DUO: FAQ for ASC Faculty and Staff

Overview

BuckeyePass is OSU's two factor authentication, also known as Duo.

Two factor authentication (2FA) means an second identifier, typically in addition to a password. Generally, there are three ways to authenticate: something you know (password), something you have (a token or phone app), and something you are (a fingerprint).

Two factor authentication has become much more common with banks, Gmail, and now OSU requiring it for many services. OSU requires BuckeyePass for almost every system that has somewhat sensitive data, from logging in to computers, to email. 

OTDI Resources

ASCTech is happy to answer any questions you have and assist in sign up. Since this is OTDI's service they do have some good resources.

The main site for BuckeyePass is at https://buckeyepass.osu.edu. The documentation is at the Duo section of the Administrative Resource Center, including an FAQ.

The BuckeyePass site is the first point for initial sign up and they have videos and other documentation. Duo help from OTDI is also available at the BuckeyeBar locations or call 614-688-HELP.

BuckeyePass/Duo Tips for ASC

What happens if I forget my Duo device:

• If you forget your Duo device you can call OTDI and, after verifying your identity, can provide you a one time code. Call OTDI at 614-688-HELP.

Tips and tricks for sign up and managing devices:

• You will need to select a default device at the bottom, but if an automatic push is required it will go to the topmost push device is there is no other default.
• When you enroll with a mobile phone, your number will be enrolled in BuckeyeAlert. If you do not want these infrequent texts, reply Stop to any alert message.
  • If you feel very strongly about not enrolling your smart phone, you can enroll it as a tablet.
• We recommend setting up at least two devices, just in case one is unavailable. (For example, a smart phone, a tablet, or token.)
  • Make your first device your smart phone as it is the one you will use most and can do all both methods: push and passcode.

Tips and tricks for usage:

• For services that do not redirect to the BuckeyePass login web page:
  • Services with a second password box, like the ASC VPN: you can input a passcode or type push, push2, etc. depending on the method you wish to use.
  • Services that have only one password box, like CrashPlan: you can add a comma and a method after the password, for example: ,push2 .
  • SSH Jump Host: when logging in interactively, the host will display a menu with Duo options.
  • SSH Jump Host: when using the public key method, the host automatically uses your first push device.
• When travelling without network service, your phone cannot get a push. You can hit the down arrow icon in the app next to Ohio State University to get a passcode that is usable without network. Use the refresh arrows to get a new one.
  • Keep in mind there are certain countries that Duo is prohibited by the U.S. Government. See this FAQ. 
• SMS/text codes: You can also get 1 code texted to you, an texted code is good for 10 minutes.
• Note that Duo texts only work to U.S. and Canadian numbers.
• If hard token or app passcode based login reports 'Incorrect passcode' there is a chance your token or app is out of sync. To fix this:
  1. Go to the BuckeyePass site.
  2. Use 3 consecutive codes (waiting for the number to change then trying again to log in 3 times in a row)
  3. This will sync the server to be aware of the timing of the token.
  4. It's rare for the issue to happen, but is the way to resolve it. If it still fails call OTDI.
• If Duo fails three times, you may be locked out of the system. Only OTDI at 8-HELP (614-688-4357) can unlock your BuckeyePass, or you can wait for a timeout which will eventually reset your Duo.