Information Technology Services IT Security Office
 

2FA is now required for all employees to access Patriot Web and Banner-related applications.

  PP + Duo transparent background  

ENROLLMENT INSTRUCTIONS

Select which phone number you will use during your initial 2FA enrollment. You can also download a PDF of these enrollment instructions.

U.S. Phone Number (Smartphone App)
  1. On your smartphone, go to the App Store and download the Duo Mobile app by Duo Security. The app is used to confirm your identity when connecting to any 2FA-enabled application or service.
  2. On a web browser go to 2fa.gmu.edu. Click Enroll in 2FA on the bottom right.
  1. 2FA homepage with enroll in 2FA button highlighted
  2. Login with you Mason NetID and Patriot Pass Password.
  3. CAS login screen
  4. Begin the enrollment process by selecting the phone number of your device and click Next. You must be able to answer a call to complete enrollment.
  5. Note: If your phone number is not listed, please complete and submit the Form to Update Your Phone Number for 2FA Enrollment located at hr.gmu.edu/forms. After this form has been processed (within one business day), please return to begin the 2FA sign up process again.

    New phone numbers screen
  6. Confirm the phone number you selected, click OK.
  7. 4
  8. Click the green Call Me button.
  9. 5
  10. The phone number you selected previously will ring. Note: If you miss the call it will attempt to call you up to 6 times.
  11. When you answer the call, it will ask you to acknowledge the call. Press 1 when prompted.
  12. Select your phone type from the list. i.e., if you are enrolling an iPhone select iPhone and for an Android select Android. Then click Enroll Device.
  13. 6
  14. Open the Duo Mobile App on your smartphone and click + or Add Account. Note: When configuring the app, allowing or enabling notifications improves your ability to authenticate using Duo Mobile.
  15. Scan the activation QR code to activate your device
  16. Click Continue.
  17. When prompted enter an alternate email address and click Save and Continue. The alternate email address cannot be your Mason email.

    Note: This alternate email address is used if you need an Emergency Bypass Code, if you do not enter an alternate email address it will make the process harder to get back into 2FA. 7
  18. Your initial enrollment is complete. The Enrollment Confirmation page will open. To enroll additional devices or manage other account information click OK. For additional instructions see 2FA Management Options and the List of 2fa Authentication Options.
  19. Click Logout to exit the Account Management application.
U.S. Phone Number (Landline, Office Phone, Mobile Phone)
  1. On a web browser go to 2fa.gmu.edu. Click Enroll in 2FA on the bottom right.
  1. 2FA homepage with enroll in 2FA button highlighted
  2. Login with you Mason NetID and Patriot Pass Password.
  3. CAS login screen
  4. Begin the enrollment process by selecting the phone number of your device and click Next. You must be able to answer a call to complete enrollment.
  5. Note: If your phone number is not listed, please complete and submit the Form to Update Your Phone Number for 2FA Enrollment located at hr.gmu.edu/forms. After this form has been processed (within one business day), please return to begin the 2FA sign up process again.

    New phone numbers screen
  6. Confirm the phone number you selected, click OK.
  7. 4
  8. Click the green Call Me button.
  9. 5
  10. The phone number you selected previously will ring. Note: If you miss the call it will attempt to call you up to 6 times.
  11. When you answer the call, it will ask you to acknowledge the call. Press 1 when prompted.
  12. Select your phone type from the list. i.e., if you are enrolling a non-smartphone mobile phone select Mobile Phone and for an office phone select Other Phone. Then click Enroll Device.
  13. 6
  14. When prompted enter an alternate email address and click Save and Continue. The alternate email address cannot be your Mason email.

    Note: This alternate email address is used if you need an Emergency Bypass Code, if you do not enter an alternate email address it will make the process harder to get back into 2FA. 7
  15. Your initial enrollment is complete. The Enrollment Confirmation page will open. To enroll additional devices or manage other account information click OK. For additional instructions see 2FA Management Options and the List of 2FA Authentication Options.
  16. Click Logout to exit the Account Management application.
Non U.S. Phone Number

The steps below are for enrolling in 2FA if you are working internationally. Mason requires that during your initial enrollment the phone number of your device must be in Patriot Web. You must use a device (smartphone or tablet) which is able to use the Duo Mobile app.

  1. On your smartphone, go to the App Store and download the Duo Mobile app by Duo Security if you have not already. The app is used to confirm your identity when connecting to any 2FA-enabled application or service.
  2. On a web browser go to 2fa.gmu.edu. Click Enroll in 2FA on the bottom right.

  3. 2FA homepage with enroll in 2FA button highlighted
  4. Log in with your Mason NetID and Patriot Pass Password.

  5. CAS login screen
  6. Begin the enrollment process by selecting your phone number and click Next. You must be able to answer a call to complete enrollment.
  7. New international phone numbers screen

    Note: If your phone number is not listed, please complete and submit the Form to Update Your Phone Number for 2FA Enrollment located at hr.gmu.edu/forms. Do not use punctuation (dashes, periods, spaces or parentheses) or prefixes (such as 011) when updating your phone number. After this form has been processed (within one business day), please return to begin the 2FA sign up process again.

  8. Confirm the phone number you selected and click OK.
  9. International 6
  10. Enroll your Duo Mobile compatible device (e.g., smartphone or tablet) in Mason's 2FA system. You need to include the type of device and a device name. Also include an alternate (non-Mason) email address. Click the Save and Call Me button.
  11. 1
  12. Answer the phone and press 1 when prompted. Open the Duo Mobile App on your device and scan the QR code, which activates the app. Click Continue.
    International No 8
  13. This is the next screen you will see, which verifies you have completed the initial enrollment.
    slide 9 updated


spacer

LIST OF 2FA AUTHENTICATION OPTIONS

Once you have successfully enrolled in 2FA, you are able to use any of the following authentication options.

  1. Smartphone with Duo App
    1. Push-Login attempt sends a message to your smart phone; push approve button
      Duo Push Notification Screens
    2. One Time Password-Generate a single use code; enter into the 2FA login window
      Duo Password Notification Screens
  2. Yubikey (USB device for generating codes)
    1. Plug it into the USB slot; press the button when prompted; a code will be auto populated in the 2FA login window
  3. Duo Callback (all phones)
    1. Phone call to an enrolled phone number; Press 1 to confirm authentication
  4. Duo SMS Code (smartphone or non-smartphone mobile phone only)
    1. Send a one-time password to your phone as a text message; enter code into the 2FA login window
      Duo SMS Notification Screens

If you need assistance related to 2FA, contact the ITS Support Center.