Versions Compared

Old Version 55

changes.mady.by.user Joseph Orellana

Saved on

compared with

New Version Current

changes.mady.by.user Joseph Orellana

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Authentication Methods

It is very helpful to add additional authentication methods. This way if you’re having trouble logging in, you can easily switch to a different method. Currently, there are five methods: Duo Mobile app, Passcode, Phone Call, U2F Authenticator, & Cisco AnyConnect.

Tip

If you’re ever having trouble logging in (for instance: don’t have your smartphone, don’t have a wireless connection for your smartphone, or forgot your Duo Hardware Token) switch to a different authentication method. Click Cancel and choose one of your other methods.

Table of contents

Table of Contents
maxLevel3
minLevel3
separatorPipe

Section
Column
width50%

Go to https://my.logon.ucla.edu and Sign In. This will bring up the authentication screen:

Expand
titleAdding an additional authentication method
Info
iconfalse

To add an additional authentication method, click Cancel and then click Add a new device. Shibboleth will first need to confirm it’s you. Choose an authentication method to gain access. Then, choose your device type on the What type of device are you adding? screen. Click Continue and enter the required information.

Expand
titleAutomating an authentication method
Info
iconfalse

It’s also very helpful to automate a preferred authentication method. This will speed things up when you’re logging in. To set this up, click My Settings & Devices. Choose your Default Device. Then click the pull-down menu next to When I log in: and choose Automatically send this device a Duo Push.

Column
width50%

 

Authentication Using Duo Mobile app 

Tap on the notification on your smartphone or tablet to open the Duo Mobile app. Tap on Approve.

Expand
titleWhat to do if you do not receive the Push notification:
Info
iconfalse
  1.  In many instances what actually happened is the user simply missed the notification. In this scenario, if the user opens their Duo Mobile app they will see their push waiting for them.

  2. If #1 does not work, refresh the Duo Mobile app with pending pushes by doing a swipe-down from the top or your smartphone screen. This works very similarly to the email program. You do a swipe down, and you see the twirly at the top spinning to indicate a refresh is underway. Then, the push appears and all is well.

  3. If neither #1 or #2 works, return to the website and have the push resent from there.

For iPhone 6S, iPhone 6S Plus, and iPhone 7 users: force touch the notification. This will bring up an Approve button. Tap approve. No need to open the Duo Mobile app.

For Apple Watch users: press approve on the Duo Mobile app on your watch.

 

Authentication Using Passcodes

Expand
titleReceive Passcodes via SMS Text Message
Section
Column
width25%
Info
iconfalse

Go to my.logon.ucla.edu and authenticate using your username/password, but then click Cancel.

Receive a text message with 10 seven-digit single-use passcodes as the second factor. Remember to keep these passcodes handy as backups.

Column
width25%

Section
Column
width25%
Info
iconfalse

Click Text me new codes.

Column
width25%

Section
Column
width25%
Info
iconfalse

Here is an example of a text message with passcodes.

Each passcode starts with the numbers 1 through 0. Enter the next passcode when requested by the UCLA Single Sign-On website. The website will tell you which one, i.e. "Your next SMS passcode starts with 3." Each passcode can only be used once. When you run out, you'll automatically be texted more passcodes.

Column
width25%

Expand
titleAuthentication by Duo Hardware Token
Section
Column
width25%
Info
iconfalse

Press the button on your Duo Hardware Token generator to generate a six-digit passcode. Enter the passcode into the UCLA Single Sign-On website. You must do this within 10 minutes, or the passcode times out.

Expand
titleGenerate passcode with Duo Mobile
Section
Column
width15%
Info
iconfalse

Tap the key icon to generate use-once passcode (does not require network connection).

Then tap passcode to copy it.

Column
width25%

Expand
titleEnter your passcode
Section
Column
width25%
Info
iconfalse

Click Enter a Passcode.

The passcodes come from the Duo Hardware token, Duo Mobile app, or SMS text message.

Enter the passcode and click Log In.

Column
width25%

Image RemovedImage Added

 

Authentication by Phone Call

Your smartphone, cell phone or landline will ring. You answer and hit any key. You're done!

 

Authentication by U2F Authenticator

Insert the U2F into a USB port (if it's not already there). Press the button on the U2F. You're done.

 

Authentication with Cisco AnyConnect

How you log in from home (or while away at a conference) using the Cisco AnyConnect VPN will depend on your Authentication Method:

Tip

For more information: Authenticating Using Multi-Factor Authentication on the Campus VPN

Expand
titleDuo Mobile app:
Info
iconfalse

After entering your password in Cisco AnyConnect, tap Approve in the Duo Mobile app to complete your VPN login.

 What to do if you do not receive the Push notification:

        1. In many instances what actually happened is the user simply missed the notification. In this scenario, if the user opens their Duo Mobile app they will see their push waiting for them.
        2. If #1 does not work, refresh the Duo Mobile app with pending pushes by doing a swipe-down from the top or your smartphone screen. This works very similarly to the email program. You do a swipe down, and you see the twirly at the top spinning to indicate a refresh is underway. Then, the push appears and all is well.
        3. If neither #1 or #2 works, it might be due to a weak Digital Cellular or WiFi connection for the smartphone. Instead, switch input methods. Open your Duo Mobile app and tap the key icon. This generates a use-once passcode. This works even with no network connection. Enter your password in Cisco AnyConnect followed by / and your passcode. For instance: mypassword/123456
Expand
titleSMS Text Message or Duo Hardware Token:
Info
iconfalse

 Enter your password in Cisco AnyConnect followed by "/" and your passcode. For instance: "mypassword/123456"

Expand
titlePhone Call:
Info
iconfalse

After entering your password in Cisco AnyConnect, answer your phone and hit any key to complete your VPN login

Expand
titleU2F Authenticator:
Info
iconfalse

After entering your password in Cisco AnyConnect, Press the button on the U2F to complete your VPN login