Auburn University uses Duo Security to prompt individuals for a secondary confirmation of their identity at log in using a physical device in their possession. This process is called multi-factor authentication, or MFA. The physical device may be a smartphone or tablet using an app, a text message to a phone, an automated voice call to landlines or cell phones, or a hardware token.
AU employees and students are strongly encouraged to register at least two alternative devices, such as a smartphone or cell phone number (as a landline) or a tablet.
Duo Mobile is a security requirement for AU employees and students. Duo Mobile uses multi-factor authentication to confirm your identity when accessing certain university resources.
This is a partial list of software utilized by Auburn and whether it is protected by VPN or Duo MFA.
VPN Required:
MFA Required (VPN is NOT Required):
Auburn Credentials Required (VPN and Duo MFA Not Required):
I want to protect a University resource. How do I proceed?
Departments are strongly encouraged to protect their infrastructure with Duo. For questions or assistance, contact the IT Service Desk at (334) 844-4944 or itservicedesk@auburn.edu.
I am a retiree. How do I access the VPN?
If you are a retiree and need to access the VPN, you will need to set up Duo.
I have received a push notification, text message, or phone call through Duo that I did not initiate. What should I do?
This may be an attempt to compromise your account. Do not accept the push, text, or call. It is recommended that you change your password through My Account and notify the IT Service Desk at (334) 844-4944.
Why am I not receiving the Duo push notification?
Assuming you have configured your device to receive Duo push notifications and have installed the Duo mobile app, you may need to power cycle your device. On rare occasions, iPhone and Android may not display the Duo push notification, but a power cycle usually clears this issue.
If you have a replacement phone with the same number, you will not receive Duo push notifications until you reactivate your phone. Please refer to the Knowledge Base article "Reactivating Duo on a Phone with the Same Number" for more instructions or contact the IT Service Desk at (334) 844-4944.
How do I resolve the Duo prompt display issues related to iOS content restrictions?
iOS has configurable content restrictions that can potentially prevent the Duo prompt from displaying correctly. Please refer to the Knowledge Base article "How Do I Resolve Duo Prompt Display Issues Related to iOS Content Restrictions" for more instructions or contact the IT Service Desk at (334) 844-4944.
I will be traveling internationally. What do I need to know about traveling internationally and needing or using Duo?
Please refer to the Knowledge Base article "Using Duo and Traveling Internationally" for more instructions or contact the IT Service Desk at (334) 844-4944.
MFA Fatigue
With cybercrime on the rise, more and more organizations are implementing best practices such as multi-factor authentication to protect their users from credential theft, phishing attempts, and brute-force password guessing. To get around this added layer of protection, hacking groups have developed a new tactic: MFA fatigue. MFA fatigue relies on spamming victims with endless authentication prompts until they grant the attacker access by accident or out of sheer frustration.
If you receive repeated MFA prompts that you did not initiate, do not accept the prompts. Instead, deny the requests and report it as suspicious using the Duo app.