Duo Security – Multifactor Authentication

In May 2018, OIT activated a product called Duo Two-Factor Authentication to increase the security of your CGU login credentials. Two-factor authentication provides a second layer of security to any type of login, requiring extra information or a physical device to log in, in addition to your username and password.

By requiring two different channels of authentication, we can protect user logins from remote attacks that may exploit stolen usernames and passwords. As you are aware, security breaches based on compromised usernames and passwords have been on the increase, some as a result of phishing emails. You can learn more about two-factor authentication by watching this YouTube video.

During the initial phase, Duo security only applied when logging into WorkdayLibraryand Axiom applications. During additional phases other services like Email, and PeopleSoft were and will continue to be protected by Duo.

Why are we deploying Duo?

  1. To help prevent unauthorized access to your accounts.  As a CGU employee or student, you may have access to confidential and sensitive information about students, the college, and even yourself (see policy on safeguarding confidential and sensitive information.  Adding a second authentication mechanism makes it more difficult for someone else to gain access to that information, even if your password is exposed, because the attacker won’t have access to your second-factor device.
  2. Increasingly, organizations are turning to two-factor as a way to increase security. Duo is the most commonly used solution in higher education.
  3. To reduce likelihood of CGU users’ accounts from being compromised through phishing or similar breaches.