...
OU IT has set a requirement for use of new multi-factor authentication to use Office 365 off campus. This authentication method requires the application “Duo Mobile”“PingID”. It will send out a request (through different avenues, depending on what the use selects for contact) when trying to log into Office 365 off campus.
Steps:
...
Open http://www.ou.edu/duo in a web browser
It should lead to the OU 4x4 login portal, sign in with your 4x4
The next page should pop up with the OU logo and “Two-Factor Authentication” on the top
(Website can also be found in the email you received from OU IT about Multi-Factor Authentication for Office 365)
...
Click “Start Setup”
...
Choose the device you are adding. If you chose:
Mobile Phone - Enter in your phone number
Tablet - Enter in the tablet type
Landline - Enter in your phone number
...
Enter the app store on your phone or tablet and download the Duo Mobile application
(if landline is selected, the phone may get a phone call, follow the prompts if applicable)
...
Go back to the web browser and select “I have Duo Mobile Installed”
...
Go back to your mobile device and open the Duo Mobile application and click the “+”
...
Enable Permission for Duo Mobile to use your camera
...
Scan the QR code on the browser with your device’s camera, it should show on your mobile device’s screen
There is also an option to email that says “Email me an activation link instead”. In this case you will enter in your email and then open your email to view the Duo Mobile Activation email. Click the link given and then choose one of the options given for activation
...
After it scans the QR code, your device should be added and you can choose an option for it to contact you when there is a login to Office 365
Call Me - Duo will call your phone, hang up to deny access, press any other key to login
Passcode - Enter the passcode shown for the current device when you open the Duo Mobile application on your phone (this will refresh and be different each time you go to do this)
Duo Push - Duo Mobile will push a notification to your phone prompting to Accept or Deny access
...
PingID Enrollment
PingID enrollment configures your method of authentication into OU systems and applications. When one tries to log in to certain OU systems and applications, this authentication method you configured will be asked if this is a legitimate log in. You will then approve or deny the log in request. Please note you do not need to set up PingID on every device you use. You just need to set up a primary and backup authentication method. OU encourages users to set up two methods of authentication, on a primary device which you will always have on hand, such as your phone, as well as a backup device such as your desktop computer in case you lose or change your primary device.
To enroll your mobile device for usage with PingID, we recommend the following (we've included a detailed PDF at the right of this article in the Attachments section):
Enroll your primary phone with push authentication. You may alternately also configure the phone number to receive calls and text approval codes.
Set up a secondary backup authentication method in case you do not have access to the first method.
Enrolling your Phone
Navigate to the PingID site.
Upon first log in, you will be prompted with a greeting and the My Devices screen.
To add your device, click the + Add button.
You will have two options, to download the PingID app for iPhone & iPad as well as the download for Android.
Search your device's app store for PingID and install it.
After install, launch the app.
Once installed, continue following onscreen prompts. Your pairing key and QR code are displayed in your web browser window from step 1 to pair your PingID account with your application.
On your device, tap Open. The PingID mobile app opens.
The first time you access PingID mobile app, you'll be asked to accept the terms of service. Tap Accept.
You'll also need to enable push notifications and location for PingID. Tap the "I Understand" button and then accept all PingID permission requests when prompted to do so (tap Allow and OK).
From the PingID app on your device, point your device at the QR code on your browser to scan it.
If you are unable to scan the QR code, on your device tap Enter Pairing Key Manually and enter the pairing key as shown on the registration page.
Enter a nickname for your profile, optionally add a picture, and then tap Done.
You'll see a green checkmark indicating the pairing request is successful. You may now need to hit X to exit.
You'll see the PingID app screen showing the one-time passcode number and your organization name in the organization list. Setup is now complete. Please note you will need to keep the PingID app installed on your phone, as app based authentication prompts will appear in this application.
With the app configured, you may also wish to configure the phone to receive call or text prompts to your phone number. Simply return to the PingID site and click the +Add button again and choose SMS or Voice and follow the on screen prompts.
...
Using PingID
Now when you try to sign in to a PingID enabled OU website or application, an authentication request will be sent to your device for your approval.
If the needed approval prompt is not received, one may use the one time passcode being provided by the app instead to complete your log in.
Once you are authenticated, you'll see a green checkmark confirming success, and you will be directed to the OU service or application that you wanted to access.
Setting up a Backup Device
Setting up a backup will ensure that even if you lose your phone, you will still have another activation method to get access to the site/app in question. This also ensures you can add or change your primary phone device if lost or changed.
Navigate to our article on the PingID for desktop app.
Follow the steps listed for your device, either Windows or Mac.
Enrolling Other Devices - PingID Authentication Options
PingID offers multiple authentication options, including for your phone via the app, SMS text or voice. Via the Desktop app, or an attached security key. To add these additional options, simple visit the enrollment page and hit the Add+ button to see the other available methods.
Phone/Tablet:
PingID Authentication for iPhone (Swipe, Fingerprint, One-Time Passcode)
PingID Authentication for Android (Swipe, Fingerprint, One-Time Passcode)
Additionally, one may choose choose the "Authenticator" option under Add+ to add PingID authentication to your existing Google Authenticator or Microsoft Authenticator apps. Please note that after scanning your QR code, you should also verify your authenticator by hitting Next in your browser and then entering the passcode displayed in your app.
Windows/Mac Desktop App:
PingID Authentication for Desktop App
Security Key:
PingID Authentication for YubiKey
Using PingID with Multiple Accounts
If you have more than one OU account that is required to use PingID, you will need to follow these enrollment steps for each different account. For each enrollment process, you should visit the PingID site using a private/incognito browser, log in using that second account and then complete the needed enrollment.
IF YOU NEED ASSISTANCE WITH SETTING THIS UP, CONTACT LIBRARY TECHNOLOGY PLATFORMS AT LIBTECH@OU.EDU OR CALL (405)325-3181
Notes:
Here is what the Duo Mobile app will look like in the app store
...
Links to IT website for further instruction:
https://itsupport.ou.edu/TDClient/30/Unified/KB/ArticleDet?ID=2543
https://itsupport.ou.edu/TDClient/30/Unified/KB/ArticleDet?ID=2533