All UMD and University System of Maryland community members must use multi-factor authentication to log into all university resources that use CAS. Some major systems that use CAS are ELMS-Canvas, Payroll and Human Resources (PHR), Testudo, Terrapin Express, Box, and library services.
What is multi-factor authentication? Multi-factor authentication requires the use of two of the three authentication factor categories: something you know, something you have, and something you are. This adds a layer of security because hackers will need more than just a password to use your accounts. In order to log in, you will need:
- Your Directory ID and password
-
Either a mobile device, a hardware token, a phone that can receive voice calls, or a one-time use code (this video playlist shows all of the methods in action)
Here's how to enroll in multi-factor authentication:
Step 1. Enroll a device and a backup device/print one time use codes:
- Mobile device (iPhone, Android, Windows phone, tablet)
- Hardware token
- Phone that can receive voice calls
- One-time use codes
Step 2. Enable multi-factor authentication for all CAS logins.
This video shows the setup process for a mobile device:
Why?
Frequently Asked Questions
Yes, you are welcome to visit Terrapin Tech in 1221 McKeldin Library Monday through Friday between 8:30 a.m. and 4:30 p.m. for hands-on support or to contact the IT Service Desk at 301.405.1500 or itsupport@umd.edu for assistance.
- ELMS
- Testudo
- Terrapin Express
- Payroll and Human Resources (PHR)
- Box
- MyDRL
- MyUHC
- Library services
- Any other system that uses CAS (Central Authentication Service)
- Enroll a phone that can receive voice calls and use Duo's callback feature.
- Acquire a hardware token that you will need to keep with you. It will generate a single-use six-digit code every time you need to authenticate. Tokens are $20, and they can be purchased at Terrapin Tech (1221 McKeldin).
- Generate one-time use codes.
To enroll using one-time use codes, please go to Terrapin Tech in person. A technician will assist you with enrollment and permissions to print one-time use codes (they will print the first 10 for you). Please remember to generate a new list of one-time use codes before you use your last code. If you run out of codes, you will not be able to log into systems utilizing CAS until you contact the Service Desk to verify your identity. See these instructions to print more one-time use codes. Please protect your codes like you would secure any other important personal information -- keep them in your wallet or in a safe and secure place.