Frequently Asked Questions

What is Two-Factor Authentication

Two-factor authentication adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.

Once you've enrolled in DUO/PingID you're ready to go: You'll login as usual with your username and password, and then use your device to verify that it's you. You can set up the system to do this via DUO/PingID Mobile smartphone app, SMS text message, voice call, or one-time passcode.

No mobile phone? You can also use a landline or tablet. DUO/PingID lets you link multiple devices to your account, so you can use your mobile phone and a landline, two different mobile devices, etc.

Why Do I Need This?

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account.

Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With DUO/PingID, you'll be alerted right away (on your phone or landline) if someone is trying to log in as you.

What Types of Devices Can I Use?

Duo supports numerous devices to authenticate your identity. Examples include

  • iOS Devices such as iPhone and iPad
  • Android Devices
  • Windows Phone
  • Cell Phones and Landline Phones using your Phone Number

Ping - Error User Account Not Registered

Error message received when trying to remotely access a Corewell Health Ping protected Application without being enrolled in PingID.

Please, complete PingID enrollment:
A) Choose the Corewell Health Ping Enrollment Instructions link showing on the error screen
B) Manually go to the web site RAIC.BEAUMONT.ORG HELP tab

I received a Duo Push / PingID authentication request but not using system

What if I received a notification and I'm not currently authenticating or using the system?

If you receive a notification on your smartphone to DUO “Approve or Deny” access or PingID authenticate and you are not trying to access your Corewell-EAST account, DUO click “Deny” or PingID "Cancel" then report as "Fraud." This is a sign that your Corewell-EAST username and password has been compromised.

Then change your password at pss.beaumont.org and contact the Service Desk at 888-481-2448 for further assistance.

 All users of Corewell-EAST information and computing assets are responsible for protecting the confidentiality, integrity and availability of Corewell-EAST assets and data according to Acceptable Use Policy. Sharing username and passwords, and using the identity credentials of others is not permitted.

Ping - Adding Additional Authentication Devices

**
** All Device adds must be performed by the requesting user **
**
To add additional devices for PingID Authentication, please find the appropriate add instructions in the HELP section on the RAIC.BEAUMONG.ORG web site.

NOTE: PingID Authentication may be required after choosing the +ADD button in the PingID Self-Service web site:
** https://CCHMFA.corewellhealth.org **


Ping - Change the Current PingID Authentication Method presented Ping MFA request window

1) Requesting PingID Authentication for Application access


2) Select Change Device on the PingID request screen

Note: If you only have one method of authenticating, the Change Device will not be presented.


3) Select the method that you want to PingID Authenticate, the Sign-On

Note: Your Default Method will be defined by the green DEFAULT marking

Complete the PingID Authentication request using the newly selected method

DUO - When is the go-live and impacted applications?

To continue minimizing the risk of disruption to patient care and ensure the security of protected health information against phishing attacks, Beaumont Health has transitioning to Duo Security, Cisco’s proven two-factor authentication solution for all Beaumont Resources accessed remotely on Wednesday, October 27th, 2021.

IF NOT ALREADY ENROLLED, please continue to watch your Beaumont email for an invitation from no-reply@duosecurity.com that contains DUO enrollment information that must be completed to allow for remote Beaumont Resource access.

If you remotely access any Beaumont Resources {Office 365 (including email), BH-Apps, myBenefits, etc...} when not at a Beaumont owned or affiliated location, you will be required to use Duo to confirm your identity.

DUO - Do I have to enroll if I already use Duo with another organization?

Yes, If you access BH-Apps remotely or Office 365 including email remotely, you will need to enroll with Beaumont's implementation of Duo because this associates your 1st authentication (Beaumont username and password) to your 2nd authentication (Duo setup with your device)

Duo is smart enough to distinguish which user profile to use based on your login credentials. This means if you have device settings with one organization, they could be entirely different for the other organization and are kept separately within the Duo framework.

DUO - Why Use the Duo Mobile App?

