Multi-Factor Authentication
Explaining Multi-Factor Authentication (MFA)
MFA (sometimes referred to as "two-step authentication") involves entering your username and password as you currently do, but then providing an additional source of information to verify your identity using something you have, such as your smartphone, a simple cellphone or landline, or a security token.
This allows us to better protect your account against the risk of data breaches and compromised passwords - even if someone is able to ascertain your username and password, it's unlikely that they would also have access to your cellphone.
Why does YC require MFA?
Quite simply, it's a best practice to require MFA for access to critical services or services that store sensitive information. It's also becoming a routine question that we are asked by our insurance providers and state auditors. Beyond that, requiring MFA allows us to simultaneously improve the security of (and reduce the risk to) the College while also providing additional benefits to those who adopt MFA, thereby making the process a positive experience for everyone.
When will I get it?
All YC employees are automatically enrolled when their accounts are created.
Students, click here
Student 2FA Duo Two-factor Authentication
Having trouble w/ MFA?
Need help enrolling, modifying, or removing a device? Please contact the ITS Helpdesk - helpdesk@yc.edu or 928-776-2168 (24/7) for assistance.
How many devices can/should I enroll?
You can enroll as many devices as you like, however we recommend that you associate at least two devices with your account. We strongly recommend that the primary device associated with your account is a smartphone (or cellphone). Beyond that, register whatever device will be most convenient to you - your office telephone, your home telephone, etc.
What kinds of devices can I enroll?
You can enroll smartphones, "dumb" phones (or any cellular phone operating only for voice calls or SMS/text messages), landline telephones, security keys, and security tokens.
What happens if I don't have access to my enrolled device, or I don't have cellular or wifi service?
Don't worry - if you enrolled a smartphone and have the device but no service, you can open the "Duo Mobile" app and tap the key icon next to the "Yavapai College" application to generate a one-time code. Lost your phone or away from your enrolled landline? Call the ITS Helpdesk for assistance (see contact info above).
What if I lose an enrolled device?
Please contact the ITS Helpdesk as soon as practical for assistance. The Helpdesk can assist with enrolling a new device and removing the old one from your account.
My smartphone is being repaired or replaced - what do I do in the meantime?
Please contact the ITS Helpdesk for a temporary security token that can be assigned to you temporarily while your enrolled device is being repaired/replaced.
Q. What alternatives to using the Duo App for Multi-Factor Authentication are available?
A. To enroll in Multi-Factor Authentication (MFA) most users have configured the Duo app on a smartphone and use Duo Push for the fastest, easiest, and most secure authentication method.
Some users, however, may need an alternative to enrolling a mobile device/smartphone. Duo supports a variety of devices that can be used in addition to, or instead of Duo Push on your phone. Please see the supported alternatives below:
- Landline/Non-Smartphone
The Duo platform can send an automated phone call to an enrolled landline or non-smartphone that you can answer and respond to during the login process.
During the enrollment process, choose “Landline” as the device type, and enter the phone number belonging to the landline or non-smartphone. The Duo App is not necessary for this device type.
- Hardware Token Key
During your next MFA login, select “Enter a Passcode” as the authentication method, and with your cursor active in the passcode field, tap your security key to cue it to provide the response code.
Q. How do I get a Hardware Token for DUO 2FA.
A. YC Student Development and Libraries have small stock of hardware tokens for Duo 2FA for students who do not have a smart device or landline to authenticate.
Q: I received an unexpected Duo Push notification from my Duo Mobile App, what should I do?
A: The Duo Push notification is a login request from your account, if it is not initiated by you or is unexpected, please tap ‘Deny’ to reject the request.
Q. What options do I have for DUO notifications?
A. DUO Push mobile app, one-time pass code, SMS text, voice call, or hardware token.