Embed Size (px)
Citation preview
PROTECTYOURPENN&PERSONALDATA!
TWO-STEP
VERIFICATIONUSER
GUIDETWO-STEPPROTECTSYOURDATAEVENIFYOURPENNKEYPASSWORDISCOMPROMISED
UPENN_TWOSTEP_USERGUIDE 1
TableofContentsTwo-StepVerificationUserGuide................................................................................................................2
1. Introduction....................................................................................................................................2
2. AccesstotheTwo-StepVerificationService...................................................................................2
3. Enroll...............................................................................................................................................3
Phoneapp–Duo..................................................................................................................................5
4. LogOut............................................................................................................................................9
5. AuthenticationUsingDuo...............................................................................................................9
CallorTextAcode..............................................................................................................................12
CallaFriend........................................................................................................................................13
Version...............................................................................................................................................14
UPENN_TWOSTEP_USERGUIDE 2
Two-StepVerificationUserGuide
1. IntroductionTwo-StepVerificationisaservicerequiringtheuseoftwoformsofauthenticationwithyourPennKeytoaccessPennsystems.ThepurposeistoincreasethelevelofsecuritywhenaccessingUniversitysensitivedataandsystems.Besidesselectingastrong,complexpasswordasyourPennKeypassword,youareprovidedwiththreemethodsofverificationtoselectfrom.Thesesecondlayerverificationmethodsinclude:
• A“Push”noticeonamobiledevice• Aland-linephonecall• Enteringacodesentviatextorgeneratedbyaregisteredfob
2. AccesstotheTwo-StepVerificationServiceThefirststepistoenrollintheTwo-StepVerificationservice.Youcanfollowoneoftwopathstoenrollintheservice:
2.1. ThefirstpathistovisitPennInformationSystems&Computingwebsiteatupenn.edu/twostep
2.1.1. YouaredirectedtotheTwo-StepVerificationservicepage.ScrolldowntoHowtoGetServiceandthenclickonenrollinTwo-StepVerification.
2.1.2. OnthePennWebLoginTwo-StepVerificationwebpage.YoucanenrollbyclickingontheENROLLbutton.
UPENN_TWOSTEP_USERGUIDE 3
2.2. ThesecondpathistogodirectlytothePennTwo-StepVerificationWebLoginpageathttps://twostep.apps.upenn.edu
2.2.1. Then,selectENROLL.
2.3. YouaredirectedtoPennWebLogin.EnteryourPennKeyusernameandPassword.ClickontheLoginbutton.
3. EnrollAfterenteringyourPennKeyUsernameandPassword,youaredirectedtotheTwo-StepVerificationSettingswebpage.OntheVerificationsettingspage,youcanclickENROLLtobedirectedtothefirstoutofninesteps.
3.1. Thefirststepistoconfirmyourbirthday.SelectyourbirthdatefromthedropdownmenuforMonth,DayandYearandthenclickNEXT.
UPENN_TWOSTEP_USERGUIDE 4
3.2. ThesecondsteprequiresyoutoverifyyouremailaddresswhichwillbeusedtosendyouconfirmationofchangestoyourTwo-StepVerificationaccount.
3.2.1. VerifyyourPennemailaddress.
3.2.2. ClickNEXT.
3.3. Onthe“Enroll:step3of9-phones”webpage,youareaskedtoenterthreephonenumbers,oraminimumtwo.Itisrecommendedtoenterthreenumbersoratleasttwosoyoucanhavetheoptiontoreceiveatextoracalltologin.Youalsohavetheoptiontoselectatextforonenumber(e.g.yourmobilephone)andacallforanothernumber(e.g.yourofficeorhomephone),orselectatextandacallfortwonumbers(e.g.yourpersonalandworkmobilenumbers).
3.3.1. Enterthreephonenumbers.
3.3.2. Selectfromtherighthandmenuwhetheryouwanttoreceiveatext,voiceorbothforeachnumber.
3.3.3. ClickNEXT.
3.4. Thenextstep,Enroll:step4of9–friend,providesyouwiththeoptiontolisttwotofivelifelines(phonenumbersoremailaddressesofPennaffiliates).Thisenablesyoutolistfriends’emailsand/ornumberswhocanhelpyouaccessyouraccountifyoudon’thaveaccesstoyourverificationdevice.
3.4.1. Enteremailaddressesorphonenumberoffriendsorco-workersaffiliatedwithaPennKey.
UPENN_TWOSTEP_USERGUIDE 5
3.4.2. ClickNEXT.
Note:AnemailmessageissenttothefriendsyoulistedtoinformthemthatyouidentifiedthemasfriendswhocanhelpincaseoftroublelogginginusingTwo-StepVerification.Thisisasampleemailmessagetoafriend.
3.5. Onthenextpage,“Enroll:step5of9-selectmethod,”youareprovidedwiththreeoptionsasasecondmethodofverificationbesidesyourpassword.Theseoptionsinclude:
• Aphoneapp
• Textorphonecall
• Keychainfob
Thenextstepscovertheselectionofeachoption.
Phoneapp–DuoDuoisatwo-factorauthenticationapplicationwhichprovidesasecondstepauthenticationservicetoprotectagainstaccounttakeoveranddatatheft.DownloadingtheDuoapplicationonyoursmartphoneisfree.Penn’sTwo-StepVerificationServiceencouragesallPennKeyholderstoselectDuoasthesecondmethodofverification.
