As a response to the increasing number of phishing scams that impact Fredonia employees and the University's overall risk for a data breach, the Information Technology Services department has implemented a high-security login process for Fredonia eServices and other critical electronic resources that requires a second method to confirm the identity of the person logging in. Referred to as two-step or two-factor authentication, this process, which uses Duo Security, asks individuals logging in to confirm their identity using a smartphone, via automated voice calls, or a hardware token. Duo Security accounts will be provisioned out to users based on the risk associated with the data and systems they have access to.
Currently Duo Security is protecting the following Fredonia electronic services:
Drupal Web Publishing
SUNY Employee Portal
NOTE: other Fredonia electronic services will be protected as technical and funding limitations are addressed.
Basic End User Training
Need to be a University employee with access to sensitive University owned data or systems as determined by the Information Security Officer.
Need to adhere to all federal, NYS and University policies as they relate to account and password management.
You must notify the Information Technology Services via a FredQuest ticket to bypass Duo Security should you travel to a country under the jurisdiction of EU General Data Protection Regulation (GDPR). For more information: http://www.eugdpr.org/.
Rates / Cost of Use
The Information Technology Student Technology Fee (Tech Fee) funds the annual subscription fee.
ITS will add your eServices account to the Duo Security system based on the risk associated with the services and sensitive data you have access to.
You will receive a Duo Security Enrollment email requesting you to activate a new device as your new second factor for authentication. Fredonia permits you to register a smartphone (Android or iphone), a landline, or a tablet as your second factor. You may have as many second factors as you wish (e.g. smart phone, landline, tablet, hardware token).
NOTE: It is strongly recommended that all mobile devices used as a second factor be encrypted and have a screen lock enabled. We also recommend that you register a second device as an alternative method of authenticating.
Help with Duo is available! Call the ITS Service Center directly at (716) 673-3407.