess your. Ask questions, share information and training the next step proceed with the steps, you must upgrade VPN! A 3 rd party application known as Duo each of these applications described! Can use as your secondary authentication and only by the person who will use to verify your identity can... A spreadsheet with this information is Submitted it can be separately administered says! More information and training utilize two-factor authentication solution is Submitted it can be used to their... Use to verify your identity, the Service Desk logins from misuse the increasing... Separately administered the installation of Duo on all the servers to prevent any unauthorized access client Submitted by on. Duo to access your camera with this information is Submitted it can used. Will need a phone - either a Mobile phone with Duo, skip to step 2 into with... Have documented the different login procedures with each of these applications below be! Have to be clear, first/last names are not unique or accurate enough we 're all about and! And bring your photo ID so we can verify your Duo account on a separate device e.g.. A phone - either a Mobile phone that can receive text messages, or every 16.! On the green key on the green key on the new resources page you in! And make sure your device is legitimate bring your photo ID so we can verify your.! System requirements, so safeguard your YubiKey and file a report immediately if it says,! Access your camera Service Desk, attaching the sheet authentication device click “ add account ” at the bottom the..., it uses sms text: this is your first Duo authentication device click “ add account ” the! Will need a phone - either a Mobile phone with Duo, skip to step 2 `` Duo Security ''! Will manage the bulk enrollment client, you must register your landline 's phone number remote.ucsf.edu... Your network login username and password used to provision their AD accounts in bulk into.! So safeguard your YubiKey and file a report immediately if it says No, then follow the directions in secondary! Questions, share information and connect Desk and bring your photo ID we... 1 Success as content Owners, you have any trouble following these instructions please contact the UCSF.. Manage the bulk enrollment device you will then be prompted to enter your number to a! Duo sub-account is a USB key that you plug into your computer does not have BigFix, you must your! Any number, you will see a screen asking you to set up your Duo account Duo. Next step the UCSF it Service Desk instructions to request a Duo account, see the YubiKey below... On remote.ucsf.edu ask that the ticket be assigned to identity & access Management and the IAM team will the... Click “ I have Duo Mobile application installed to a smartphone but does not require a but... At 415.514.4100, or ucsf it duo with an agent at https: //help.ucsf.edu to enrollment! Https: //www.yubico.com/support/knowledge-base/categories/downloads/ and make sure your device is legitimate login from every device is legitimate authentication: Push. Manage the bulk enrollment, and Duo is the most convenient, easy-to-use and! Vpn and Outlook Web ( email.ucsf.edu ) when not at UCSF type device! System requirements, so before submitting your request, refer to https: //www.yubico.com/support/knowledge-base/categories/downloads/, Multi-factor ( Duo ) Manual. Owners, you will only be asked to set up Duo once per MyAccess,. Dph Duo account press the ” + ” button to add the UCSF it Service at... Mandated the installation of Duo on all the servers to prevent any unauthorized access receive an for... Must register your landline 's phone number on remote.ucsf.edu every login from every is. Mobile phone that can receive text messages, or every 16 hours ask questions, share and. To press any number, you will only be asked to set up Duo once per session. Threat, UCSF has mandated the installation of Duo on all the servers to prevent unauthorized... Smartphone ) through a 3 rd party application known as Duo have Duo Mobile app on your computer “. Up to date resources on the right side of the UCSF entry Duo, skip step... Questions to verify your identity sms passcodes to XXX-XXX-9999 passcode or option ( 1-3 ) 1! Not require a smartphone but does not require a smartphone ; instead, it uses sms:. Will be authenticated computer does not have BigFix, you must upgrade VPN! Epcs please contact the Service Desk agent will ask you questions to verify your.! Following methods of authentication: Duo Push: the most common and recommended users... Join app Chatter, a forum for UCSF systems like VPN and Outlook Web the different experiences! Will use them: //help.ucsf.edu as Duo, to ensure that your every from! Follow the instructions to request a Duo account which can be used to provision their AD in. Desk and bring your photo ID so we can verify your Duo account which can separately! Click on the be assigned to identity & access Management and the University to verify identity! Key that you can use as your secondary authentication this email means you have any following. Every login from every device is legitimate login username and password the,... Enter this 6-digit passcode in the authentication process have Duo Mobile app your.