Multi-Factor Authentication (MFA)

Overview

To better protect your personal information, Temple uses an extra level of security on selected websites called Multi-Factor Authentication (MFA) . It's called Multi-Factor Authentication because in order to access these sites, you will need:

  • your AccessNet username and password
  • one or more designated phones to further verify your identity

Once you set up MFA, the next time you log in to a Temple website, such as TUportal or Canvas, you will first enter your AccessNet username and password. You will then be prompted to authenticate using the phone you registered for Multi-Factor Authentication.

Get Started: One-Time Setup

In TUportal, you can designate all your phones or particular ones for Multi-Factor Authentication. This includes Apple iPhones, Android phones, basic cell phones and landlines. To begin, click below and follow the instructions:
Designate a Phone for Multi-Factor Authentication...

‹ Prev
Next ›
1
2
3
4
5
6
7
8
9
10
11
12

Page 1 of 12

Log in to TUportal . Then click Manage My Account at the top right corner of the screen.

Page 2 of 12

Click Manage Phones .

Page 3 of 12

Click the grayed-out OFF button next to the Mobile – Personal or Mobile - Work that you wish to designate for Multi-Factor Authentication. (If you need to add a phone, click on Add phone .)

Page 4 of 12

Next, follow the prompts to answer the security questions and click Submit .

Page 5 of 12

Click Yes when prompted to install the Duo Mobile app. This is a free mobile app that enables you to quickly and easily authenticate with one tap or “push” of a button. Unlike texts and phone calls, the app saves Temple significant costs, since there is no charge for using it.

Page 6 of 12

You will receive a text message with a link to the Apple Store or Google Play Store to download and install the free Duo Mobile app. If you did not receive the text, click Resend .

Page 7 of 12

You will receive a second text message with an activation link. Click this link and follow the steps on your phone to set up Duo Mobile for accessing Temple's systems.

Page 8 of 12

If you chose to activate the Duo Mobile app using a QR code instead of a text, follow the on-screen instructions to hold your phone camera up to the QR code that displays. For details, see the next step.

Page 9 of 12

Open the Duo Mobile app on your phone. Then:

Page 10 of 12

After setting up the Duo Mobile app, click Next .

Page 11 of 12

Click Close .

Page 12 of 12

The Two Step button will now be set to ON indicating that your phone is designated for the process.

‹ Prev
Next ›
1
2
3
4
5
6

Page 1 of 6

Log in to TUportal . Then click Manage My Account at the top right corner of the screen.

Page 2 of 6

Click Manage Phones .

Page 3 of 6

Under Phone Numbers, click the grayed-out OFF button in the MFA column next to the Mobile – Personal or Mobile - Work that you wish to designate for Multi-Factor Authentication. (If you need to add a phone, click on Add phone .)

Page 4 of 6

Next, follow the prompts to answer the security questions and click Submit .

Page 5 of 6

When prompted to install the Duo Mobile smartphone app, click No .

Page 6 of 6

The Two Step button will now be set to ON indicating that your phone is designated for the Multi-Factor Authentication process. Click the OFF button next to any additional phones you wish to designate.

‹ Prev
Next ›
1
2
3
4
5

Page 1 of 5

Log in to TUportal . Then click Manage My Account at the top right corner of the screen.

Page 2 of 5

Click Manage Phones .

Page 3 of 5

Click the grayed-out OFF button next to the Direct Phone , Home Phone or TTY Device that you wish to designate for Multi-Factor Authentication. (If you need to add a phone, click on Add phone .)

Page 4 of 5

Next, follow the prompts to answer the security questions and click Submit .

Page 5 of 5

The Two Step button will now be set to ON indicating that your phone is designated for the Two Step Verification process.

Using Multi-Factor Authentication

When accesing a Temple website that uses Multi-Factor Authentication, such as TUportal and Canvas, you are immediately prompted for MFA after entering your AccessNet username and password. The prompt remembers the MFA method you last used.

For example, if you installed the Duo Mobile app on your phone and previously selected the Push option, the system automatically sends a push notification to your phone without you having to select that option. To log in, use the Duo Mobile app to approve the request:

If you previously used the SMS text option to log in, the system automatically sends a passcode to your phone via text messaging. To log in, enter this passcode and click Verify .

