Begin Setup of Multi-Factor Authentication In OneLogin

Created on February 22, 2024 00:36

---

OVERVIEW

We would like to inform you about a significant update. To strengthen cybersecurity protocols and comply with liability insurance requirements, we have introduced a two-step authentication (2SA) procedure for all OneLogin accounts associated with members of the PAU community. It is imperative that all individuals within Palo Alto University who utilize OneLogin for university software access establish at least one 2-step authentication method for their OneLogin account.

The two methods available for 2-step authentication are: 

• Utilizing Authenticator apps such as the OneLogin Protect app or the Google Authenticator app.

• Using PAU Mobile Text messaging through a third party service, Twilio (SMS Messaging).

It is necessary to set up at least one of the provided authentication methods on your smartphone. We highly recommend installing an additional backup method to ensure access in case one of the primary methods encounters issues. For instance, SMS text messages could experience delays or failures depending on the cell service quality and your current location, such as in a basement.

After you've completed the initial setup process, whenever a PAU community member logs into OneLogin, they will be prompted to enter a unique access code after entering a correct username and password. This code will be sent to the Google Authenticator app on your smartphone if it has been successfully set up, or it will be sent via SMS text message to your mobile device if you've chosen this method as your primary authentication factor.

A. How to Set up Multi-Factor Authentication

If this is your first time accessing OneLogin or if you haven't set up your security factors for Multi-Factor Authentication (MFA), you will be prompted to begin the setup process after entering a correct username and password on the OneLogin interface.

Click the "Begin Setup" button to proceed

Choose the initial security factor you want to use by simply clicking on the listed option.  (Please note that you may need to complete the opt-in form or provide your phone number through a helpdesk ticket to [e-mail] in order to utilize PAU Mobile Text as your security factor.) 

Option 1: Use OneLogin Protect for authentication

Once you've selected OneLogin Protect as your first security factor, simply follow the instructions shown on the screen to start the setup process.

1. Download and install OneLogin Protect app on your smartphone device.

2. Click Activate on your desktop screen.

3. Open the OneLogin Protect app on your smartphone.

4. Scan the QR code displayed on your desktop OneLogin Protect setup screen.

5. Once the QR code is scanned and the device is registered, a code will appear on your authenticator app.

6. Enter the code that appears on your Protect app and every time you are asked for a OneProtect authentication code. 

Option 2: Use Google Authenticator for authentication.

Upon choosing Authenticator as your security factor, a screen with a QR code will be displayed on your desktop.  Please follow the following instructions to start the setup process:

1. On your smartphone, download the Google Authenticator app:

2. Open the Authenticator app on your smartphone and click on "Add a Code"  or  the Plus (+ ) button to add a profile

3. Select "Scan a QR code"

4. Scan the QR code displayed on your desktop OneLogin authenticator screen.

5. Once the QR code is scanned and the device is registered, a code will appear on your authenticator app.

6. On your desktop screen Click "Next" on the authenticator setup screen 

7.  Enter the code that is currently shown on your Google Authenticator app to access OneLogin, and whenever you are prompted for an authenticator code, 

ON-GOING USE:

• Anytime that you log into OneLogin, you will be prompted to enter the unique access code (which changes every 30 seconds) that is contained within the Authenticator App on your mobile device. Depending on how the settings on your computer are configured, you may be prompted to enter the access code only the first time you log in each day or after rebooting, or you may be prompted to enter the access code every time that you log into OneLogin throughout the day.