Navigation Menu

Multi-Factor Authentication

Overview

To better protect your personal information, Temple uses an extra level of security on selected websites called Multi-Factor Authentication (MFA). It's called Multi-Factor Authentication because in order to access these sites, you will need:

  • your AccessNet username and password 
  • one or more designated phones to further verify your identity

Once you set up MFA, the next time you log in to a Temple website, such as TUportal or Canvas, you will first enter your AccessNet username and password. You will then be prompted to choose an authentication method for the phone you registered for Multi-Factor Authentication.

To make it a bit easier to log in, you can also check the Remember me for 14 days box. You then will not be prompted for Multi-Factor Authentication for the next 14 days. Note that you should only check this box if you are using your own computer, and not a shared or lab computer.

Multi-Factor Authentication to be Required

Temple will be requiring the use of Multi-Factor Authentication when logging in to all major university websites by June 2023 (previously January 2023). These sites include TUportal, TUmail, Canvas, Zoom, Microsoft 365, Adobe Creative Cloud, among many others. There are several compelling reasons for this initiative:

  • Colleges and universities have been subject to cyber phishing attacks. Every year Temple students and employees fall victim to these attacks.
  • The Federal Trade Commission (FTC) has revised its safeguard rules to require that students use MFA for accessing financial aid information.
  • The Department of Education highly recommends the use of MFA to protect direct deposits of student financial aid reimbursements.
  • MFA is the simplest and the most effective tool for improving account security. We also recommend using it for any non-Temple services, where offered, that require you to log in.

Get Started: One-Time Setup

 

In TUportal, you can designate all your phones or particular ones for Multi-Factor Authentication. This includes Apple iPhones, Android phones, basic cell phones and landlines. To begin, click below and follow the instructions:

1 of 12

Log in to TUportal. Then click Manage My Account at the top right corner of the screen.

2 of 12

Click Manage Phones.

3 of 12

Click the grayed-out OFF button next to the Mobile – Personal or Mobile - Work that you wish to designate for Multi-Factor Authentication. (If you need to add a phone, click on Add phone.)

4 of 12

Next, follow the prompts to answer the security questions and click Submit.

5 of 12

Click Yes when prompted to install the Duo Mobile app. This is a free mobile app that enables you to quickly and easily authenticate with one tap or “push” of a button. Unlike texts and phone calls, the app saves Temple significant costs, since there is no charge for using it.

6 of 12

You will receive a text message with a link to the Apple Store or Google Play Store to download and install the free Duo Mobile app. If you did not receive the text, click Resend.

After installing the Duo Mobile app, activate the phone by clicking Text Message.

7 of 12

You will receive a second text message with an activation link. Click this link and follow the steps on your phone to set up Duo Mobile for accessing Temple's systems.

Then click Next and skip to step 11.

8 of 12

If you chose to activate the Duo Mobile app using a QR code instead of a text, follow the on-screen instructions to hold your phone camera up to the QR code that displays. For details, see the next step.

9 of 12

Open the Duo Mobile app on your phone. Then:

  1. Tap Add Account or Get Started (or the plus button in the upper right).
  2. If prompted to allow Duo Mobile access to the camera, tap OK or Allow.
  3. Scan the QR code to add the account to Duo Mobile.

10 of 12

After setting up the Duo Mobile app, click Next.

11 of 12

Click Close.

12 of 12

The Two Step button will now be set to ON indicating that your phone is designated for the process.  

(A Re-install App link for future use appears if you indicated you are using a smartphone in step 5.)

Click the OFF button next to any additional phones you wish to designate.

Note: If you use more than one phone (for example, a smartphone and a landline), ITS recommends designating both phones for Multi-Factor Authentication.

1 of 6

Log in to TUportal. Then click Manage My Account at the top right corner of the screen.


 

2 of 6

Click Manage Phones.

3 of 6

Under Phone Numbers, click the grayed-out OFF button in the MFA column next to the Mobile – Personal or Mobile - Work that you wish to designate for Multi-Factor Authentication. (If you need to add a phone, click on Add phone.)


​​​​​​​

4 of 6

Next, follow the prompts to answer the security questions and click Submit.


 

5 of 6

When prompted to install the Duo Mobile smartphone app, click No.


