Frequently Asked Questions
What is Two-Factor Authentication
Two-factor authentication adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.
Once you've enrolled in Duo you're ready to go: You'll login as usual with your username and password, and then use your device to verify that it's you. Your administrator can set up the system to do this via SMS text message, voice call, one-time passcode, or the Duo Mobile smartphone app.
No mobile phone? You can also use a landline or tablet. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, two different mobile devices, etc.
Why Do I Need This?
Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account.
Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you.
When is the go-live and impacted applications?
To continue minimizing the risk of disruption to patient care and ensure the security of protected health information against phishing attacks, Beaumont Health is transitioning to Duo Security, Cisco’s proven two-factor authentication solution on Wednesday, May 27.
Watch your Beaumont email on Tuesday, April 28 for an invitation from firstname.lastname@example.org containing more information and enrollment details.
If you remotely access Beaumont Office 365 (including email) or BH-Apps when not at a Beaumont owned or affiliated location, you will be required to enroll in and use Duo to confirm your identity.
What Types of Devices Can I Use?
Duo supports numerous devices to authenticate your identity. Examples include
- iOS Devices such as iPhone and iPad
- Android Devices
- Windows Phone
- Cell Phones and Landline Phones using your Phone Number
Do I have to enroll if I already use Duo with another organization?
Yes, If you access BH-Apps remotely or Office 365 including email remotely, you will need to enroll with Beaumont's implementation of Duo because this associates your 1st authentication (Beaumont username and password) to your 2nd authentication (Duo setup with your device)
Duo is smart enough to distinguish which user profile to use based on your login credentials. This means if you have device settings with one organization, they could be entirely different for the other organization and are kept separately within the Duo framework.
Why Use the Duo Mobile App?
Duo Push is an authentication request you'll receive as a notification on your smartphone. It's quicker, easier, more secure, and cheaper than receiving text messages or phone calls.
To use Duo Push, you will need the Duo Mobile app installed and activated.
Why is push the best authentication method?
It's quicker than a text or a phone call
- Authenticating with a text message requires waiting to receive the text, reading a pass-code, and then typing it in.
- Phone calls require actually answering the phone, listening to the recording, and using the dial pad to approve the login.
- Duo Push is as simple as approving a notification on your smartphone.
It's more secure
- Duo push uses cutting-edge end-to-end encryption that SMS and phone calls can't.
- The Duo Push screen displays detailed information about the application and source device that initiated the authentication request.
How much data does a Duo Push use?
Almost none. 500 pushes to your device will use 1 MB of data in total. This is roughly equivalent to loading one web page on your smartphone.
Does installing the Duo Mobile app give up control of my phone?
No. Duo Mobile has no access to change settings on your phone. Duo Mobile cannot read your emails, it cannot see your browser history, and it requires your permission to send you notifications. Lastly, Duo Mobile cannot remotely wipe your phone. The visibility Duo Mobile requires is to verify the security of your device, such as OS version, device encryption status, screen lock, etc. We use this to help recommend security improvements to your device and you always are in control of whether or not you take action on these recommendations.
Why does the Duo Mobile app need to access my camera?
Duo Mobile only accesses your camera when scanning a QR code during activation.
What if I don't have a Wi-Fi connection or cellular reception?
No problem. Tap the down-arrow icon in the Duo Mobile app to generate an authentication passcode. You do not need an internet connection or a cellular signal to generate these passcodes.
What if I don't have wifi or data?
Bad reception or no reception? No problem. Duo Mobile is able to generate a valid one-time passcode, even when in airplane mode or otherwise without cellular service or Wi-Fi Internet connection.
Open Duo Mobile app on your mobile device. (Note: You must have enrolled your mobile device into Duo and activated the app for Duo Push).
Tap the down arrow to expand.
The passcode shown is valid until used.
Tap the refresh arrows to generate a new Duo Passcode each time if needed.
Type in the code from your Duo app (no spaces) and click Login.
Note: for those with saved preferences to "always send a push" the following screen will appear. Click the Cancel button within the Duo window to activate all other authentication methods. Next click the passcode button to type in the passcode from your mobile device.
Will this change impact using email apps on my device?
Microsoft 365 is going live soon with multi-factor authentication with Duo.
Microsoft 365 impacts all Microsoft Office Suite products such as Sharepoint, Word, Excel, Teams, and Outlook (email).
The recommended email app on mobile devices to receive Beaumont email on personal devices is to use the Microsoft Outlook Email application.
In order to prepare for this upcoming change, please download and begin using Microsoft Outlook email app client from your desired app store.
More information coming soon.
How does this impact Imprivata use?
If you remotely access Beaumont email or bhapps when not at a Beaumont owned or affiliated location, you will be required to enroll in and use Duo to confirm your identity. You may have used Imprivata for this remote access in the past. This will now be changing to Duo Security application.
This will not impact your access to:
- Beaumont email or bhapps while at a Beaumont location. This means that if you are at a Beaumont location and access your email or BH-Apps while on-site, you will not be impacted by this change.
- Imprivata use for badge tap-and-go / single sign-on while at a Beaumont location. This means that Imprivata badge tap-and-go will continue to be used as normal.
I received a Duo Push but not using system
What if I received a notification and I'm not currently authenticating or using the system?
If you receive a notification on your smartphone to “Approve or Deny” access and you are not trying to access your Beaumont account, click “Deny.” This is a sign that your Beaumont username and password has been compromised.
Then change your password at pss.beaumont.org and contact the Service Desk at 888-481-2448 for further assistance.
All users of Beaumont information and computing assets are responsible for protecting the confidentiality, integrity and availability of Beaumont assets and data according to Acceptable Use Policy. Sharing username and passwords, and using the identity credentials of others is not permitted.
How do I add additional devices?
You can add additional devices at the Duo Prompt.
Click My Settings & Devices hyperlink below the Beaumont logo on the upper left corner of the window.
Next, to add additional devices within My Settings & Devices, you must 2nd factor authentication to protect your individual account. Choose your 2nd factor authentication method and proceed.
Next, you will see your primary device information. You can make modifications on this primary device by selecting Device Options.
If you need to add additional devices, click + Add another device hyperlink below your primary device.
By selecting "add another device" the next screen allows you to choose you second device type and continue through entering your 2nd device for enrollment. If you need assistance the service desk at 888-481-2448 is also able to help assist you with adding additional devices.