3.6. SelectPhoneapponthe“Enroll:step6of9-selectmethod.”
UPENN_TWOSTEP_USERGUIDE 6
3.6.1. ClickNEXT.
3.7. WhenyouaredirectedtothepagetoinstalltheDuophoneapp,youareaskedtoopentheappstoreonyourphonetosearchforDuoapp.
3.7.1. ClickNEXT.
3.7.2. Onyourmobilephone,gototheappstoretosearchfortheDuoapp.
3.7.3. ClickonOpen.
UPENN_TWOSTEP_USERGUIDE 7
3.8. Onthe“integratetheDuophoneapp”webpage,youaredirectedtotwosteps:
• OpentheDuoapponyourphone
• Select”add”thenscantheQRcode
3.8.1. OpentheDuoapponyourphone.
3.8.2. SelectaddthenscanthisQRcode.
3.8.2.1Toaddanaccount,taptheplus+sign.
3.8.2.2.PointyourphonecameraattheQRcode.
UPENN_TWOSTEP_USERGUIDE 8
3.8.2.3.OnceyourphonecameracapturestheQRcode,theUniversityofPennsylvaniaverificationsecureaccountappears.
Note:IfyoutaponthekeyiconnexttotheUniversityofPennsylvaniaaccounttitle,acodeisgenerated.Inthenextfewsteps,you’lllearnyoucanusethiscodeasasecondverificationmethodbesidesyourpassword,whenaccessingasecurewebsite.
3.8.3. ClickNEXT.
3.9. Thenextpage“generatecodes”informsyouthat“YouhavesuccessfullyenrolledinTwo-StepVerification.You’llnoticealistofvalidcodestouseintheeventyouractivateddeviceisnotavailableornotworking.Pleaseprintthecodeslistandmaintaininasecurelocation.Youcanuseeachcodeonlyonce,inorder.Onceyouuseacode,crossitoutfromthelist.
UPENN_TWOSTEP_USERGUIDE 9
3.9.1. ClickNEXT.
4. LogOut4.1. Apagedisplays“Success:youarenowenrolledinTwo-StepVerification.Ontheupperright
cornerclickLogout.
4.2. YouneedtoclickLogoutagainontheLogoutpagetoterminatethesession.
5. AuthenticationUsingDuo5.1. TypetheURLofthewebpageorwebsiteyouplantoaccess,e.g.
www.knowledgelink.upenn.edu
5.2. Tologin,enteryourPennKeyandpassword.
UPENN_TWOSTEP_USERGUIDE 10
5.3. Approvearequest.WhenyouclickLogin,youaredirectedtoaPennWebLoginpagewhereadditionalauthenticationisrequired.
5.3.1. MakesuretochecktheTrustthisbrowser.Bycheckingthebox,youindicatethatyoudotrustthisbrowser:therefore,youshouldn’tbeaskedtoauthenticateagainwhenusingthisbrowserduringthenext30days.
5.3.2. Onceyouaccessthispage,apushnoticetoauthenticateusingDuoonyourphoneappearsinaformofarequestwaiting.Youareaskedtotapontherequest.
5.3.3. BytappingontheRequestWaitingnotification,youaredirectedtoApproveorDenytherequesttoaccess.GoaheadandtapApprove.
UPENN_TWOSTEP_USERGUIDE 11
5.3.4. BytappingApprove,youhaveauthenticatedyourselfandgrantedaccesstothewebsiteorwebpage.You’llnoticeyounowhaveaccesstothewebpageorwebsiteyouwereattemptingtoaccess.
5.4. Useacode.SometimesaRequestmaynotshowuponyourDuo.Inthiscase:
5.4.1. OpenDuoonyourphoneandtaponthekeyiconnextto“UniversityofPennsylvania”.
5.4.2. Acodeappearsunder“UniversityofPennsylvania”.
5.4.3. EnterthiscodeintheTwo-StepVerificationcodefieldonyourweb-browser.
5.4.4. MakesuretochecktheTrustthisbrowserbox.
UPENN_TWOSTEP_USERGUIDE 12
5.4.5. ClickLogin.
CallorTextaCode6. InEnroll:Step3of9–Phonesyouidentifiedphonethreephonenumbers.Youcheckedwhich
numberstocanreceiveatextmessageandwhichnumbercanonlyreceiveavoicecall.
6.1. Ifyoudon’thaveasmartphone,oryouarenotcarryingyoursmartphoneonyou,youcanclickontheCallorTextmeacodeonthePennWebLogin“Additionalauthenticationisrequired”page.
6.2. ChecktheTrustthisbrowserbox.
6.3. ClickCallortextmeacode.
6.4. You’llreceiveatextwithacodeoraphonecallwithacode.
6.5. EnterthecodeintheTwo-StepVerificationcodefield.
6.6. ClickLogin.
UPENN_TWOSTEP_USERGUIDE 13
CallaFriendInEnroll:Step4of9–Friendyouidentifiedtwoorthreefriendswhocanhelpyouwhenyoudon’thaveaccesstoyourphoneorisexperiencingtroublewithTwo-StepVerification.
7. IntheeventyouareexperiencingtroublewithTwo-StepVerificationordon’thaveyoursmartphoneonyou,and/orarenotnearaphone:
7.1. ChecktheTrustthisbrowserbox.
7.2. ClickCallafriendonthePennWebLogin“Additionalauthenticationisrequired”page.
7.3. Yourfriendwillbecontactedtogenerateacode.Thisfriendisauthorizedtocompletetheprocess.YourfriendwillaccessaTwo-StepVerification:helpafriendwebpage.
7.4. Yourfriendclicksonabuttontogenerateacode.
7.5. Thefriendprovidesyouwithacode.
7.6. EnterthecodeintheTwo-StepVerificationcodefield.
7.7. ClickLogin.
_________________________________________________________________________________