 

6 of 6

The Two Step button will now be set to ON indicating that your phone is designated for the Multi-Factor Authentication process. Click the OFF button next to any additional phones you wish to designate.


​​​​​​​

1 of 5

Log in to TUportal. Then click Manage My Account at the top right corner of the screen.

2 of 5

Click Manage Phones.

3 of 5

Click the grayed-out OFF button next to the Direct Phone, Home Phone or TTY Device that you wish to designate for Multi-Factor Authentication. (If you need to add a phone, click on Add phone.)


​​​​​​​

4 of 5

Next, follow the prompts to answer the security questions and click Submit.


 

5 of 5

The Two Step button will now be set to ON indicating that your phone is designated for the Two Step Verification process.    

Click the OFF button next to any additional phones you wish to designate.


​​​​​​​

Using Multi-Factor Authentication

 

When accesing a Temple website that uses Multi-Factor Authentication, such as TUportal and Canvas, you will be prompted to select a device and then an authentication method.

Registered Phone

When selecting a registered phone, the following authentication methods are available:

Authentication Method Description Requirements

Duo Push

Recommended

Send Me a Push if you have the Duo Mobile app installed on your iPhone or Android phone. This verification method is fast and simple to use. The Duo Mobile app displays a notification on your phone. Tap Approve to authenticate.

  • If you get a login request that you weren't expecting, tap Deny. You’ll be given the ability to report it as fraudulent or deny the request without reporting it.
  • If the notification disappears from your phone screen, you can always open the app, tap the message and then tap Approve.
 The Duo mobile app and Wi-Fi or celluar service.

Passcode - SMS 

Enter a Passcode and then Text me new codes in the blue display bar to have a passcode texted to your phone via SMS text message. Enter the passcode on the website and click Log In to proceed.

Note: Charges may apply, depending on your phone plan.

 Cellular service

Passcode - OTP

 Enter a Passcode if you have the Duo Mobile app installed on your iPhone or Android phone. Open the Duo Mobile app and tap Temple University to reveal a One-Time Passcode (OTP). Then, enter the passcode on the website to proceed. The Duo Mobile app. 


There is no Wi-Fi or cellular requirement. The OTP option works when your phone is in airplane mode or in an area without a cellular or Wi-Fi signal.

Call Me

 Call Me to receive a phone call. Press any key on your phone to proceed. Telephone service

Hardware Token

A hardware token is a small device that you can use as an alternative to a registered phone. Hardware tokens do not require a network connection and can be purchased from the OWLtech on Main Campus. Once purchased, the OWLtech staff will help facilitiate the registration of the device on your account. 

We recommend this option only in cases when you cannot use a phone, such as if it becomes lost or stolen.

When selecting a token, the following authentication method is available:

Authentication Method Description Requirements

Passcode - OTP

 Enter a Passcode. Press the button on your hardware token to generate a new passcode. Then, enter the passcode on the website to proceed.

There is no Wi-Fi or cellular requirement. 

Not Using the Duo Mobile App? Set it Up Now

 

Duo Mobile is a free mobile app that enables you to quickly and easily authenticate with one tap or “push” of a button. Unlike texts and phone calls, the app saves Temple significant costs, since there is no charge for using it.

If you didn't choose to set up the Duo Mobile app when you originally set up your iPhone or Android phone for Multi-Factor Authentication, see the setup instructions below:

1 of 11

Log in to TUportal. Then click Manage My Account on the upper-right portion of the screen.

2 of 11

Click Manage Phones.

3 of 11

Click Install Duo App next to your mobile phone.

4 of 11

Click Yes.

5 of 11

You will receive a text message with a link to the Apple Store or Google Play Store to download and install the free Duo Mobile app. If you did not receive the text, click Resend.

After installing the Duo Mobile app, activate the phone by clicking Text Message.

6 of 11

You will receive a second text message with an activation link. Click this link and follow the steps on your phone to set up Duo Mobile for accessing Temple's systems.

Then click Next and skip to step 10.

7 of 11

If you chose to activate the Duo Mobile app using a QR code instead of a text, follow the on-screen instructions to hold your phone camera up to the QR code that displays. For details, see the next step.

