Authentication Options

Transcription

1 Authentication Options The following options are available to RamsVPN users when authenticating with two-factor authentication. *** Authenticating via web browser is only necessary for enrolling/managing devices in Duo, and for downloading/installing the AnyConnect Client software. After the AnyConnect client has been installed, authentication should be done via the AnyConnect client application on your computer. See Two Factor Authentication with AnyConnect. 1. Duo Push The Duo Push option is the easiest option if you have installed the Duo Mobile app on your phone. A push notification will be sent to the phone. See the following device specific instructions: Duo Push on Android ; Duo Push on iphone; Duo Push on Blackberry, Windows Phone, or Other. Duo Push with the AnyConnect Client: Enter the word push (without quotes) into the Second Password field of the AnyConnect Client application. 2. Phone call The phone call option will immediately invoke a phone call from a 1 (888) number to your phone. After picking up your phone, you will be greeted with the message that indicates Welcome to VCU VPN second factor authentication, and you will be instructed to press any key on your phone to complete the authentication process, or simply hang up to sign off. Phone call with the AnyConnect Client : Enter the word phone1 (without quotes) into the Second Password field of the AnyConnect Client application. Note: If you have multiple phones enrolled in Duo, Second Password corresponds to the order of the devices on your account. For instance, if you enrolled your land line phone first, and then later enrolled your mobile phone, then Second Password for the land line would be "phone1", and "phone2" for the mobile. 3. Passcode The passcode option takes a pre-generated passcode. If you have the Duo Mobile app on your phone, this option can be used if your phone does not have Internet, SMS, or cellular access. In the Duo Mobile application, you can simply press the Key icon (s hown below) to reveal the pre-generated pass-code. Pre-generated pass-code with the AnyConnect Client : Enter the pre-generated pass-code into the Second Password field of the AnyConnect client application. 4. Send SMS Pass-code This option will provide you with a series of one time pass-codes that can be entered into the Passcode box. These codes will be sent to your phone via SMS text messaging. Each of these pass-codes can only be used once. SMS Pass-code with the AnyConnect client: Enter the word sms1 (without quotes) into the Second Password field of the AnyConnect Client. This will prompt a series of one time pass-codes to be sent to your phone via SMS text message. Now ente r any one of the previously provided single use pass-codes into the Second Password field of the AnyConnect Client application. Note: If you have multiple phones enrolled in Duo, Second Password for SMS corresponds to the order that your mobile

2 phone was enrolled on your account. For instance, if you enrolled your land line phone first, and then later enrolled your mobile phone, then Second Password for the mobile phone would be sms2. 5. Hardware Token The Token option takes a passcode generated by your hard token. Just press the button on your Token to get a new passcode and then type it into the prompt. If you have a Yubikey, click the prompt and tap the center circle (with the LED light) on your Yubikey with your finger to generate and submit a passcode. Tokens can get "out of sync" if the button is pressed too many times in a row and the generated passcodes aren't used for login. Contact your administrator if your token stops working. If your token was provided by your administrator and has already been enrolled, then you can select it when logging in to amsvpn.vcu.edu/duo to download the AnyConnect. Hard Token with the AnyConnect client: Place your cursor in the "Second Password" field of the AnyConnect client

3 If you have a Yubikey token, tap the center circle (with the LED light) on your Yubikey with your finger to generate and submit a passcode.

4 Other brands of hard tokens may have a button to get a new passcode and then type it into the "Second Password" field of the AnyConnect client.

5