Multifactor Authentication BuckeyePass Multifactor Authentication

What is Multifactor Authentication? ENTERPRISE SECURITY What is Multifactor Authentication? Adds a 2nd layer of security Combines something you know with something you have (i.e.: password + code sent to mobile device) Many banking websites, social media sites and email providers have options for multi-factor authentication

Carmen Canvas is NOT affected by this change. ENTERPRISE SECURITY All students, faculty and staff will be required to use BuckeyePass to access information from Buckeye Link student systems beginning Sunday, November 5. Carmen Canvas is NOT affected by this change. Open enrollment is in October and BuckeyePass registration will be required for benefits enrollment

= Why? Our highest priority Increase in phishing in higher ed ENTERPRISE SECURITY Why? Increase in phishing in higher ed Increase in identity theft crimes Protecting personal and financial information and university data Our highest priority = Overview A good way to think of two-step authentication is like keeping a safe in your house. Your front door has a lock on it (password) that keeps your things safe. Some of your possessions — such as a passport or heirlooms — are too important to be trusted to an ordinary door lock. You keep those items securely inside your safe, requiring a would-be thief to get past both your front door and your safe's lock before they can steal your most valuable possessions. Traditionally, when you want to log into your account at the university, you've used your password to do so, similar to opening your front door with your house key. While a password is a good way of keeping your account safe, if someone figures yours out, they can easily use that information to access your private data and see whatever you're allowed to see. Two-step authentication makes it much harder for people to access your most sensitive or important data, by providing you with a second way to protect it, much like the safe in your house. Someone who wants to access two-step protected data in your account will need to use two "authentication steps" before they can get into it.  The first authentication step is  your OSU username (lastname.n) and OSU password.  The second authentication step is provided by a physical device that you have with you.

Cybercriminal logs in as the student ENTERPRISE SECURITY Cybercrime: An Illustration A student’s password is stolen by a cybercriminal using a phishing scam or other tool. Cybercriminal logs in as the student The criminal can apply for and accept financial aid or divert existing financial aid from the student's bank account to the cybercriminal’s bank account Prevents others from logging into your account even if they know your password Users can flag activity as fraudulent and BuckeyePass admins will be alerted

What makes BuckeyePass safer? ENTERPRISE SECURITY What makes BuckeyePass safer? Something you know + something you have (your password) + (your phone or mobile device) Prevents others from logging into your account even if they know your password Users can flag activity as fraudulent and BuckeyePass admins will be alerted

ENTERPRISE SECURITY What is BuckeyePass? A multifactor authentication service powered by Duo Security Users download the Duo app on their mobile device What is BuckeyePass? A multi-factor-authentication service powered by Duo Security =

How do I use BuckeyePass? ENTERPRISE SECURITY How do I use BuckeyePass? Begin by logging Receive a numerical key Enter numerical key in as normal on your mobile device to complete login

Several ways to confirm ID: ENTERPRISE SECURITY Several ways to confirm ID: Install Duo Mobile app on a smartphone or tablet Receive passcodes via text Receive a call via landline phone Use a hard token

ENTERPRISE SECURITY All faculty and staff will be required to use BuckeyePass to access Employee Self Service beginning Sunday, Nov. 5. Open enrollment is in October and BuckeyePass registration will be required for benefits enrollment

ENTERPRISE SECURITY Enrollment Tips: Recommended Device: Smartphone * Not all Windows platforms are supported Register At Least 2 Devices Test registered devices Users must know how to download applications onto their device (Duo App) Explain authentication options to users Recommended Device: Smartphone While BuckeyePass is designed to work with multiple device types, a smartphone is the recommended device. The smartphone is always with you (as opposed to having something extra to carry with you), provides the greatest level of security, and permits you to use the Duo Mobile app. The app generates passcodes and can send push notifications to allow for easy, one-tap authentication. Complete Enrollment Once you begin the enrollment process, make certain that you follow it through until completion. If you have only partially completed the enrollment, then it’s possible that a BuckeyePass-protected service (such as PeopleSoft Financials) will ask for your authentication but the device will not be registered. If that’s your only device, then you would be unable to authenticate when prompted. Register at Least Two Devices It’s important to have at least two devices registered in BuckeyePass to prevent difficulty authenticating if there is a problem with your first device. For instance, if you have both your smartphone and office phone enrolled, you can still authenticate from your office if you accidentally leave your smartphone at home or if you phone needs to be charged. For more information, visit our Knowledge Base article BuckeyePass – Adding Devices. Not All Windows Platforms Supported by 2FA Certain Windows platforms are not supported by Duo Mobile, so they will not work for BuckeyePass. Specifically, those with a full Windows operating system are not supported. Those with a mobile operating system, such as Windows Phone or Windows Mobile, are supported (and will work for BuckeyePass). If your Windows platform on your device does not have an app store and is not supported, then there are a number of other device options available to enroll. Test Devices To test devices, visit buckeyepass.osu.edu and click on the Enroll/Manage button in the upper right corner of the page (where you originally enrolled a device or multiple devices). After successfully entering your user ID and password, you will be prompted to authenticate with a registered device. If the authentication is successful, then your enrollment has been completed properly for that device. Repeat the test authentication for each enrolled device. Know How to Download Applications on Your Device In order to take advantage of the push notification features offered by BuckeyePass, it is important to be comfortable with downloading applications on a smartphone. Some users may not have the app store set up and in use on their device. Searching online can turn up several articles and YouTube videos for users to reference. For example, in google you can type “How to set up an apple store account”, “How to use the android app store”, or “How to download apps on a windows phone”. If that is not an option, it is recommended to contact the service provider for your phone (i.e. AT&T) or stop in at a local Apple Store or Microsoft Store if using iOS or windows devices if in person instruction is preferred. Understand the Authentication Options We have covered all of the options available to users but it is important that they understand how each of them work and choose the option, or combination of options, that works best for them. At the end of the day, each option will produce the same result, access to a system. Users can review the Knowledge Base article on buckeyepass.osu.edu titled BuckeyePass – Authenticating for more information.

