Skip to main content

Two-Factor Authentication

About Two-Factor Authentication

Two-factor authentication Duo improves security by allowing users to use a secondary method of authenticating, such as a text message, phone call, or email. JICS provides two-factor authentication via integration with the third-party tool Duo. If your school has a Duo account, the JICS administrator can activate it in JICS by selecting Duo from the Two-factor authentication type list in Site Manager > Security settings and then entering the appropriate Duo-provided information.

You also have the option of setting up a custom method of two-factor authentication.

Attributes of Duo Two-Factor Authentication

  • Duo integration key – This setting can be found on the Duo administrator website. [DuoIntegrationKey]

  • Duo secret key – This setting can be found on the Duo administrator website. [DuoSecretKey]

  • Duo application key – This setting has to be created as a private key for use with Duo. It must be a minimum of 40 characters. [DuoApplicationKey]

  • Duo API hostname – This setting can be found on the Duo administrator website. [DuoApiHostname]

  • Base roles – The roles for which two-factor authentication will be used. If no roles are selected, two-factor authentication will be used for all roles.

Attributes of Custom Two-Factor Authentication

  • Base roles – The roles for which two-factor authentication will be used. If no roles are selected, two-factor authentication will be used for all roles.

  • Custom 2FA user control – This setting determines if JICS will use a custom user control for 2FA. The user control must implement the IAuthProvider in assembly Portlet.Login.dll, namespace Jenzabar.ICS.Web.Portlets.LoginPortlet.AuthProviders. [Custom2FAUserControl]

  1. Log in to JICS as someone with administrative privileges.

  2. Click the user icon and select Site Manager from the drop-down menu.

    The system displays the Site Manager screen, with the Site settings tab selected.

  3. Click the Security settings tab.

  4. In the drop-down list at the top of the screen, select Additional authentication settings.

  5. From the Two-factor authentication type list, select the type you wish to use (either Duo or Custom).

    The screen updates to show fields for the selected two-factor authentication type.

  6. Fill out the fields as appropriate. For help understanding a specific field, see the Attributes of Duo Two-Factor Authentication section or the Attributes of Custom Two-Factor Authentication section.

  7. Click Save.