[Plantsci] netid+ update

[Marquez, Mario A - (marquezm)]

NetID+ (Plus) Two-Step Authentication
Top of Form
Effective December 12th Two New Enhancements to be added to NetID+ Learn more...<http://uits.arizona.edu/content/netid-additional-enhancements>
*       Additional credentials upon sign-up and;
*       'Remember this device for 30 days' option
Overview
[http://uits.arizona.edu/sites/default/files/netid+.jpg]<https://webauth.arizona.edu/netid-plus>
UA NetID+ (Plus) uses two types of authentication to verify your identity: your UA NetID login/password, and an authentication code. NetID+ is an optional service for UA employees and students, although UITS will be investigating its mandatory use for various University applications with heightened security requirements such as UAccess and D2L.

Once the opt-in process is completed, users can enable the 'Global NetID+' setting, which will enforce second-factor authentication for all sites utilizing UA WebAuth or Shibboleth authentication services for login - such as CatMail, D2L, and UAccess. In addition, two-step authentication can help protect your UA account should someone else learn your password.   [http://uits.arizona.edu/sites/default/files/LQP1.jpg] <http://uaatwork.arizona.edu/lqp/ua-launches-netid-provide-stronger-protection-campus-data>

There are several options available for second-factor authentication:
*         Downloading the Duo Mobile app on your Smartphone, Tablet, or iPod
*         Acquiring passcodes via SMS text messaging on your cell phone
*         Acquiring a voice callback on your cell phone or landline
*         Yubikey hardware token (purchase of YubiKey<http://www.yubico.com/support/> required)
Eligibility<http://uits.arizona.edu/services/netidplus>
Available to UA faculty, staff, and students
Getting Started<http://uits.arizona.edu/services/netidplus>
How to Sign-Up for NetID+
Go to: webauth.arizona.edu/netid-plus<https://webauth.arizona.edu/netid-plus>
How to Use NetID+
To use NetID+, select the device you wish to use from the drop down list of your registered devices, then select how you wish to perform second-factor authentication.
[http://uits.arizona.edu/sites/default/files/netidplus.jpg]
*         Duo Push (available via the Duo Mobile app on iOS, Android, Windows Phone and BlackBerry devices)
*         Phone call
*         Passcode - which can be from one of the following sources:
o    Duo Mobile app (generated via the key button)
o    SMS passcode batch (sent to your phone via text message)
o    Yubikey hardware token
o    Bypass code (generated on the NetID+ self-service site)
*         Finally, click LOGIN to complete the login.
Global NetID+

Global NetID+ is a preference, which you can set on the NetID+ self service site, which allows you to use NetID+ for all sites requiring WebAuth login-even if the site does not require NetID+. Enabling Global NetID+ significantly increases the security of your NetID and the data/services protected with it.

Bypass Codes

Bypass codes are generated from the NetID+ self-service site and are intended to be used as a 'rescue' mechanism, when you do not have access to any of your registered devices. Bypass codes may be printed out and carried with you (e.g., in your wallet or purse) or stored in a secure location. Bypass codes are generated in batches of 10 and can be used in any order (unlike SMS passcodes, which must be used sequentially). Each bypass code is good for a single use and generating a new list of bypass codes will invalidate the previous list. Bypass codes are distinct and separate from SMS passcodes - generating a new batch of SMS passcodes will not affect your current list of bypass codes (and vice-versa).

Lifelines

You can configure phones that can be used as Lifeline devices when your regular devices are unavailable. A Lifeline phone usually belongs to somebody you trust and with whom you can easily communicate.

For example, if you lose your phone and need to use NetID+, you can log in to the NetID+ management site using just your NetID and password. After you log in, you will see an option to 'Use a Lifeline'. When you choose the lifeline you would like to use (you may have more than one configured) , a verification code will be sent by text message or a phone call to that phone. The owner of that phone can communicate the code to you, and you can enter the code into this application to produce a list of ten bypass codes. Those bypass codes will allow you to complete NetID+. After completing NetID+ login, you can go to the Manage your Account page to manage your NetID+ devices. You can remove your lost phone and configure a new device for future logins. You can also print out more bypass codes.

How-To Videos

There are several How-To videos developed by UITS on the following:

*         Installing Duo Mobile on SmartPhone
*         Enrolling in NetID + for:
o    SmartPhone
o    Cell Phone with Text Messaging
o    Voice Call
o    Tablet/iPod
o    Hardware Token
*         Second-Factor Authentication Options
*         Lifelines
*         Bypass Codes
*         Global NetID+
*         Re-activating a SmartPhone
*         Deleting/Adding Devices
Click here<http://goo.gl/7U1ZME> to access the videos.
Information for International Travelers<http://uits.arizona.edu/services/netidplus>
We recommend that anyone who travels internationally, and needs to log into UA systems with NetID+, generate a list of NetID+ Bypass Codes and register at least one NetID+ Lifeline. NetID Bypass Codes are generated in batches of 10 via the NetID+ self-service site; each code is good for one login, and you can generate more at any time. Your last bypass code should be used to generate a new batch of bypass codes, if you do not have access to any other enrolled device.

Note: If you travel internationally and use SMS passcodes as your primary NetID+ authentication mechanism, the text messages you receive may incur substantial roaming charges. If you have a Google Voice account tied to an external Gmail account (i.e., @gmail.com, not @email.arizona.edu), you can set that up with NetID+ as an SMS-capable phone and configure it to deliver incoming SMS messages to your Gmail mailbox.

If you expect to travel internationally and cannot set up Duo Mobile as your NetID+ authentication method, bypass codes, a Yubikey hardware token, or the aforementioned Google Voice approach are your best alternatives.

Support or Assistance<http://uits.arizona.edu/services/netidplus>
Contact the 24/7 IT Support Center at (520) 626-TECH (8324) or complete a UAssist request form<https://uassist.arizona.edu/>.
Visit UA NetID+ FAQs and Tutorial Videos after you login to the NetID+ portal<http://webauth.arizona.edu/netid-plus>.
Bottom of Form

Mario A. Marquez
Systems Administrator Principal
University of Arizona
College of Agriculture and Life Sciences
School of  Plant Sciences
marquezm at email.arizona.edu
Office 520-621-1257
Cell 520-429-2902
[UAriz-CALS-logo-247]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://list.cals.arizona.edu/pipermail/plantsci/attachments/20141211/1774a702/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 4336 bytes
Desc: image001.jpg
URL: <https://list.cals.arizona.edu/pipermail/plantsci/attachments/20141211/1774a702/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 10043 bytes
Desc: image002.jpg
URL: <https://list.cals.arizona.edu/pipermail/plantsci/attachments/20141211/1774a702/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 38035 bytes
Desc: image003.jpg
URL: <https://list.cals.arizona.edu/pipermail/plantsci/attachments/20141211/1774a702/attachment-0002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.gif
Type: image/gif
Size: 4528 bytes
Desc: image004.gif
URL: <https://list.cals.arizona.edu/pipermail/plantsci/attachments/20141211/1774a702/attachment.gif>