​​​​​To select another authentication method, click Other options and select from the menu below. For more information about these options, see the Authentication Methods section later on this page.

​​​​​​​​​​​​​​Once you are authenticated, the system can remember your device for 28 days for future logins. To select this option, click Yes, this is my device . Choose this option, however, only if you are not using a shared computer, such as in a computer lab or shared office.

Finally, you are notified that you have been successfully authenticated and the page you are accessing appears:

Authentication Methods

When selecting a registered phone, the following authentication methods are available:

Authentication Method Description Requirements

Duo Push
Recommended

Use this method if you have the Duo Mobile app installed on your iPhone or Android phone . This verification method is fast and simple to use. The Duo Mobile app displays a notification on your phone. Tap Approve to authenticate.

  • If you see a login request that you weren't expecting, tap Deny . You’ll be given the ability to report it as fraudulent or deny the request without reporting it.
  • If the notification disappears from your phone screen, you can always open the app, tap the message and then tap Approve .
The Duo mobile app and Wi-Fi or celluar service.

Text Message Passcode

Use this method to have a passcode texted to your phone via SMS text message. Enter the passcode on the website and click Verify to proceed.

Note: Charges may apply, depending on your phone plan.

Cellular service

Duo Mobile Passcode

Use this method if you have the Duo Mobile app installed on your iPhone or Android phone . Open the Duo Mobile app and tap Temple University to reveal a One-Time Passcode (OTP). Then, enter the passcode on the website to proceed. The Duo Mobile app.


There is no Wi-Fi or cellular requirement. The OTP option works when your phone is in airplane mode or in an area without a cellular or Wi-Fi signal.

Call Me
Not recommended

Call Me to receive a phone call. Press any key on your phone to proceed. Telephone service

Hardware Token

​​​​​​

Use this method if you puchased a hardware token as an alternative to a registered phone. We recommend this option only if your phone is lost or stolen.

You can purchase a hardware token at the OWLtech store on Main Campus and receive help on registering it.

Press the button on your hardware token to generate a new passcode. Then, enter the passcode on the website and click Verify to proceed.

There is no Wi-Fi or cellular requirement.
Bypass Code

​​​​​​​

Use this method if you are locked out and receive a bypass code from the Technology Support Center. Enter the bypass code that was given to you and click Verify .

There is no Wi-Fi or cellular requirement.

Not Using the Duo Mobile App? Set it Up Now

Duo Mobile is a free mobile app that enables you to quickly and easily authenticate with one tap or “push” of a button. Unlike texts and phone calls, the app saves Temple significant costs, since there is no charge for using it.

If you didn't choose to set up the Duo Mobile app when you originally set up your iPhone or Android phone for Multi-Factor Authentication, see the setup instructions below:

Set up the DUO Mobile App

‹ Prev
Next ›
1
2
3
4
5
6
7
8
9
10
11

Page 1 of 11

Log in to TUportal. Then click Manage My Account on the upper-right portion of the screen.

Page 2 of 11

Click Manage Phones .

Page 3 of 11

Click Install Duo App next to your mobile phone.

Page 4 of 11

Click Yes .

Page 5 of 11

You will receive a text message with a link to the Apple Store or Google Play Store to download and install the free Duo Mobile app. If you did not receive the text, click Resend .

Page 6 of 11

You will receive a second text message with an activation link. Click this link and follow the steps on your phone to set up Duo Mobile for accessing Temple's systems.

Page 7 of 11

If you chose to activate the Duo Mobile app using a QR code instead of a text, follow the on-screen instructions to hold your phone camera up to the QR code that displays. For details, see the next step.

Page 8 of 11

Open the Duo Mobile app on your phone. Then:

Page 9 of 11

After setting up the Duo Mobile app, click Next .

Page 10 of 11

Click Close .

Page 11 of 11

​​​​​​​The Manage Phone screen reappears. A Reinstall Duo App link now appears next to your mobile phone.

Got a New Phone?

