To use Duo Two-Factor Security, and anything it protects, you must first enroll.
Please see the tip sheets in the navigation panel to the right for initial enrollment instructions and Two-Factor management options. Please visit the Safe Computing Website for Weblogin enrollment instructions.
Two-factor authentication is a second layer of security, keeping an individual's account secure even if their password is compromised. It requires two proofs of identity when logging in:
Duo provides a flexible two-factor authentication solution that allows us to extend security protection to more systems and individual accounts at U-M. With Duo, you'll be alerted right away - on any phone or mobile device - if someone is trying to log in as you.
Additional Duo Management Instructions (Michigan Medicine-specific)
Setting Phone Call as Your Default (Turn On/Off the UMHS Global Default Override)
The Duo Mobile Push is often selected as the default authentication option during the Duo Registration Enrollment process; however, some services cannot handle this authentication option (usually indicated when a service cannot read the device you selected). To change the UMHS global setting of Moblie Push, it requires you to complete a "global setting override" on your Michigan Medicine IT User Profile Page by selecting the Phone Call option (which puts the override into effect). You can also remove the override by going back into the User Profile Page and re-selecting the Duo Moblie Push button. See the tip sheet for a step-by-step guide.
Manage Duo for U-M Hardware Tokens
Duo U-M Hardware Token users should utilize the Michigan Medicine IT User Profile Page to add new Hardware Tokens, remove old/outdated Hardware Tokens, and to resync existing Hardware Tokens.
Sometimes hardware tokens can become out of sync with the system. If this occurs, you will not be able to login. Resyncing your token is the first line of troubleshooting, similar to restarting a computer when it doesn't work. The Michigan Medicine IT User Profile Page gives you the ability to resync your hardware token with the Duo Security System.
What Special Arrangements are Made for ePrescribing Controlled Substances?
Due to DEA regulations, EPCS uses its own Duo system that's separate from everything else. Only smartphone, tablet, and hard tokens are permitted (no call back, text messaging, or temporary passcodes).
To enroll in Duo Two-Factor Security as an EPCS provider:
- If you will be using a smartphone or tablet, make sure it is already enrolled in AirWatch as well as the normal Duo system. Click the appropriate link for instructions:
- If you will not be using a smartphone or tablet, meet with your EPCS Liaison to obtain an EPCS hardware token.
In either case, complete EPCS enrollment with your EPCS Liaison.
Learn More and Get Assistance
Help Me Now walk-in locations can answer your individual questions and provide you with hands on help with enrollment. (EPCS registration should be completed by the appropriate EPCS Liaison prior to visiting the Help Me Now location.) You may also return expired MTokens to any one of these locations.
The HITS Service Desk can be contacted at (734) 936-8000 for any additional assistance and questions.