Multi-Factor Authentication

How MFA Works

1. Enter your username and password to ​​log in to a Fordham system.
2. If MFA is required, you will be automatically redirected to an MFA login screen that prompts you to verify your identity on your secondary device.
3. Use your secondary device to verify the login and gain access. 

💡Tip: Remember Duo MFA Identity Verification for 30 Days💡

You can opt to have Duo remember you, allowing you to skip MFA when logging in on the same browser and device for the next 30 days. If you are logging in to Fordham systems on a personal trusted device, click the “Yes, this is my device” button that appears after you complete the MFA login.

🚨Important: Only approve MFA requests that you initiated🚨

Only approve Duo MFA prompts that you have initiated by logging in to a Fordham system. DO NOT APPROVE any Duo requests or provide any Duo passcodes not initiated by you.​ If you receive an unsolicited MFA request, it could indicate that your Fordham account username or password has been compromised - report it to the IT Service Desk immediately by calling 718-817-3999.

First-time MFA Enrollment

All Fordham accounts must be enrolled in MFA. You will be prompted to set up MFA the first time you try to log in to a Fordham system with your Fordham credentials. There are multiple device authentication methods you can use to set up MFA (see below), but we strongly recommend using the Duo Mobile push notifications method on your smartphone. Instructions for first-time setup: 

1. Go to fordham.edu and click Log In in the menu
2. Enter your Fordham username and password and click the maroon LOGIN button.
3. You will be automatically redirected to a Duo Security setup page. Click Get started.
4. Follow the on-screen prompts to add a Duo device. 

First-time MFA Enrollment - Duo Mobile (step-by-step tutorial)

First-time MFA Enrollment - Duo Mobile (video)

Add Additional Devices for MFA

Once you are enrolled in MFA, we recommend you add additional devices and authentication methods as backup:

1. Go to a Fordham system and log in with your Fordham Username and password
   • You may need to use an incognito or private browsing window if you opted to have Duo remember your device for future log-ins
2. On the MFA log in screen, click Other options
3. Scroll down to the bottom and click Manage devices
4. Follow the instructions to verify your identity with an existing device
5. Click Add a new device and follow the prompts to add another device

Troubleshooting and FAQs

What if I receive an unexpected MFA request?

Suppose you receive a MFA request (login alert on the Duo Mobile app, a phone call from the authentication system, passcode via text message, etc.) that you did not initiate via the login process. Your Fordham username and password may have been compromised. Contact the IT Service Desk immediately by calling 718-817-3999.

Forgotten device: Don’t have your MFA secondary device with you and can’t log in

Contact the IT Service Desk immediately at 718-817-3999. They will verify your identity and provide a temporary passcode. We recommend adding multiple MFA devices for this reason.

Lost device: Your MFA secondary device was lost or stolen

Contact the IT Service Desk immediately at 718-817-3999. They will verify your identity, delete your lost phone from your Duo account to prevent malicious activity, and provide a temporary passcode so you can log in and add an alternative MFA device. 

New Phone: How do I set up Duo Mobile on my new phone or tablet? 

In order to use Duo Mobile push notifications or passcode on a new device, you must download the Duo Mobile app (iOS/Android) and reactivate it on your new phone:

1. Go to fordham.edu and click Log In in the menu 
2. Enter your Fordham username and password and click the maroon LOGIN button.
   You will be automatically redirected to the MFA login page. 
   
   • If you are not directed to complete MFA, you may have opted to have Duo MFA remember your device for future log-ins. In that case, use an incognito or private browsing window and repeat steps 1 and 2. 
3. If you are asked to open Duo Mobile to approve your Duo Push notification, wait a few seconds. A link for I Got a New Phone will appear, click it. 
   
   • If you are not automatically prompted with Duo Push, click Other options and select Duo Push, then wait a few seconds and click I Got a New Phone. 
4. Follow the on-screen prompts to add your new phone.

Can I set up MFA on multiple devices?

Yes! You should set up MFA on multiple devices as a backup if your preferred device is unavailable (i.e., left at home, battery-depleted). During the initial setup or anytime you go to your Duo account, you may add as many phones/devices as you like.

Will MFA prompt me every time I log in to Fordham.edu?

You will always be prompted to log in to MFA unless you have instructed Duo to remember your personal device for future log-ins.  After you complete the MFA login, you can click the button that says “Yes, this is my device” so you won’t be prompted to complete MFA again for 30 days when you’re using the same browser and device.

I can't log in with Touch ID or Face ID because I am on a different device - what should I do?

If you have registered with Touch ID and Face ID and try to log in from a different device, Duo will prompt you to enter a bypass code. Contact the IT Service Desk at 718-817-3999 to retrieve the code. 

Can I complete MFA if I am travelling internationally?

MFA works anywhere in the world. If you are travelling without a telephone signal or data plan, you can use the Duo Mobile app passcode. Just ensure your device is already set up with the Duo Mobile app before you travel. If you use the app, tap the key icon in the “Fordham University” bar to generate the required six-digit passcode without a telephone signal or data plan. You can do this anywhere in the world.

What information is shared with Duo Security?

Duo only stores your Fordham username, email address, and authentication device information, such as your phone number. Duo does not have access to your Fordham password.

Why does Duo Mobile need access to my device’s camera?

Duo Mobile needs one-time access to your device’s camera. Duo Mobile only​ accesses your camera when it scans a QR code during activation. This step is only completed during your initial enrollment or when you elect to activate a new smartphone. You may disable Duo’s camera access in your phone’s settings; enable it only if you need it again.