Multi-Factor Authentication (MFA) - Information Technology Services
Navigation Menu
Multi-Factor Authentication
Overview
To better protect your personal information, Temple uses an extra level of security on selected websites called Multi-Factor Authentication (MFA). It's called Multi-Factor Authentication because in order to access these sites, you will need:
- your AccessNet username and password
- one or more designated phones to further verify your identity
Once you set up MFA, the next time you log in to a Temple website, such as TUportal or Canvas, you will first enter your AccessNet username and password. You will then be prompted to choose an authentication method for the phone you registered for Multi-Factor Authentication.
To make it a bit easier to log in, you can also check the Remember me for 14 days box. You then will not be prompted for Multi-Factor Authentication for the next 14 days. Note that you should only check this box if you are using your own computer, and not a shared or lab computer.
Multi-Factor Authentication to be Required
Temple will be requiring the use of Multi-Factor Authentication when logging in to all major university websites by June 2023 (previously January 2023). These sites include TUportal, TUmail, Canvas, Zoom, Microsoft 365, Adobe Creative Cloud, among many others. There are several compelling reasons for this initiative:
- Colleges and universities have been subject to cyber phishing attacks. Every year Temple students and employees fall victim to these attacks.
- The Federal Trade Commission (FTC) has revised its safeguard rules to require that students use MFA for accessing financial aid information.
- The Department of Education highly recommends the use of MFA to protect direct deposits of student financial aid reimbursements.
- MFA is the simplest and the most effective tool for improving account security. We also recommend using it for any non-Temple services, where offered, that require you to log in.
Get Started: One-Time Setup
In TUportal, you can designate all your phones or particular ones for Multi-Factor Authentication. This includes Apple iPhones, Android phones, basic cell phones and landlines. To begin, click below and follow the instructions:
2 of 12
Click Manage Phones.
3 of 12
Click the grayed-out OFF button next to the Mobile – Personal or Mobile - Work that you wish to designate for Multi-Factor Authentication. (If you need to add a phone, click on Add phone.)
4 of 12
Next, follow the prompts to answer the security questions and click Submit.
5 of 12
Click Yes when prompted to install the Duo Mobile app. This is a free mobile app that enables you to quickly and easily authenticate with one tap or “push” of a button. Unlike texts and phone calls, the app saves Temple significant costs, since there is no charge for using it.
6 of 12
You will receive a text message with a link to the Apple Store or Google Play Store to download and install the free Duo Mobile app. If you did not receive the text, click Resend.
After installing the Duo Mobile app, activate the phone by clicking Text Message.
7 of 12
You will receive a second text message with an activation link. Click this link and follow the steps on your phone to set up Duo Mobile for accessing Temple's systems.
Then click Next and skip to step 11.
8 of 12
If you chose to activate the Duo Mobile app using a QR code instead of a text, follow the on-screen instructions to hold your phone camera up to the QR code that displays. For details, see the next step.
9 of 12
Open the Duo Mobile app on your phone. Then:
- Tap Add Account or Get Started (or the plus button in the upper right).
- If prompted to allow Duo Mobile access to the camera, tap OK or Allow.
- Scan the QR code to add the account to Duo Mobile.
10 of 12
After setting up the Duo Mobile app, click Next.
11 of 12
Click Close.
12 of 12
The Two Step button will now be set to ON indicating that your phone is designated for the process.
(A Re-install App link for future use appears if you indicated you are using a smartphone in step 5.)
Click the OFF button next to any additional phones you wish to designate.
Note: If you use more than one phone (for example, a smartphone and a landline), ITS recommends designating both phones for Multi-Factor Authentication.
2 of 6
Click Manage Phones.
3 of 6
Under Phone Numbers, click the grayed-out OFF button in the MFA column next to the Mobile – Personal or Mobile - Work that you wish to designate for Multi-Factor Authentication. (If you need to add a phone, click on Add phone.)
4 of 6
Next, follow the prompts to answer the security questions and click Submit.
5 of 6
When prompted to install the Duo Mobile smartphone app, click No.
