Questions?
Several end users have brought up questions about DUO and the use of MFA on their cell phones. The following answers some commonly asked questions about RESPEC’s implementation of MFA.
What if I leave my phone at home?
A: You will need to reach out to CITS through CITS support portal or have someone do that on your behave and request a bypass code. You can submit a service request in the portal for a bypass code. Use this form to request a bypass
Where can we request a YubiKey?
At this page: Request a Multi-Factor Auth Yubikey
How do I add my phone to Duo so I can enroll and use MFA?
Use this support article (Enrolling in Duo for Multi-Factor Authentication) to follow along with the enrollment process for MFA using Duo Mobile app on a smart phone.
What happens when employees leave RESPEC?
A: Nothing Fancy, CITS disables their accounts. If they used their smartphone they would just delete the DUO app.
If they have a Yubikey they would need to return it with all of the other compute hardware checked out to them.
What if someone loses or breaks their phone?
A: They will need to go through the DUO setup process on a new phone as soon as they get it.
If they are not getting a new phone right away, they can request a Yubikey from CITS.
If I use my phone for MFA with RESPEC will it interfere or prevent my phone from being used with other MFA services?
A: No, If other organizations you are involved in use DUO you can add them as well.
Any other platforms will work as normal.
What if I need to log in and I’m out of cellular or network service range?
A: We have an offline login option that allows you to proceed with MFA when out of connectivity
Your DUO app will provide you with a six-digit code you can enter offline
A Yubikey will enable you to touch it when offline to finish logging in
Does MFA eliminate the need to log in to VPN separately?
A: No, MFA does not affect the VPN connection process. You will still need to log in to VPN when using it.
Will MFA effect my phone's e-mail apps and access to timecards?
A: No, adding DUO app to you phone does not change how your phone’s e-mail app accesses your RESPEC e-mail. The app enables you to approve logins from your phone.
Will there be a company stipend or reimbursement for using my personal phone for MFA?
A: No, RESPEC is not requiring employees to use their phones for MFA. This is similar to accessing your e-mail from your phone. CITS is supporting it but not requiring it.
MFA is required, but alternatives to using your phone device are available at the company's expense.
We recognize that using a smart device is the most convenient way to handle MFA and support the use of phone apps.
Can we use both a smartphone app and a YubiKey?
A: Yes, although if possible we encourage people to use just their smartphone app. YubiKey’s come with a cost to the company and are another piece of hardware you have to keep track of