12/16: Disabling Duo SMS text messaging authentication method

Scheduled Maintenance

Description

The SMS text messaging login method for Duo has become less secure. In order to protect institutional accounts, we will be disabling Duo SMS text messaging as an authentication method option on Thursday, Dec. 16.

How will I use Duo if you’re removing SMS text messaging? 

You can use the phone authentication method Call Me, or the Duo Push authentication method.  

Call Me

Click the Call Me button on the Duo Prompt (or type "phone" in the "second password" field if you don't see Duo's interactive prompt) and Duo will call your phone. Answer the call and listen to the instructions to authenticate. The Duo prompt's status bar also tells you how to approve the request over the phone. You do not need to have the Duo mobile app installed to use this option.

Duo Push
The Duo Push method sends a notification to the Duo Mobile app on your smartphone every time you attempt to log into a WCM service from outside of the network (view this video for a demonstration). To use Duo Push, youl need to install the Duo Mobile app on your smartphone.

Your smartphone does not need to be tagged or registered with ITS in order to install the Duo Mobile app.

How to install and activate Duo Mobile on your smartphone 

  1. Install the  Duo Mobile  app  by Duo Security on your iOS or Android device.
  2. Go to the Duo Self-Enrollment Portal (https://duo.weill.cornell.edu) and log in with your CWID and password. Click Next.
  3. Click Add a new device.
  4. Authenticate to Duo by choosing your current authentication method (e.g., Call Me, or Enter a Passcode.) 
  5. Select  Mobile Phone  and click  Continue
  6. Enter your  phone number.
  7. If the phone number matches your existing device, click on the checkbox  to confirm, then click  Continue
  8. Choose your specific device’s operating system and click  Continue
  9. Select  I have Duo Mobile Installed
  10. The following step will depend on your device type: 
  • If you are on a computer, a barcode will be displayed. Open the  Duo Mobile app  on your smartphone, tap the  + button  and then  scan the barcode  on the screen using your camera.  You will receive a green checkmark on top of the barcode. 
  • If you are on your smartphone, tap Email me an activation link instead.  Then, you will receive the activation link in an email from Duo Security.  Make sure you tap on the link to activate Duo Mobile.  
  • Click the Continue  button. 
    You may now review and configure optional settings within Duo, make sure to leave the default option to Ask me to choose an authentication method.  Click Save and close your browser. 
  •  

        If you experience any issues, please contact our Service Desk for assistance. 

     

    Last Updated: Monday, December 6, 2021 - 12:18pm
    Alert Start: 
    Dec 6, 2021 (12:12pm)
    Alert End: 
    Dec 17, 2021 (12:18pm)

    How Will This Affect You?

    If you use the SMS Text Message method to authenticate with Duo, you can switch to the phone authentication method Call Me, or the Duo Push authentication method.

    Need Help?

    myHelpdesk
    (212) 746-4878
    Monday-Sunday
    Open: 24/7 (Excluding holidays)
    SMARTDesk
    WCM Library Commons
    1300 York Ave
    New York, NY
    10065
    M-F
    9AM - 5PM
    Make an appointment

    575 Lexington Ave
    3rd Floor
    New York, NY
    10022
    Temporarily Closed