Instructional, Communication & Information Technology

Multi-factor Authentication (MFA)

Duo Multi-factor Authentication (MFA) provides secure access to UW-Whitewater and UW System applications when used in conjunction with a Net-ID login. Duo MFA provides an extra layer of protection by requiring users to verify their identity via the Duo Mobile app or One-Time Password (OTP) from a supported token or fob.

Students

Instructors

Staff


MFA Features

  • A simple and secure user interface.
  • Monitoring and verification of devices used to authenticate.
  • Ensures only legitimate users can access resources, limiting possible exposures.

Getting Started with MFA

Currently, MFA is only needed for systems that have been deemed High Risk such as systems that contain Personally Identifiable Information (PII), financial, or health data. As of January 2022, all employees both staff and students will be required to have MFA.

WINS, SFS, HRS, ShopUW+, ImageNow, Point N’ Click, and Maxient are some examples of applications that may require MFA.  The number of applications requiring MFA will begin to increase as we increase security on more applications. Students who need elevated rights to WINS will use Duo MFA via the X-ID system.

According to the security requirements of UW-System, the MFA provisioning process will require you to be properly credentialed. Employees who require MFA access will start by contacting Human Resources and Diversity (HR&D). HR&D will verify your identity by reviewing two (2) forms of identification:

  • UW-W Affiliation: Hawkcard Card (UW-W ID card), UW-W Health card, HR Verification Form, Notary Public Form.
  • Government-issued ID: State-issued Photo ID, US Military Card, Passport.

In addition, employees are required to sign the Multi-factor Authentication (MFA) Policy Form. Once identity has been confirmed and the policy form completed, access will be enabled using a smartphone app (preferred) or physical token/fob. Employees who choose the fob will need to submit a department Org Code for fob charges. For more information on the use of a personal phone for official university business, we recommend UW-System's MFA Frequently Asked Questions.

Student employees will now require MFA for access to HRS and other systems and should follow the new enrollee process.

Student employees that need elevated access in WINS should continue to follow the current process through their supervisor, who will contact the ICIT Help Desk. Students should be issued an X-ID* and users of X-IDs may only use the hardware fob. Please see Multi-factor Authentication Guidelines for X-IDs and Department FOB Administrators.

*X-IDs are shared credentials not associated with a specific user and are used by student employees.

Current MFA users who need additional application access should contact the ICIT Help Desk.

How-to Guides and Training

Related Policies & Agreements

Want to learn more about this service? Get Help »