Table of contents
How does multi-factor authentication work?
Multi-factor authentication (MFA) uses two levels of security to verify your identity:
- Level 1: something you know (that is, your username, passphrase, answer to a security question).
- Level 2: something you have (that is, your phone, tablet, hardware token).
At the University of Maryland (UMD), your Directory ID and passphrase serve as the first level of security. UMD uses Duo to provide the second level of security through your choice of various supported authentication methods.
This second level of security will require you to verify your identity through the Duo authentication prompt. To get started, view the steps in the Set your default Multi-Factor Authentication Device article. Contact the Service Desk for assistance with multi-factor authentication.
How do I manage my settings?
Manage your MFA settings and devices at the Set your default Multi-Factor Authentication Device site.
How do I authenticate?
You can choose an authentication method based on the devices you have enrolled in.
NOTE: Information on authentication before the Universal Prompt update is covered in Duo Guide to Two-Factor Authentication.
- Duo Push.
- Duo Mobile Passcode.
- Fido2/Webauthn Security Key.
- Hardware Token Passcode.
- Phone Call.
- Bypass Code.
- Bypass codes are pre-generated and expire after 180 days.
- You will need to enroll in MFA and register a mobile or landline phone number.
- Generate them from the Multi-Factor Authentication Profile webpage, Terrapin Technology store or an ID notary in your department.
What device is best for me?
| Device | Authentication methods | Advantages and disadvantages |
|---|---|---|
|
Smartphone, Tablet |
|
|
|
Cell Phone, Landline |
|
|
| Hardware token |
|
|
| Bypass codes |
|
|
Contact the Service Desk if you have any questions.