When a threat is detected while you are logging in to your Rowan account, you must use an additional method to verify your identity with Duo two-factor authentication. Beginning August 10, Duo will no longer allow you to use passcodes received by SMS messages or from hardware tokens as your second verification method during risky logins.
This change does not affect your ability to use passcodes sent via SMS messages or hardware tokens to verify your identity with Duo two-factor authentication on a regular basis. But, you won’t be able to use those methods if your login is flagged as risky by Duo.
If Duo detects a potential threat while you are logging in, you will be required to use the Duo Mobile app, or request a bypass code from Rowan NetID, to complete the login process. For that reason, we encourage you to install the Duo Mobile app on your phone, if you haven’t already, to ensure you can always access the resources you need.
How does Duo determine whether a login is risky?
Duo, the vendor that manages our two-factor authentication platform, uses a number of methods to determine risk, including whether there has been a pattern of failed authentication attempts and the location of your IP address.
Your login will be flagged as risky if you use a virtual private network (VPN) that masks your real IP address or software, like Tor, that makes your internet traffic anonymous.
What happens if Duo flags my login as risky?
If Duo detects a threat while you are logging in, you will be required to authenticate your identity again using a second method. As of August 10, you must use Verified Duo Push, which requires you to enter a code on the Duo Mobile app to complete the login, or request a bypass code from Rowan NetID.
Why is Duo making this change?
Duo is making this change to help prevent phishing attacks, which are increasingly targeting passcodes to gain access to your account.
If you have any other questions, please contact the Technology Support Center at 856-256-4400, or submit a ticket in the Rowan Support Portal. You can also get answers to common questions in our Knowledge Base and our chatbot, Ask Susan, at any time.