Skip to Main Content

What is Multi-factor authentication?

Multi-factor authentication (MFA) adds an additional layer of security to your online accounts, requiring extra information or a physical device to login. By requiring a second factor, we can prevent anyone but you from logging in, even if they know your password.

Three steps to stronger authentication

  1. Factor 1 – Enter your username and password as usual
  2. Factor 2 – Use your personal device to verify your identity
  3. And you’re securely logged in.

MFA Setup Instructions for Canvas

The image below is similar to what you will see after logging into Canvas. The screen will be personalized for your Canvas account and will be used to set up MFA.

To verify multi-factor authentication with Google Authenticator, download the app for your device (iPhone or Android) [1].

Once downloaded to your device, open the Google Authenticator app (see screens below), tap the + button and tap Scan a QR code. Use the app to scan the QR code from your Canvas MFA page [2] to create your Saint Rose account in the app.

 

Moving forward, every time you log into Canvas, you will follow up your username and password by entering the code from the app in the Verification Code field [3].

If you want multi-factor authentication to remember the computer you are using to log in to Canvas, click the Remember this computer checkbox [4].
Click the Verify button [5].

 

 

Using SMS as your second factor in Canvas is not recommended. SMS is the least secure and least reliable method of authenticating with multi-factor authentication. We urge you to consider using the Google Authenticator app to help secure your Canvas data.

 

Frequently Asked Questions

Login credentials are more valuable than ever and are increasingly easy to compromise. Over 90% of breaches today involve compromised usernames and passwords.

Multi-factor authentication enhances the security of your account by using a secondary device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.

Yes, participation is required for anyone accessing applications that are protected by multi-factor authentication.

The following applications are being protected by Duo:

Applications protected with Google Authenticator or SMS.

  • Canvas
  • Microsoft 365 apps (SharePoint, OneNote, etc)

Applications expected to be protected over time:

  • Computer logins
  • Degree Works
  • Salesforce

Duo Push is an authentication request you’ll receive as a notification on your smartphone. It’s quicker, easier and more secure than receiving text messages or phone calls.

To use Duo Push, you will need to have the Duo Mobile app installed and activated.

Almost none. 500 pushes to your device will use 1 MB of data in total. This is roughly equivalent to loading one webpage on your smartphone.

Please contact the Help Desk for more information regarding MFA options.

Yes. The Duo and Google apps work over wifi.

And if you do not have wifi, you can still use the passcodes generated by the apps.

For Duo protected applications – choose the Passcode option as your second factor, open the Duo Mobile app and tap Show next to the hidden passcode.

The sole purpose of installing the Duo Mobile app is to provide our users with a convenient and secure method for authentication to the College’s systems.

Duo Mobile asks for permission to send you notifications so that it can be used as your second factor.

Duo Mobile asks to access your camera to scan a QR code during activation.

Duo Mobile will also ask whether you wish to share application usage with Duo. Whether you choose to allow or deny this access, the app will work as needed for authentication.

ITS administrators have access to the following information

  • Type of device enrolled
  • Operating System and version of the device
  • IP address of the device when it was used for authentication
  • Geolocation information from where the device was used for authentication (city and state only)
  • Phone number associated with the device (used only to uniquely ID your device as you)

Duo CANNOT

  • Read your email or text messages
  • Access your contacts
  • See your browser history
  • Access your photos or files
  • Erase your device

See the Duo Mobile Privacy Information site for more.

Please contact the Help Desk with any questions you have.