We’re down to the wire now; one day remains to enroll in 2FA before it becomes mandatory on May 10! If you have not enrolled by tomorrow, you will not be able to access anything protected by WebAccess until you enroll. This includes services such as UCS, ESSIC, the Libraries’ Intranet, My Library Account, Angel, and Canvas.

Go to Get2FA.psu.edu to enroll and for answers to frequently asked questions. Remember that you will need the last four digits of your nine-digit Penn State ID to enroll.

Do New Employees Need to Enroll in 2FA?

Effective tomorrow, Tuesday May 10, 2016, 2FA is mandatory for all Penn State faculty and staff. All new employees will be required to enroll in 2FA the first time they use WebAccess to log in to a protected service or resource. WebAccess will check the primary affiliation of the user and if they have not enrolled yet, they will get prompted to do so after providing their user name and password on the WebAccess (thumbprint) screen.

Thank You!

Thank you to those of you who have enrolled — we were at 91 percent compliance as of May 5!

I was glad to see many of you take advantage of the I-Tech 2FA drop-in sessions. A huge thank you to Ryan Johnson for managing the sessions and responding to questions about 2FA. Please keep the questions coming – contact Ryan at rxj15@psu.edu.

– submitted by Dace Freivalds, I-Tech

submitted by Dace Freivalds, I-Tech

As of April 21, the Libraries has reached 82% enrollment in two-factor authentication, or 2FA.

We’re getting close — 424 or 82% of the Libraries’ 519 employees have enrolled in 2FA as of April 21. Kudos to the following departments and campus libraries for achieving 100% enrollment by April 21: Digitization and Preservation, MTSS, Knowledge Commons, Publishing & Curation Services, I-Tech, Altoona, Berks, Brandywine, Fayette, Greater Allegheny, Lehigh Valley, Shenango, and Wilkes Barre!

Not Enrolled Yet?

Identity Services will continue to send weekly email reminders to all individuals in the Libraries who have not yet enrolled. Remember that as of May 10 you will not be able to access anything protected by WebAccess until you enroll. This includes services such as UCS, ESSIC, the Libraries’ intranet, My Library Account, Angel, and Canvas.

Go to Get2FA.psu.edu to enroll and for answers to frequently asked questions. You can also stop by I-Tech during one of the four remaining drop-in sessions. The sessions are on Friday, April 29, and Friday, May 6, at 10:00 a.m. and 3:00 p.m. in the I-Tech Training Room in Paterno Library, University Park; registration is not required. Bring your Penn State ID with you (or jot down the last four digits of your nine-digit Penn State ID) — you will need this information to enroll. If these times don’t work for you, contact Ryan Johnson (rxj15) to set up an individual session.

2FA Tip of the Day – What should I do If I Get Locked Out of 2FA?

As a security measure, you will be locked out of 2FA after ten consecutive attempts to log in to WebAccess using 2FA fail. This might be caused by not responding to multiple push notifications because the Duo Mobile app is not open, by selecting the wrong device (calling an office landline when at home or by selecting a device that’s not properly enrolled), or automatic log in attempts by a 2FA-protected system when a user isn’t expecting them. Regardless, once you’ve been locked out by 10 consecutive failed log in attempts, you will need to contact the IT Service Desk at 2FAsupport@psu.edu or 814-865-4357 for assistance.

Thank you to everyone who has enrolled in 2FA. Identity Services did not release figures for the past week in time for this update, but given the number of individuals who mentioned to me last week that they had enrolled, we are making steady progress. If you have not yet enrolled, you will receive a second email reminder from Identity Services this week.

Do New Employees Need to Enroll in 2FA?

Yes. 2FA is mandatory for all Penn State faculty and staff. New employees will be required to enroll in 2FA the first time they use WebAccess to log in to a protected service or resource. WebAccess will check the primary affiliation of the user and if they have not enrolled yet, they will get prompted to do so after providing their user name and password on the WebAccess (thumbprint) screen.

Using Google Voice as a 2FA Device

If you have established a Google Voice number and have Gmail, you can use the Voice number as a backup number for Duo. Register the number with 2FA/Duo as a landline. Then for those times when you don’t have a second physical factor, you can have Duo call your Google Voice number. Note that you must have Gmail open for the call to show up. The nice thing about using Google Voice as a 2FA authentication method is that you do not need to have a second physical device on hand, but can access the call through your computer.

Per the Google Voice FAQ, you can use many of Google Voice’s features for free, including making most calls to the U.S. and Canada. However, using some features of Google Voice may impact your phone bill so be sure to read the Google Voice FAQ. Please note that this is not an official endorsement of Google Voice and it is up to you to verify rates, privacy and other terms. Thanks to Charlie Morris in I-Tech for this hint.

Where Can I get Help?

I-Tech has scheduled one hour drop-in sessions for every Friday through May 6. The sessions are at 10:00 a.m. and 3:00 p.m. in the I-Tech Training Room on April 22, 29 and May 6; registration is not required. Bring your Penn State ID with you (or jot down the last four digits of your nine-digit Penn State ID) – you will need this information to enroll. If you cannot make these session, but would like help enrolling, contact Ryan Johnson (rxj15@psu.edu) to arrange a one-on-one session.

For instructions, enrollment tips, and answers to frequently asked questions, visit Get2FA.psu.edu. You can also refer to I-Tech’s 2FA FAQ for answers to your questions. And if you bump into a problem, submit a Service Desk request and we’ll provide assistance.

– Submitted by Dace Freivalds, I-Tech