MFA Self-Service Enrollment Walk-through

This document will quickly walk-through the self-service enrollment process for MFA (Multi-Factor Authentication) available at https://mfa.mines.edu/. The vendor being used to provide this service to Mines is Duo Security – see https://duo.com/ for more details.

Before you enroll, please decide how you want to receive your one-time only MFA code. There are two different methods to receive your MFA code: DUO Mobile application or a free hardware FOB. The DUO Mobile app can be downloaded on any mobile device such as a cell phone, tablet, etc.The DUO app only works through either a Wi-Fi connection or a cellular network. The hardware FOB can be used without Wi-Fi connection or a cellular network. Please do not continue until you have either downloaded the DUO Mobile app or have requested a free key FOB at https://helpcenter.mines.edu.

Please go to the MFA enrollment page at https://mfa.mines.edu/. ** If you are off campus, you must first login to VPN before you visit https://mfa.mines.edu/ to enroll. ** If you do not have the Mines VPN downloaded, please visit https://ras.mines.edu/.

When you first visit the MFA enrollment page, you will be re-directed to the Mines’ login page. Please log in with your Mines multi-pass credentials. If you have already logged into another SSO (Single Sign-On) site, e.g. canvas, Chrome River, library web-site, etc. then you will not be presented with the following screen.

Once you have logged in, you should see the main landing-page which consists of a notice about using a Mines' provided hardware FOB. If you have decided to request a key FOB and have not received it yet, please stop here until you have received your FOB. Otherwise, please click “Continue” to proceed.

After you clicked on “Continue”, the site will verify whether or not you have already enrolled in DUO. If you are enrolled, you will see a screen similar to figure 3. Thank you for enrolling in MFA! Otherwise, please continue with the enrollment process.

 

 

 

 

 

 

 

 

 

 

 

 

 

If you are still eligible for enrollment in the Mines’ MFA program, you should see the following screen. It will verify that you have correctly installed the DUO Mobile app and you will now need to associate a mobile device with your account.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Begin the self-service enrollment process

Per figure 5, click through Start setup.

Enroll First Device

Next, you will choose which device to initially enroll with. Most people will best enroll their mobile phone at this point. Although, as can be seen, there are other options available. The final part of this walk-through will enroll your office phone as a backup device.

For mobile phone and tablet-based enrollments, please ensure that you have the Duo Mobile application installed on your device, as per what is displayed through figure 7. To install this application visit Apple’s App Store or Google’s Play Store and search for “Duo Mobile”. To make sure the correct application is being installed, check that the logo is as shown in figure 7 and the app is created by Duo Security.

 

Next, following through the mobile phone enrollment path through figure 8, you input your phone number and confirm it is correct through the checkbox. Hit continue.

 

Next step, through figure 9 overleaf, is to verify ownership of the phone number. This can be done either through a phone call (Call Me option) that is a fully-automated voice-call wherein your six-digit number is read out to you. Or you can have the number arrive via a text message. Input the six-digit code into the verification field and hit Verify. All being well, this field will show a check-mark and enable the continue button to be pushed.

 

Enrollment completed!

Everything being successful, you should now see the “confetti” screen, figure 10, telling you that your enrollment has been successfully completed. Hit Dismiss to see your summary screen, plus we will walk-through how to add in your office phone, or just another device, to serve as a backup in case, for example, one day you forget your mobile phone (or it gets ran-over, forced through the washing-machine and is currently drying off in a tub of rice (for those non water-resistant models) … etc.)

 

My Settings & Devices

You should now be looking at your, “My Settings & Devices” page, as shown in figure 11. From here you can tinker with your device’s options, as well as configure login actions. However, the defaults are a good baseline. You should only tinker once you are more comfortable with your whole MFA setup.

We are going to add a secondary – backup – device (your office phone) that will give you another way to authenticate if something untoward happens with your primary, just enrolled, device.

Add another device

Click through the “Add another device” link through the “My Settings & Devices” window. This will bring up a screen as shown in figure 6. Select “Landline” this time and hit Continue. Go through the same process as shown and discussed around figure 8, i.e. inputting and verifying your phone number. After hitting Continue, you’ll see a similar page to verify ownership as in figure 9. The only difference between the initial mobile phone and the land-line phone is that the latter only has a “Call me” option. Hit this button, answer your office phone and input the verification code into the Verify field. Once done, hit Continue.

You’ll now be looking at figure 12 overleaf, that is similar to what is shown in figure 11 above, except now it also lists your office phone as a secondary device.

 

0% helpful - 2 reviews

Details

Article ID: 74455
Created
Tue 3/26/19 8:54 AM
Modified
Mon 3/29/21 10:47 AM