What is two-factor or multi-factor authentication?


Pomona College is participating in a Claremont-wide initiative to provide two-factor security authentication when accessing Pomona and Claremont resources. Two-factor authentication enhances the security of your account by using a second device to verify your identity. This secondary security authentication prevents anyone from accessing your account, even if they know your password. The product that has been chosen is called DUO. Watch this video produced by DUO about the basics of two factor authentication.

Why are we deploying DUO?

As a Pomona community member, you may have access to confidential and sensitive information about students, the college, and even yourself. Your Pomona account unlocks access to your paycheck, direct deposit, the ability to redirect it, benefit information and the information to file tax returns. Adding a second authentication mechanism makes it more difficult for someone else to gain access to that information, even if your password has been compromised because the attacker won't have access to your second-factor device.

How do I enroll and setup DUO?

Pomona ITS staff will be coming around to assist you. We will be reaching out to schedule time with you and your office to get you enrolled.

In addition, you can enroll in DUO online.

What kinds of second factor authentication can be used with DUO?

  1. We highly recommend installing the DUO Security mobile app on your mobile phone. DUO also works on some smart watches.  Download the DUO Security Mobile App from the Apple Store, Google Play.
  2. DUO can also be configured to call landlines (and you should add multiple landlines to your account since you may have to access from more than one location such as your home and your office).
  3. You can also set DUO up on a tablet, as long as it’s connected to the internet.
  4. DUO can be set up to SMS/text messages.

Which systems are affected and how often will I be prompted to authenticate the second factor?

Any system that authenticates through Claremont CAS (Central Authentication Services) will require multifactor authentication. Those services include the portal, Workday, Kronos, Webmail, Sakai and anything else that uses CAS. In the future, other services will also be covered by DUO. It will remember your selection for 30 days if you check the box approving access in DUO.

What if I don’t have a smartphone?

You can setup and use the Call Me option and the service will call a telephone, or even SMS/text if you have a device that can receive them.

What if I forget my smartphone and that is the only method of authentication I have set up?

Please Call the Pomona College Service Desk at (909) 621-8061 and we can arrange for a temporary code.