6 of 6
The Two Step button will now be set to ON indicating that your phone is designated for the Multi-Factor Authentication process. Click the OFF button next to any additional phones you wish to designate.
2 of 5
Click Manage Phones.
3 of 5
Click the grayed-out OFF button next to the Direct Phone, Home Phone or TTY Device that you wish to designate for Multi-Factor Authentication. (If you need to add a phone, click on Add phone.)
4 of 5
Next, follow the prompts to answer the security questions and click Submit.
5 of 5
The Two Step button will now be set to ON indicating that your phone is designated for the Two Step Verification process.
Click the OFF button next to any additional phones you wish to designate.
Using Multi-Factor Authentication
When accesing a Temple website that uses Multi-Factor Authentication, such as TUportal and Canvas, you will be prompted to select a device and then an authentication method.
Registered Phone
When selecting a registered phone, the following authentication methods are available:
| Authentication Method | Description | Requirements |
|
Duo Push Recommended
|
Send Me a Push if you have the Duo Mobile app installed on your iPhone or Android phone. This verification method is fast and simple to use. The Duo Mobile app displays a notification on your phone. Tap Approve to authenticate.
|
The Duo mobile app and Wi-Fi or celluar service. |
|
Passcode - SMS
|
Enter a Passcode and then Text me new codes in the blue display bar to have a passcode texted to your phone via SMS text message. Enter the passcode on the website and click Log In to proceed. Note: Charges may apply, depending on your phone plan. |
Cellular service |
|
Passcode - OTP
|
Enter a Passcode if you have the Duo Mobile app installed on your iPhone or Android phone. Open the Duo Mobile app and tap Temple University to reveal a One-Time Passcode (OTP). Then, enter the passcode on the website to proceed. | The Duo Mobile app.
|
|
Call Me
|
Call Me to receive a phone call. Press any key on your phone to proceed. | Telephone service |
Hardware Token
A hardware token is a small device that you can use as an alternative to a registered phone. Hardware tokens do not require a network connection and can be purchased from the OWLtech on Main Campus. Once purchased, the OWLtech staff will help facilitiate the registration of the device on your account.
We recommend this option only in cases when you cannot use a phone, such as if it becomes lost or stolen.
When selecting a token, the following authentication method is available:
| Authentication Method | Description | Requirements |
|
Passcode - OTP
|
Enter a Passcode. Press the button on your hardware token to generate a new passcode. Then, enter the passcode on the website to proceed. |
There is no Wi-Fi or cellular requirement. |
Not Using the Duo Mobile App? Set it Up Now
Duo Mobile is a free mobile app that enables you to quickly and easily authenticate with one tap or “push” of a button. Unlike texts and phone calls, the app saves Temple significant costs, since there is no charge for using it.
If you didn't choose to set up the Duo Mobile app when you originally set up your iPhone or Android phone for Multi-Factor Authentication, see the setup instructions below:
1 of 11
Log in to TUportal. Then click Manage My Account on the upper-right portion of the screen.
2 of 11
Click Manage Phones.
3 of 11
Click Install Duo App next to your mobile phone.
4 of 11
Click Yes.
5 of 11
You will receive a text message with a link to the Apple Store or Google Play Store to download and install the free Duo Mobile app. If you did not receive the text, click Resend.
After installing the Duo Mobile app, activate the phone by clicking Text Message.
6 of 11
You will receive a second text message with an activation link. Click this link and follow the steps on your phone to set up Duo Mobile for accessing Temple's systems.
Then click Next and skip to step 10.
7 of 11
If you chose to activate the Duo Mobile app using a QR code instead of a text, follow the on-screen instructions to hold your phone camera up to the QR code that displays. For details, see the next step.
8 of 11
Open the Duo Mobile app on your phone. Then:
- Tap Add Account or Get Started (or the plus button in the upper right).
- If prompted to allow Duo Mobile access to the camera, tap OK or Allow.
- Scan the QR code to add the account to Duo Mobile.
9 of 11
After setting up the Duo Mobile app, click Next.
