At Smith College, ITS provides two-factor authentication to help you protect your account information. Two-factor authentication requires you to verify your identity on a second device (such as your phone or other mobile device) before you finish logging into your account.
On devices you trust, you’ll have to go through the process about once a week. If you choose not to trust a device, you will be prompted each time you access a Smith resource from that device.
If you receive an alert from Duo (push notification, text, or phone call) when you are not in the process of logging into a Smith application, DO NOT approve the request. An uninitiated notification indicates that your password has been compromised.
If you DID approve a notification but believe it was not initiated by you:
Change your password immediately. If you use the same password for other accounts, change those as well.
Contact ithelp@smith.edu
If you ignore or deny the notification:
Change your password immediately to be safe.
If you have selected "Deny", you will be prompted to report the request as fraudulent and will receive a follow-up communication from ITS.
What does this protect? Your information in Workday, including your social security number and personal financial information. It protects your email communications, access to your coursework, research data, and other electronic content including pictures and chat logs, and access to cloud-based services.
Authentication through Duo is required for Smith College instructors, staff, and students to help protect account information. This requirement of a second, separate verification step helps keep your account secure even if someone else has your password.
A desktop or laptop computer. You must enroll in Duo from a computer—you cannot enroll in Duo on a mobile device like your smartphone or tablet.
Personal device to approve Duo Push notifications. Duo and Smith recommend using your personal mobile phone (smartphone or cell phone). When setting up your primary Duo device, use a phone number that you have convenient access to. Do not use other options such as Touch ID, Chrome on Mac, iCloud keychain, and Windows hello as a primary method.
Duo mobile app. The app is available for download on the App and Google Play stores. If you are using a smartphone or tablet, we recommend installing the app before you begin to make the process easier later on.
Important: When setting up your primary Duo device, use a phone number that you have convenient access to. Do not use other options such as Touch ID, Chrome on Mac, iCloud keychain, and Windows hello as a primary method.
You need to enroll at least one personal device in Duo. The most common choice is a personal smartphone, such as an iPhone or Android.
To begin, open a new browser window and go to the Smith Portal or Workday. Log in with your Smith username and password. The enrollment screen will appear automatically the first time that you access these Smith College applications.
Select Start Setup.
Identify what type of authentication you want to use and follow the prompts. Your options may vary depending on your device. The most commonly used devices/methods are:
Duo Mobile: Use the app to approve Duo Push verification requests on iOS or Android device (Please note: one time passcodes through the Duo Mobile app are not supported by Smith)
Phone number: Approve a login attempt with a phone call from Duo or receive a one-time passcode in an SMS message.
Security key: Tap a Smith-issued security key. Requires Chrome, Safari, Firefox, or Edge.
Touch ID: Use the fingerprint sensor on Apple MacBooks, Magic Keyboards, or some older models of iPhone.
Refer to Duo’s instructions for more information on enrollment.
After you have finished setting up your first device, it is recommended you add a backup device.
We highly recommend adding a second device in case you don’t have access to your primary device. Having a backup device means you’ll still be able to log into your Smith accounts without contacting IT Support.
Scenarios where your backup device would be helpful include:
You don’t have your phone with you, and you need access to your Smith email or other resources.
You lose your primary device.
You get a new phone and don’t have access to the old phone.
Open a new private or incognito browser window on your computer to ensure you receive the Duo prompt and go to the Smith Portal or Workday.
Enter your Smith username and password.
When the Duo pop-up window appears, select Need Help? in the bottom left corner.
4. Select Manage Devices.
5. You’ll need to verify your identity through Duo before you can proceed to the Devices page.
6. Select Add a device and follow the prompts.
Refer to Duo’s instructions for more details.
If your new phone has a new phone number (different from what you previously set up in Duo), you will need to add it as a new device, following the instructions above. Note: You will only be able to do this if you already have at least one backup device. If you don’t have a backup device registered, you’ll need to contact ITS User Support.
If your new phone uses the same phone number as your old phone, you can update that device in Duo using these steps.
Open a new private or incognito browser window on your computer to ensure you receive the Duo prompt, and navigate to the Smith Portal or Workday.
Enter your Smith username and password.
When the Duo pop-up window appears, select Need Help? in the bottom left corner.
Then select the link under “I got a new phone” and follow the prompts.
To confirm the device was successfully added and to view your other Duo devices, go back to the Manage Devices page.
Refer to Duo’s instructions for more details on adding a new phone.
What services are covered by Duo?
Any service that uses Smith’s Single Sign-On for authentication will also require Duo for authentication once activated. The most common services included are Smith email, Workday, Smith Portal, Moodle, and the VPN.
I want to add another device (or change my settings), but I selected "Trust this device." How do I do this?
The “Trust this device” option is tied to a specific browser on one computer. You can open a different browser and/or log in on a different device, which will require you to authenticate. You should then be able to access the settings for your Duo account from the menu options on the left side of the Duo screen. In Chrome and Safari, you can also open an incognito/private window. (Ctrl+Shift+N or Cmd+Shift+N).
I select “Send Me a Push,” but it’s not showing up on my phone?
Check your phone’s settings to ensure that alerts are enabled for the Duo application. Also, try opening the Duo app to ensure that the push request is reaching your phone. If you got a new phone recently, you must re-register the device with Duo, even if it has the same number. Visit the New Phone section above for instructions. Alternatively, you can use another method, like text or phone call, or one of your backup devices.
I log into multiple accounts at the same time. Can I still do this using Duo?
We recommend that you use different browsers for separate accounts. For example, use Chrome when accessing your Smith account and Firefox when accessing your personal account.
I have delegated access to another account from my account. Will Duo affect my ability to have proxy access to this other account?
No, your access to the other account will not be affected, as delegated accounts are not directly logged in.
What is a security key? Where can I get one?
A security key is a small USB device that you plug into your computer’s USB port to authenticate to Duo. It is used to approve Duo requests instead of using a phone. Security keys can be requested by submitting a support request. Keys are also available for purchase from the Smith College Computer Store.
I’m traveling abroad and won’t be able to use cell service. What are my options?
You don't need cell service to get a push from the app on your phone. As long as your device has Wi-Fi connectivity where you are and you have the Duo Mobile app, you will still be able to receive Duo requests.
If you won't have access to a phone, contact User Support to request a security key before you leave. They will help you register the key as a new device. Setup is fast, easy, and does not require a push, text, or callback for verification.
If you’re already away and don’t have other options, contact IT User Support.