ITS now provides students, staff and faculty with two-factor authentication through Duo, adding an extra layer of protection for Pomona logins. Duo, a leader in two-factor authentication services, was selected by Pomona College for its security, dependability, and user-friendly approach.
Duo adds a second layer of security when accessing Pomona resources by verifying your login with a second method such as a text, phone call or push notification on your mobile device.
Getting started with Duo is easy and takes less than five minutes. Simply login to the Duo Self-Service page with your Pomona credentials, select the "Start Setup," and follow the instructions to connect your device. We recommend setting up your smartphone using the Duo App (instructions below) and your desk phone (click +Add another device, then follow the instructions). This gives you a backup in case you forget your cell phone.
Duo's self-enrollment process makes it easy to register your phone or tablet and activate the Duo Mobile app so you can receive Duo requests via push notification and tap to approve and login. To setup your device, download the Apple or Android app and follow these simple instructions.
Once you've enrolled in Duo, you're ready to go. To test Duo, point your browser to any service that is behind CAS (Central Authentication Service). These include Sakai, Kronos, The Portal, Workday etc. Login to your account with your Pomona College credentials, check the box next to "Remember me for 30 days" and use your device to verify that it's you.
As a Pomona College community member, you may have access to confidential and sensitive information about students, the college, and even yourself. Verifying your identity with a secondary device makes it difficult for someone to gain access to your account. Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account. Two-factor authenticationadds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you. This second factor of authentication is separate and independent from your username and password —Duo never sees your password.