Duo Two-Factor Authentication (2FA) helps protect you against online attacks designed to gain unauthorized access to your Odin account and information. Duo 2FA is required for Single Sign-On on (SSO) for all employees.
...
Table of Contents
...
Duo 2FA adds a second layer of security when you sign in to certain systems, such as PSU's Single Sign-On (SSO) or Virtual Private Network (VPN). To access a protected system, you’ll combine your Odin account information with a secondary credential delivered through your phone, mobile device, hardware token, or security key. This prevents anyone else from signing in with your account, even if they know your password.
...
PSU employees automatically receive protections for Single Sign-On (for SSO) and the Virtual Private Network (VPN).
PSU students automatically receive protection for the Virtual Private Network (VPN). To receive the Odin password extension benefit, students must also add protection to Single Sign-on (SSO)to SSO.
Enroll in Duo 2FA With a Mobile Device and the Duo App (recommended)
To enroll in Duo with a mobile device and the Duo app (recommended), follow these steps. Instructions for enrolling alternative devices can be found at Enroll and manage settings in Duo Two-Factor Authentication (2FA).
Sign in to the Odin Account Manager (OAM) at oam.pdx.edu.
Select Set up Duo / Manage Duo Settings.
Select Start setup.
Choose your device from the options displayed.
Note: Hardware tokens can't be used as your only authentication device, but can be added as a secondary option later.Select your country and enter your phone number.
Note: Use the number of a smartphone, landline, or mobile phone that you'll have with you when you're signing in (you can enter an extension if you choose "Landline").Confirm that you entered the correct number.
Check the box and select Continue.
Choose your device's operating system.
Follow the platform-specific instructions on the screen to install the Duo Mobile app.
Activate Duo Mobile by scanning the barcode on screen with the app's built-in barcode scanner.
Note: After you scan the barcode, click select the Continue button. If you can't are unable scan the barcode, click select the Can’t scan the barcode? link and follow the instructions.Follow the platform-specific instructions.
Select Enroll another device to add an additional device (such as a backup phone), or select I'm done enrolling devices to continue to the verification prompt
Add Duo Protections to Single Sign-
...
on (SSO)
To add Duo protections to Single Sign-On (SSO), follow these steps:
Sign in to the Odin Account Manager (OAM) at oam.pdx.edu.
Select Update Duo Protections.
Select the checkbox next to the Single Sign-On (SSO) SSO service.
Select Continue.
On the Successfully updated Duo protections screen, select OK.
...
On trusted devices, you can configure Duo to remember you for 30 days. To do this:
Sign in to the Odin Account Manager (OAM) at oam.pdx.edu.
Select Manage Duo Settings.
Select the Settings button, then select My Settings & Devices. You will be prompted to confirm your identity with Duo authentication2FA. After you have completed authentication, you can adjust your Duo settings
From the My Settings & Devices screen, in the When I log in drop-down menu, select Ask me to choose an authentication method.
The next time you authenticate with Duo on a trusted device, select the Remember me for 30 days option.
Reconnect Trusted Device
...
after Changing Phones
Sign-in to the Odin Account Manager (OAM) at http:// oam.pdx.edu.
When prompted, select ‘Other Options’.
Select Text Me New Codes or Call me.
Enter the code sent via text message to your phone, or, answer the call and select 5.
Select Manage Duo SettingsSelect , Click to continueSelect ‘, Other Options’Select , and then Manage devices.
YouYou will be prompted to confirm your identity again with Duo authentication.
Repeat steps two through four.
For the device you are wanting to replace, select the option I have a new phone in from the device selection boxmenu.
Once selected, follow the set-up steps for your new device.
...
PSU Employees may use a Duo Token as an authentication method, available from the Helpdesk. With a Duo Token, you can generate a passcode, even when you don’t have cell service or an internet connection.
Other Options
See Refer to Enroll and manage settings in Duo Two-Factor Authentication (2FA) for details on your other device and authentication options.
...