While enrolling into Penn State’s Two-Factor Authentication (2FA) service is easy (How to Enroll in Two-Factor Authentication), here are a few tips that will help to ensure a successful enrollment:
- Recommended Device: Smartphone
While 2FA is designed to work with multiple device types, a smartphone is the recommended device. The smartphone is always with you (as opposed to having something extra to carry with you), provides the greatest level of security, and permits you to use the Duo Mobile app. The app generates passcodes and can send push notifications to allow for easy, one-tap authentication.
- Complete Enrollment
Once you begin the enrollment process, make certain that you follow it through until completion. If you have only partially completed the enrollment, then it’s possible that a 2FA-protected service (such as WebAccess) will ask for your authentication but the device will not be registered. If that’s your only device, then you would be unable to successfully authenticate when prompted.
- Register at Least Two Devices
It’s important to have at least two devices registered in 2FA to prevent difficulty authenticating if there is a problem with your first device. For instance, if you have both your smartphone and office phone enrolled, you can still authenticate from your office if you accidentally leave your smartphone at home or if you phone needs to be charged. For more information, visit the How to Manage Existing Devices and Enroll Multiple Devices page.
- Not All Windows Platforms Supported by 2FA
Certain Windows platforms are not supported by Duo Mobile, so they will not work for 2FA. Specifically, those with a full Windows operating system are not supported. Those with a mobile operating system, such as Windows Phone or Windows Mobile, are supported (and will work for 2FA). If your Windows platform on your device does not have an app store and is not supported, then there are a number of other device options available to enroll.
- Test Devices
To test devices, log out of WebAccess and then return to self-service portal (where you originally enrolled a device or multiple devices). After successfully entering your user ID and password, you will be prompted to authenticate with a registered device. If the authentication is successful, then your enrollment has been completed properly for that device. Repeat the test authentication for each enrolled device.
For more tips and answers to common questions, visit the Frequently Asked Questions page.