All faculty and staff are required to use Two-Factor Authentication (2FA) to log in to any system or service that requires 2FA, which includes WebAccess—Penn State’s s login system for such services as WebMail (and other Penn State email services), ANGEL, and the Employee Self-Service Information Center (ESSIC). This 2FA requirement extends to times of travel, whether that means travel in the U.S. or abroad.
2FA is flexible enough to meet the needs of travelers; however, it is highly recommended anyone traveling plan before leaving how he/she is going to use 2FA while traveling. Whether traveling or using 2FA in your regular work location, it is highly recommended that you have two devices enrolled in case your primary device is unavailable (lost, stolen, not available, malfunctioning, etc.).
Using 2FA While Traveling
- Use Smartphone Normally
It’s up to the user to know and understand the implications of using his/her cell service while abroad (cost to use the phone abroad, cellular service availability where traveling, etc.). If the user is satisfied with those conditions and is planning to use his/her device normally while traveling, then using the device as the second-factor will not change.
- Use Duo Mobile App to Generate Passcode (applies to smartphone or tablet)
If there are concerns about using the smartphone (or tablet) normally while traveling (lack of connectivity, data charges, cost, etc.), then an enrolled user can simply use the Duo Mobile app to generate a passcode each time authentication is needed. The passcode can then be used as the second factor. This can be done regardless of the implications of using cellular service or whether there is any Internet connectivity. There is never a charge to the user to generate a passcode through the app. It is identical to using a hardware token.
You can also request 10 one-time use passcodes to be sent by text message, which can be used for authentication at a later time. For more information on passcodes, see the SMS Passcodes FAQ
Enroll International Phone
Enrolling an international phone is an option while traveling abroad; however, please note that you will need a registered 2FA device in order to gain access to the 2FA self-service portal in order to enroll the international phone.
For those who will not be able to use their mobile devices while traveling, another option is the purchase of a Duo hardware token before leaving. While Duo tokens are readily available upon request, allow a couple of days for the purchase to be completed and the Duo token to be delivered to ensure that the token is available when needed.
For more information, see Hardware Tokens Frequently Asked Questions.
- Frequently Asked Questions: Using 2FA when Traveling