ENTERPRISE SECURITY Finished enrolling? Try our test button to ensure your chosen method of authentication is working. Recommended Device: Smartphone While BuckeyePass is designed to work with multiple device types, a smartphone is the recommended device. The smartphone is always with you (as opposed to having something extra to carry with you), provides the greatest level of security, and permits you to use the Duo Mobile app. The app generates passcodes and can send push notifications to allow for easy, one-tap authentication. Complete Enrollment Once you begin the enrollment process, make certain that you follow it through until completion. If you have only partially completed the enrollment, then it’s possible that a BuckeyePass-protected service (such as PeopleSoft Financials) will ask for your authentication but the device will not be registered. If that’s your only device, then you would be unable to authenticate when prompted. Register at Least Two Devices It’s important to have at least two devices registered in BuckeyePass to prevent difficulty authenticating if there is a problem with your first device. For instance, if you have both your smartphone and office phone enrolled, you can still authenticate from your office if you accidentally leave your smartphone at home or if you phone needs to be charged. For more information, visit our Knowledge Base article BuckeyePass – Adding Devices. Not All Windows Platforms Supported by 2FA Certain Windows platforms are not supported by Duo Mobile, so they will not work for BuckeyePass. Specifically, those with a full Windows operating system are not supported. Those with a mobile operating system, such as Windows Phone or Windows Mobile, are supported (and will work for BuckeyePass). If your Windows platform on your device does not have an app store and is not supported, then there are a number of other device options available to enroll. Test Devices To test devices, visit buckeyepass.osu.edu and click on the Enroll/Manage button in the upper right corner of the page (where you originally enrolled a device or multiple devices). After successfully entering your user ID and password, you will be prompted to authenticate with a registered device. If the authentication is successful, then your enrollment has been completed properly for that device. Repeat the test authentication for each enrolled device. Know How to Download Applications on Your Device In order to take advantage of the push notification features offered by BuckeyePass, it is important to be comfortable with downloading applications on a smartphone. Some users may not have the app store set up and in use on their device. Searching online can turn up several articles and YouTube videos for users to reference. For example, in google you can type “How to set up an apple store account”, “How to use the android app store”, or “How to download apps on a windows phone”. If that is not an option, it is recommended to contact the service provider for your phone (i.e. AT&T) or stop in at a local Apple Store or Microsoft Store if using iOS or windows devices if in person instruction is preferred. Understand the Authentication Options We have covered all of the options available to users but it is important that they understand how each of them work and choose the option, or combination of options, that works best for them. At the end of the day, each option will produce the same result, access to a system. Users can review the Knowledge Base article on buckeyepass.osu.edu titled BuckeyePass – Authenticating for more information.

ENTERPRISE SECURITY Need more help? Extensive instructional articles are available in our Knowledge Base. Recommended Device: Smartphone While BuckeyePass is designed to work with multiple device types, a smartphone is the recommended device. The smartphone is always with you (as opposed to having something extra to carry with you), provides the greatest level of security, and permits you to use the Duo Mobile app. The app generates passcodes and can send push notifications to allow for easy, one-tap authentication. Complete Enrollment Once you begin the enrollment process, make certain that you follow it through until completion. If you have only partially completed the enrollment, then it’s possible that a BuckeyePass-protected service (such as PeopleSoft Financials) will ask for your authentication but the device will not be registered. If that’s your only device, then you would be unable to authenticate when prompted. Register at Least Two Devices It’s important to have at least two devices registered in BuckeyePass to prevent difficulty authenticating if there is a problem with your first device. For instance, if you have both your smartphone and office phone enrolled, you can still authenticate from your office if you accidentally leave your smartphone at home or if you phone needs to be charged. For more information, visit our Knowledge Base article BuckeyePass – Adding Devices. Not All Windows Platforms Supported by 2FA Certain Windows platforms are not supported by Duo Mobile, so they will not work for BuckeyePass. Specifically, those with a full Windows operating system are not supported. Those with a mobile operating system, such as Windows Phone or Windows Mobile, are supported (and will work for BuckeyePass). If your Windows platform on your device does not have an app store and is not supported, then there are a number of other device options available to enroll. Test Devices To test devices, visit buckeyepass.osu.edu and click on the Enroll/Manage button in the upper right corner of the page (where you originally enrolled a device or multiple devices). After successfully entering your user ID and password, you will be prompted to authenticate with a registered device. If the authentication is successful, then your enrollment has been completed properly for that device. Repeat the test authentication for each enrolled device. Know How to Download Applications on Your Device In order to take advantage of the push notification features offered by BuckeyePass, it is important to be comfortable with downloading applications on a smartphone. Some users may not have the app store set up and in use on their device. Searching online can turn up several articles and YouTube videos for users to reference. For example, in google you can type “How to set up an apple store account”, “How to use the android app store”, or “How to download apps on a windows phone”. If that is not an option, it is recommended to contact the service provider for your phone (i.e. AT&T) or stop in at a local Apple Store or Microsoft Store if using iOS or windows devices if in person instruction is preferred. Understand the Authentication Options We have covered all of the options available to users but it is important that they understand how each of them work and choose the option, or combination of options, that works best for them. At the end of the day, each option will produce the same result, access to a system. Users can review the Knowledge Base article on buckeyepass.osu.edu titled BuckeyePass – Authenticating for more information.

Register at by Nov. 5 at buckeyepass.osu.edu ENTERPRISE SECURITY Register at by Nov. 5 at buckeyepass.osu.edu