Duo MFA: FAQ

MFA Duo

What is Multi-Factor Authentication?
Multi-Factor Authentication (MFA) is an additional layer of security that is added to the online login process. MFA relies on two forms of authentication: something you know, and something you have. The something you know, is your password; the something you have, will generally be your mobile device. This means that even if your password is hacked, your account will remain secure. Online thieves may have learned what you know (password) but can't access what you have (your phone).
Why does NMH use MFA?
The risk of online data theft is a growing problem for every organization and NMH takes its role in protecting our community's information seriously. Stand-alone passwords do not provide adequate online security. Multi-Factor Authentication makes stealing online information more difficult and thus more likely that thieves will choose someone else to target.
What is Duo?
Duo is the Multi-Factor Authentication software being used at NMH to enhance our online security.
How often will I need to use Duo?
Duo is required anytime you are logging into Okta. Duo authentication will reset after 4 hours, the same reset time frame as OKTA. We recommend reloading your Okta tab periodically to reset the timer. Remember to click the checkbox next to "Do not challenge me on this device for the next 4 hours."
How do I set up Duo MFA at NMH?
Duo MFA must be enabled in Okta, and installed on your phone to operate properly. Here is our guide to get up and running with Duo.
How do I use Duo day-to-day?
Once Duo is set up you will log into Okta as you always have, but now you will now see that after you have entered your login name and password into Okta you will be presented with a secondary verification factor. Duo will usually default to using a push notification to your phone or the Touch ID on your MacBook (if applicable) for this step, but if you click on Other options you will see your full list of verification options.
Duo Push: This sends a notification to the Duo app on your phone that asks if you are trying to log into Okta. Tap the green button to approve the connection and you will be logged in.
Duo Mobile passcode: Open the Duo app on your phone and click Show next to the Passcode section.
Text message passcode: this will send a verification code to your phone via SMS.
Phone call: This mode will call your phone to confirm the connection, an automated voice will identify itself as coming from Duo. Simply answer the phone call and tap any button on the keypad to confirm the connection.
Does the Duo App have to be on my phone?
For the vast majority of NMH employees the phone is their most secure and convenient vehicle for MFA to take place. Some NMH employees, may be able to use other tokens like the TouchID on their Macbook or, with approval, a specially purchased hardware token. A hardware token is a credit card or fob that takes the place of the Duo app, and can provide a passcode without the Duo App.