Please see the steps below to set it up:

Same Phone Number

To set up the Duo Mobile app on your new phone:

  1. Log in to TUportal . Click Other options and select Text Message Passcode rather than the Duo Push option. Then enter the code that was texted to you in the Passcode box and click VERIFY, Yes this is my device .
  2. In TUportal, click Manage My Account and then Manage Phones for Multi-factor Authentication .
  3. Click Reinstall Duo App next to your registered phone number.  When re-prompted to confirm your identity, use the Call Me or Passcode option.

New Phone Number

Use either of the options below as your second factor of authentication while you register your new phone number :

  • a second phone number that is already registered, or
  • your old phone with the Duo mobile app installed. You will then be able to use the Duo Push option or obtain a Passcode from the app.

Have neither? Please contact the Help Desk at tuhelp.temple.edu (click Chat or Request Help) or call 215-204-8000.

Preparing for International Travel

Before you go, get ready to use MFA abroad.

Bringing your phone with you?

If you haven’t already downloaded the Duo Mobile app on your phone, make sure to do so before you travel.

  • The Duo Push authentication option will work when connected to Wi-Fi, regardless of whether you have cellular service abroad.
  • The Passcode - OTP authentication option enables you to generate one-time passcodes when you don’t have Wi-Fi and/or cellular service.

See Using Multi-Factor Authentication for more information.

Not bringing your phone?

You can purchase a hardware token from OWLtech to take with you on your trip.

Plan to buy a phone when you arrive at your destination?

Consider bringing your U.S. phone with you. After you arrive and purchase your new phone, use your U.S. phone to generate a one-time passcode to log in to tuportal.temple.edu and register your new international phone number .

Plan to buy a SIM card when you arrive at your destination?

If you haven’t already downloaded the Duo Mobile app on your phone, make sure to do so before you travel. The Duo Push authentication option will continue to work even after installing a new international SIM card.

FAQs

I don't have access to a cell phone to enable Multi-Factor Authentication. What can I do?

You can purchase a hardware token from the OWLtech store in lieu of using a cell phone.

How can I log in if I am in a location without cellular service or Wi-Fi?

  1. Select Other options and then Duo Mobile passcode when logging in.
  2. To generate a one-time passcode, open the Duo Mobile app on your device, and under the Temple University account, tap Show next to Passcode. Your passcode will appear.
  3. Type the passcode in the provided area on the login screen and click Verify .

Is the Duo Mobile app free?

Yes. The Duo mobile app is free to install on mobile devices and tablets.

How much data does the Duo Mobile app use?

The Duo Mobile app uses less than 2KB per authentication. For example, you would use only 1MB of data if you were to log in 500 times in a month.

My Duo Mobile App Push alerts aren’t coming through. What should I do?

Please refer to the troubleshooting steps for iPhones or Android devices .

I confirmed that I am the only person using my device, but am still being prompted for MFA every time I log in. How can I fix this?

Follow these steps to add an exception to allow third-party cookies from Duo Security:

Chrome

  1. Click the three vertical dots on the top-right of the browser, then click Settings .
  2. Click Privacy and security on the left navigation.
  3. Click Cookies and other site data .
  4. Scroll down to Sites that can always use cookies and click Add .
  5. Enter the following: [*.]duosecurity.com
  6. Click Add .

You may need to restart your browser for changes to take effect.

Firefox

  1. Click the three horizontal lines on the top-right of the browser and click Settings .
  2. Click Privacy & Security on the left.
  3. Scroll down to Cookies and Site Data and click Manage Exceptions .
  4. Enter the following: https://duosecurity.com
  5. Click Allow , then Save Changes .

You may need to restart your browser for changes to take effect.

Safari

Safari does not have an option to add individual exceptions for sites.  You will need to enable third-party cookies on Safari to allow Duo Security to allow the “remember me” feature:

  1. Select the Safari drop-down menu from the Mac menu bar.
  2. Select Preferences...
  3. Click the Privacy tab.
  4. Make sure that Block all cookies is not checked or set to Never.

You may need to restart your browser for changes to take effect. If you are using Safari 13.1 and later, you must also disable the  "prevent cross-site tracking" option.

Print Article

Related Services / Offerings (1)

Multi-Factor Authentication
A required added layer of security that protects your Temple University accounts.