Two-Factor Authentication

Transcription

1 Two-Factor Authentication The two-factor authentication system provides an additional level of security when signing in to Ryerson web applications via Ryerson s Central Authentication Service. When you enter your username and password for a system, if the two-factor authentication is enabled, you will get another prompt to enter a time sensitive pass code. The pass code is generated by an application on your mobile device (Ryerson Authenticator). How to Activate Two-Factor Authentication How to Update or De-activate Two-Factor Authentication How to revoke all trusted devices What to expect after Two-Factor Authentication is activated How to Activate Two-Factor Authentication 1. Go to the my.ryerson portal and click on the link: Log into my.ryerson 2. Under the Manage My Resources, click on Self Service. Two-Factor Authentication Computing and Communication Services - Ryerson University 1

2 3. Under the Self Service group of resources, click on Two-Factor Authentication placed under Personal Account Security Settings. Note: This option allows you to set up this added layer of security to your mobile device. The Personal Account Security Settings under the Self Service options module now consists of: Change Password Activate Google Token Update Challenge Phrase Two-Factor Authentication 4. Next, you will see the Two-Factor Authentication screen (NOTE: You can click on the question mark next to You don't have two-factor authentication set up for your account to get an expanded screen that elaborates on two-factor authentication. There is a (read more) link within the same box to get more information. Two-Factor Authentication Computing and Communication Services - Ryerson University 2

3 5. Click on Set up button to choose the supported Mobile Devices Note: Click here to access the instructions for users without the required mobile device. 6. Once a mobile device is clicked, the instructions specific to that mobile device will be shown next. For illustration purposes, ios (iphone, ipod Touch, ipad) option is selected. Detailed instructions for installing the Ryerson Authentication app on your mobile device can be found here: 1. Android 2. IOS (iphone, ipod Touch, ipad) Two-Factor Authentication Computing and Communication Services - Ryerson University 3

4 7. If your device cannot scan the Quick Response Code (QRC) for any reason, please click the Can t scan the Quick Response Code? link. The section expands with instructions on manually setting up your mobile device. The secret key shown in Step 4 is randomly generated. 8. You have the option to enforce two-factor authentication for either: every CASified application (as long as you are logged into CAS, you will only need to enter your two-factor authentication once), or only applications that require strong authentication (e.g. Research portal) Two-Factor Authentication Computing and Communication Services - Ryerson University 4

5 This option can be updated at any time. When you scan the QRC or manually enter your secret key, the mobile application will generate a time-sensitive, auto-refreshed, 6-digit number. This code is to be entered into the text field, and you must then click Verify and Save to save your Two-Factor Authentication factor settings. 9. Once the QR code is scanned or the secret key is manually entered correctly, you will get the confirmation screen. By using the option Show/Generate Backup Codes, you can generate backup codes in the event you are not able to access your mobile device for any reason. These are one-time use, randomly generated codes. At this point, you can click "Generate New Backup Codes" to generate a new set of codes, or click Back to return to the Two-Factor Authentication menu. How to Update or De-activate 2-Factor Authentication 1. Login to the my.ryerson portal Two-Factor Authentication Computing and Communication Services - Ryerson University 5

6 2. Under the Manage My Resources, click on Self Service. 3. Under the Self Service group of resources, click on Two-Factor Authentication placed under Personal Account Security Settings. 4. When you click for Two-Factor Authentication screen, you will be presented with the Revoke mobile device or Show Backup Codes. You may want to revoke your device if you have either lost or replaced your mobile device or if you no longer wish to use Two-Factor Authentication. How to Revoke All Trusted Browsers/Devices 1. Login to the my.ryerson portal 2. Under the Manage My Resources, click on Self Service. 3. Under the Self Service group of resources, click on Two-Factor Authentication placed under Personal Account Security Settings. 4. When you click for Two-Factor Authentication screen, at the bottom of the screen, you will see Revoke all trusted browsers/devices button. You may want to click this button if you have either lost or replaced your mobile device or if you no longer wish to use Two-Factor Authentication. Two-Factor Authentication Computing and Communication Services - Ryerson University 6

7 You can click on the tool tip (blue question mark icon) to get an expanded version with more details about trusted devices as shown: Two-Factor Authentication Computing and Communication Services - Ryerson University 7

8 What to expect after Two-Factor Authentication is activated 1. Go to the my.ryerson portal and click on the link at the top: Log into my.ryerson 2. After the username and password are accepted, another screen will be shown asking you to use your onetime verification code. Two-Factor Authentication Computing and Communication Services - Ryerson University 8

9 NOTE: The verification code is the code you are supposed to get from the Ryerson Authenticator app on your mobile device each time you login. 3. Click in the box for I trust this device... option, if you don't want to enter a verification code everytime you login to CAS. 4. You can also click on the question mark beside this option to see expanded explanation as shown below: Two-Factor Authentication Computing and Communication Services - Ryerson University 9

10 5. The One-Time Verification form contains links to various questions. Please use them to find out more. 6. Use the my.ryerson portal and applications as you normally do. Two-Factor Authentication Computing and Communication Services - Ryerson University 10