Duo Multi-Factor Authentication

SLC’s internet-accessible services are constantly subject to illicit login attempts from people seeking to install malware and ransomware, searching for mailboxes from which to send spam, hunting for data for identity theft, or attempting to steal intellectual property. Duo multi-factor authentication (MFA) is a proven technique to prevent your account from being used in these attacks. It relies on something you know and something you have.

Once your SLC account is MFA-enabled, your login to SLC.me and the applications within it are protected by Duo. This is accomplished by using your SLC username and password (something you know) with a Duo token, or Duo Mobile application running on a smartphone or tablet (something you have).

Should someone steal your password and attempt to use your account to access SLC.me they will be denied access without your Duo token or Duo Mobile application.

Setting Up Duo with your SLC.me Account

Every staff and faculty account will be Duo enabled and have a hardware token assigned to the user. If you are missing your token (whether you are new to the college or never received one) please contact the IT Service Desk (ITS@sl.on.ca or extension 4357).

To pick up your token, please visit IT Services at these locations:

Brockville Campus: Please visit the IT Service Desk to obtain and test your Duo token. IT Service desk hours are 8:00 AM to 4:00 PM Monday through Friday.
Cornwall Campus: Please contact Michael Pettinella (x2233 / Michael.Pettinella@sl.on.ca) or Jason Pichie (x2240 / Jason.Pichie@sl.on.ca and test your Duo token.
Kingston Campus: Please visit the service desk and test your Duo token. IT Service desk hours are 8:00 AM to 4:00 PM Monday through Friday.
Other Locations: Contact IT Service Desk to coordinate getting your Duo token. We can also arrange to mail the hardware token out for remote users unable to make it onto campus

All corporate cell phone users will have the Duo Mobile app installed on their phones. If you have a corporate phone and it is not registered with Duo, please follow the Detailed Registration Steps below.

All SLC users have the option of utilizing their personal device to register with Duo and we highly recommend doing so. For staff members, the Duo Mobile app can offer a faster method of accessing your SLC account (utilizing a push notification) than entering the numbers from your Duo token. If you forget your token at home (or vice-versa) you’ll have a backup authentication device to utilize immediately.

Detailed Registration Steps

Note: Do not start the registration from a smartphone or tablet since the process involves scanning a QR code that is displayed on the computer screen.

Instructions for Staff and Faculty	Instructions for Students
Sign into SLC.me but before entering your Duo hardware passcode, click onto Settings From the slide-out menu, choose Add a new device You must authenticate with an existing device before adding a new one. Either enter a passcode or send a push notification to proceed. Proceed to Step 5 below	Sign into SLC.me Click onto the Duo Registration button Scroll to the bottom of the page, and click on “start setup now” Proceed to Step 5 below

Using Duo

Once your Duo setup has completed:

1. Log into slc.me as you normally would. You will be prompted each time you sign into SLC.me to validate your identity with Duo.
2. Specify whether you’d like to receive a push notification, or passcode from your Duo token or Duo Mobile app. In a situation where you do not have access to data on your device, you can still use the passcode provided in the Duo Mobile application to sign-in.
3. Acknowledge the notification on your device or enter the passcode as requested.

Third-Party Accounts and Services

Duo Mobile goes beyond St. Lawrence College and can be used with a variety of web services and applications, including Facebook, Twitter, Google and more. Authentication apps such as Duo Mobile or Google Authenticator provide a more secure multi-factor method than text messages and are increasing in popularity due to their ease of use and provided security. Duo provides instructions on adding third-party accounts to your Duo mobile app: Third-Party Apps

We recommend setting up multi-factor authentication on any online account you have and implore you to seek out the service’s instructions for adding an authentication app. Although a website may provide instructions for one authentication app – like Google Authenticator – generally they provide the same service and setup can be completed as long as you can scan the QR code they provide.

Duo Restore for Third-Party Accounts

When you get a new phone or device, you’ll find yourself reinstalling your authentication app and needing to restore the sites you had setup previously. With Duo Restore you can backup and restore those sites with the following guide from Duo: Duo Restore

Frequently Asked Questions

Multi-factor authentication (MFA) is the industry standard for login security. MFA protects your accounts and data if your password is ever compromised.

All St. Lawrence College staff and faculty are required to be registered with Duo and will be provided a hardware security token. The mobile app is recommended as well but is optional for personal devices. The mobile app supports ‘push notifications’ when logging in so instead of putting in a code, you can either approve or deny the login attempt via your phone.

Duo is optional for students but highly recommended.

You can use a Duo token or the Duo Mobile app running on a smartphone or tablet. Using the push notification on a Duo Mobile application is the most convenient method: just press “approve” on the Duo Mobile app. Using the push notification requires data or Wi-Fi on the device running the Duo Mobile app. In a situation where you do not have access to data on your device, you can still use the passcode provided in the Duo Mobile application to sign-in.

We are providing all staff with a Duo token that can provide a secure passcode if you chose not to use (or do not have) a smartphone or tablet.

You can set up multiple devices with Duo such as a smartphone and a tablet or Duo token. If you have lost access to your device(s) you can contact the IT Service Desk for assistance. IT Service desk hours are 8:00 AM to 4:00 PM Monday through Friday.

You do not require data to use the Duo Mobile application. In a situation where you do not have access to data on your device, you can still use the passcode provided in the Duo Mobile application to sign-in. Push notifications do require data.

Contact the IT Service Desk. The staff can help you access your account and get you set back up.

Your token can become "out of sync" if the button is pressed too many times in a row and the generated passcodes aren't used for login. In some cases this can happen by accident if the token is stored next to other objects in a pocket, backpack, etc. Contact the IT Service desk and we will ask you to generate three passcodes in a row and can attempt to resynchronize the token.

Yes, you can utilize multiple authentication devices with your SLC.me account.

When you log into SLC.me, before entering your authentication method (push notification or passcode), click onto Settings then Add a new device to proceed with setting up another device on your account.

There are some phone number restrictions: you can only use your phone number with one account, but you can use multiple phone numbers with one account. That is, if you use 613.555.5555 on your account, you wouldn’t be able to add that to another SLC.me account. But if you also have 613.544.5544, you can add that as a second phone number on your account.

You can always add another device as a “tablet” when choosing your device type – tablets do not need phone numbers to be setup.

Need Help?

The ITS Service Desk is here to help! If you encounter any issues, please call 613.544.5400, ext. 4357 or email us at ITS@sl.on.ca.