Duo Push is an authentication request you'll receive as a notification on your smartphone. It's quicker, easier, more secure, and cheaper than receiving text messages or phone calls.

To use Duo Push, you will need the Duo Mobile app installed and activated.

Why is push the best authentication method?

It's quicker than a text or a phone call

  • Authenticating with a text message requires waiting to receive the text, reading a pass-code, and then typing it in.
  • Phone calls require actually answering the phone, listening to the recording, and using the dial pad to approve the login.
  • Duo Push is as simple as approving a notification on your smartphone.

It's more secure

  • Duo push uses cutting-edge end-to-end encryption that SMS and phone calls can't.
  • The Duo Push screen displays detailed information about the application and source device that initiated the authentication request.

How much data does a Duo Push use?

Almost none. 500 pushes to your device will use 1 MB of data in total. This is roughly equivalent to loading one web page on your smartphone.

Does installing the Duo Mobile app give up control of my phone?

No. Duo Mobile has no access to change settings on your phone. Duo Mobile cannot read your emails, it cannot see your browser history, and it requires your permission to send you notifications. Lastly, Duo Mobile cannot remotely wipe your phone. The visibility Duo Mobile requires is to verify the security of your device, such as OS version, device encryption status, screen lock, etc. We use this to help recommend security improvements to your device and you always are in control of whether or not you take action on these recommendations.

Why does the Duo Mobile app need to access my camera?

Duo Mobile only accesses your camera when scanning a QR code during activation.

What if I don't have a Wi-Fi connection or cellular reception?

No problem. Tap the down-arrow icon in the Duo Mobile app to generate an authentication passcode. You do not need an internet connection or a cellular signal to generate these passcodes. 


DUO - What if I don't have WiFi or data?

Bad reception or no reception? No problem. Duo Mobile is able to generate a valid one-time passcode, even when in airplane mode or otherwise without cellular service or Wi-Fi Internet connection.

Open Duo Mobile app on your mobile device. (Note: You must have enrolled your mobile device into Duo and activated the app for Duo Push).

Tap the down arrow to expand.

The passcode shown is valid until used.

Tap the refresh arrows to generate a new Duo Passcode each time if needed.

Type in the code from your Duo app (no spaces) and click Login.

Note: for those with saved preferences to "always send a push" the following screen will appear. Click the Cancel button within the Duo window to activate all other authentication methods. Next click the passcode button to type in the passcode from your mobile device.

Mobile Outlook - Will this change impact using email apps on my device?

Microsoft 365 impacts all Microsoft Office Suite products such as Sharepoint, Word, Excel, Teams, and Outlook (email).

The required email app on mobile devices to receive Beaumont email on personal devices is the Microsoft Outlook email application.

If not already installed, please download and install the Microsoft Outlook email app client from your desired app store.

DUO - How does this impact Imprivata use?

If you remotely access Beaumont email or bhapps when not at a Beaumont owned or affiliated location, you will be required to enroll in and use Duo to confirm your identity. You may have used Imprivata for this remote access in the past. This will now be changing to Duo Security application.

This will not impact your access to:

  • Beaumont email or bhapps while at a Beaumont location. This means that if you are at a Beaumont location and access your email or BH-Apps while on-site, you will not be impacted by this change.


  • Imprivata use for badge tap-and-go / single sign-on while at a Beaumont location. This means that Imprivata badge tap-and-go will continue to be used as normal.

DUO - How do I add additional devices?

You can add additional devices at the Duo Prompt.

Click My Settings & Devices hyperlink below the Beaumont logo on the upper left corner of the window.

Next, to add additional devices within My Settings & Devices, you must 2nd factor authentication to protect your individual account. Choose your 2nd factor authentication method and proceed.

Next, you will see your primary device information. You can make modifications on this primary device by selecting Device Options.

If you need to add additional devices, click + Add another device hyperlink below your primary device.

By selecting "add another device" the next screen allows you to choose you second device type and continue through entering your 2nd device for enrollment. If you need assistance the service desk at 888-481-2448 is also able to help assist you with adding additional devices.