10 of 11
Click Close.
11 of 11
The Manage Phone screen reappears. A Reinstall Duo App link now appears next to your mobile phone.
Got a New Phone?
To set up the Duo Mobile app on your new phone:
- Log in to TUportal using the Call Me or Passcode option, rather than using the Duo Push option.
Note: After clicking Passcode, click Text me new codes in the blue bar at the bottom of the Multi-Factor Authentication window. Then enter the code that was texted to you in the Passcode box and then click Log In. - In TUportal, click Manage My Account and then Manage Phones for Multi-factor Authentication.
- Click Reinstall Duo App next to your registered phone number. When re-prompted to confirm your identity, use the Call Me or Passcode option.
Use either of the options below as your second factor of authentication while you register your new phone number:
- a second phone number that is already registered, or
- your old phone with the Duo mobile app installed. You will then be able to use the Duo Push option or obtain a Passcode from the app.
Have neither? Please contact the Help Desk at tuhelp.temple.edu (click Chat or Request Help) or call 215-204-8000.
Preparing for International Travel
Before you go, get ready to use MFA abroad.
If you haven’t already downloaded the Duo Mobile app on your phone, make sure to do so before you travel.
- The Duo Push authentication option will work when connected to Wi-Fi, regardless of whether you have cellular service abroad.
- The Passcode - OTP authentication option enables you to generate one-time passcodes when you don’t have Wi-Fi and/or cellular service.
See Using Multi-Factor Authentication for more information.
You can purchase a hardware token from OWLtech to take with you on your trip.
Consider bringing your U.S. phone with you. After you arrive and purchase your new phone, use your U.S. phone to generate a one-time passcode to log in to tuportal.temple.edu and register your new international phone number.
If you haven’t already downloaded the Duo Mobile app on your phone, make sure to do so before you travel. The Duo Push authentication option will continue to work even after installing a new international SIM card.
FAQs
Q: What is a QR Code?
A: A QR or Quick Response Code is a type of barcode. If your mobile device has a QR Code Reader application installed you can scan or take a picture of QR codes and they will link your device to a webpage or specific content.
Q: I recently purchased a new device to replace the one that I originally set up for Multi-Factor Authentication. What do I need to do?
A: If you have the same phone number and use the Call Me or Text Me option, you will not need to do anything. If you would like to use the Duo Mobile app, you will need to reinstall it as follows:
1. Follow the instructions under the Smartphone tab under Get Started: One-Time Setup to access your phone number in TUportal.
2. Click the green YES button in the MFA column to temporarily remove MFA from this phone. If you have another device registered for Multi-Factor Authentication, you will be prompted to confirm your identity using the other device.
3. Next, click the same button, which now appears in gray and is set to NO, and follow the steps to designate the phone for Multi-Factor Authentication and install/activate the Duo Mobile app.
Q. Why does the Duo Mobile app need to access my camera?
A: The Duo Mobile app may use your camera to scan a QR code during activation.
Q. What should I do if I don’t have an Internet connection or cell phone reception?
A: Tap the (iOS) or (Android) icon in the Duo Mobile app to generate an authentication passcode.
Q. My App Push alerts aren’t coming through. What should I do?
A: Please refer to the troubleshooting steps for iPhones or Android devices.
Q: How much data does the Duo Mobile app use?
A: The Duo Mobile app uses less than 2KB per authentication. For example, you would only consume 1 megabyte (MB) of data if you were to log in 500 times in a given month.
Q: What if I am in a place with no Wi-Fi or cell service?
A: If you are in an area with no Wi-Fi or cell service, you can still authenticate using the Passcode option. For instructions, see Using Multi-Factor Authentication above.
Q: Is the Duo Mobile app free?
A: Yes. The Duo mobile app is free to install on mobile devices and tablets.
Q: Do I have to use Multi-Factor Authentication every time I log in to a Temple website?
A: No. Multi-Factor Authentication is currently required only on the TUportal Direct Deposit allocation and Dependents pages. Other websites containing sensitive information will follow.