8 of 11

Open the Duo Mobile app on your phone. Then:

  1. Tap Add Account or Get Started (or the plus button in the upper right).
  2. If prompted to allow Duo Mobile access to the camera, tap OK or Allow.
  3. Scan the QR code to add the account to Duo Mobile.

9 of 11

After setting up the Duo Mobile app, click Next.

10 of 11

Click Close.

11 of 11

​​​​​​​The Manage Phone screen reappears. A Reinstall Duo App link now appears next to your mobile phone.

Got a New Phone?

To set up the Duo Mobile app on your new phone: 

  1. Log in to TUportal using the Call Me or Passcode option, rather than using the Duo Push option. 
    Note: After clicking Passcode, click Text me new codes in the blue bar at the bottom of the Multi-Factor Authentication window. Then enter the code that was texted to you in the Passcode box and then click Log In. 
  2. In TUportal, click Manage My Account and then Manage Phones for Multi-factor Authentication. 
  3. Click Reinstall Duo App next to your registered phone number.  When re-prompted to confirm your identity, use the Call Me or Passcode option. 

Use either of the options below as your second factor of authentication while you register your new phone number: 

  • a second phone number that is already registered, or 
  • your old phone with the Duo mobile app installed. You will then be able to use the Duo Push option or obtain a Passcode from the app. 

Have neither? Please contact the Help Desk at tuhelp.temple.edu (click Chat or Request Help) or call 215-204-8000. 

Preparing for International Travel

Before you go, get ready to use MFA abroad.

If you haven’t already downloaded the Duo Mobile app on your phone, make sure to do so before you travel. 

  • The Duo Push authentication option will work when connected to Wi-Fi, regardless of whether you have cellular service abroad.  
  • The Passcode - OTP authentication option enables you to generate one-time passcodes when you don’t have Wi-Fi and/or cellular service. 

See Using Multi-Factor Authentication for more information.

You can purchase a hardware token from OWLtech to take with you on your trip.  

Consider bringing your U.S. phone with you. After you arrive and purchase your new phone, use your U.S. phone to generate a one-time passcode to log in to tuportal.temple.edu and register your new international phone number.

If you haven’t already downloaded the Duo Mobile app on your phone, make sure to do so before you travel. The Duo Push authentication option will continue to work even after installing a new international SIM card. 

FAQs

You can purchase a hardware token from the OWLtech store in lieu of using a cell phone.

  1.  Select the Enter a Passcode option when logging in.
     
  2. To generate a one-time passcode, open the Duo Mobile app on your device, and under the Temple University account, tap Show next to Passcode. Your passcode will appear.  
     
  3. Type the passcode in the provided area on the login screen. 

Yes. The Duo mobile app is free to install on mobile devices and tablets.

The Duo Mobile app uses less than 2KB per authentication. For example, you would use only 1MB of data if you were to log in 500 times in a month. 

Please refer to the troubleshooting steps for iPhones or Android devices. 

If the "remember me" feature is not working, follow these steps to add an exception to allow third-party cookies from Duo Security: 

Chrome 

  1. Click the three vertical dots on the top-right of the browser, then click Settings. 
  2. Click Privacy and security on the left navigation. 
  3. Click Cookies and other site data. 
  4. Scroll down to Sites that can always use cookies and click Add. 
  5. Enter the following: [*.]duosecurity.com 
  6. Click Add. 

You may need to restart your browser for changes to take effect.

Firefox 

  1. Click the three horizontal lines on the top-right of the browser and click Settings. 
  2. Click Privacy & Security on the left. 
  3. Scroll down to Cookies and Site Data and click Manage Exceptions. 
  4. Enter the following: https://duosecurity.com 
  5. Click Allow, then Save Changes.

You may need to restart your browser for changes to take effect. 

Safari 

Safari does not have an option to add individual exceptions for sites.  You will need to enable third-party cookies on Safari to allow Duo Security to allow the “remember me” feature: 

  1. Select the Safari drop-down menu from the Mac menu bar.
  2. Select Preferences... 
  3. Click the Privacy tab. 
  4. Make sure that Block all cookies is not checked or set to Never. 

You may need to restart your browser for changes to take effect. If you are using Safari 13.1 and later, you must also disable the  "prevent cross-site tracking" option.