Duo Multi-Factor Authentication

Multi-factor authentication (MFA) requires you to verify your identity using one or more factors in addition to username+password, such as your phone or other mobile device. This process prevents anyone but you from logging in, even if they know your password.

This video helps illustrate how the process will work.

Multi-factor authentication will add an additional layer of security to LC State accounts. Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked - you might not even know someone is accessing your account. Multi-factor authentication helps keep your account secure even if your password is compromised.

Duo was applied to Office 365 on 2/15/2023 and Colleague on 6/2/2023.

WarriorWeb and Canvas were added on 7/15/2024.  

VPN was added on 8/1/2024.

New employees will receive a prompt to enroll when signing into their account. You can watch this 35 second video to get a quick demo of the enrollment process. 

If you would rather use a security key instead of a smartphone then contact helpdesk@lcsc.edu. There is a $90 charge for the security key.  

We strongly recommend you choose your smartphone as it provides the best experience with Duo multi-factor authentication.  This device will need to be with you when you need to access your Office 365 applications.  

• Install the Duo Mobile app on your smartphone, smart watch or tablet. The app provides two options: push notifications or Mobile Passcode.
  • Get the iOS app from the Apple Store
  • Get the Android app from the Play Store

If you are unable to download the Duo Mobile app because your smartphone is not supported, choose not to use your smartphone, or do not have a smartphone, then you can utilize a USB security key. The security key will be purchased by your department and costs $90.  

The policy is set to every 14 days, but some circumstances may require you to log in more often, including: clearing the browsing history; accessing certain websites; using certain browser settings; using more than one device and web browser.

If you don't have your two-factor device, contact the Help Desk to request a temporary bypass code to log in.  If you lose your two-factor device, contact the Help Desk immediately so we can disable your device and work with you to determine a backup method.    

Open the Duo Mobile app and the push should be there waiting. If it still doesn't appear right away, you can "drag" the Duo Mobile screen down to force a refresh and the prompt should appear as expected. Also check "Notifications" on your phone to make sure you are allowing Duo Mobile to notify you.

If you get a random Duo Push, use the ‘Deny’ button to reject the Duo multi-factor authentication, then push ‘Yes’ to report the push as fraudulent, and report it to the Help Desk so we can reset your password.  Never authorize a Duo Push if you did not initiate it.  If you receive an unexpected Duo Push it could be a malicious actor who has your password and is trying to access your account.