What is UL2FCTR/Duo?
UL2FCTR is UofL’s two-factor authentication (2FA) system. UofL’s UL2FCTR is provided by Duo, a two-factor authentication solution that boosts security by verifying user identity, establishing device trust, and providing a secure connection to UofL networks and applications. More information about the UL2FCTR/Duo service can be found on the UofL Information Technology Services (ITS) website: UL2FCTR | Information Technology Services
What is two-factor authentication (2FA)?
Two-factor authentication (2FA) adds a second layer of security to your online accounts by requiring a second piece of information before you can log into a system. Verifying your identity using a second factor (a verification code sent to the free Duo app, your phone or another device) prevents anyone but you from logging in, even if they know your password.
How does UL2FCTR/Duo work?
First, all students, faculty and staff must enroll in UofL’s Duo. The sign-up process is required to be registered in our UL2FCTR/Duo and set up your preferred two-step confirmation process.
Using a desktop, laptop, tablet or mobile device, log in with your UofL userID and password. You will need to be current with your operating system and browser for the process to begin. Follow the prompts to enroll – steps will differ depending on device used and selections – and set up at least one option for verifying your identity (two options for confirmation recommended). You can register multiple devices or methods to your UL2FCTR/Duo account in order to provide the necessary confirmation code. Specific instructions available on Duo’s guide.
Detailed video guides can be found on the UofL Information Technology Services (ITS) Youtube page:
Once you’ve enrolled and set up your preferences, familiarize yourself with ways to use Duo. Downloading the free Duo app to a smart device and using "push" notifications for each verification process is preferred and highly recommended. Using the Duo app is the easiest method for quickly confirming your logging into the system requiring UL2FCTR.
Why do I need Duo/UL2FCTR?
Passwords to a user’s account are becoming easy to compromise. Passwords can often be stolen, guessed or hacked – you might not even know someone is accessing your information. Two-factor authentication keeps your account secure even if your password is compromised. Our two-factor authentication system is a Duo application specific to UofL named UL2FCTR. With UL2FCTR or Duo, you'll be alerted right away (on your phone) if someone is trying to log in as you.
ULink’s Student System, WorkdayHR, Workday Finance, Blackboard and our VPN all require UL2FCTR/Duo. We are eventually adding this requirement to all systems to provide better protection for everyone’s personal information and increasing the security of campus data assets. The second factor of authentication is independent from your UofL user ID and password. UofL’s UL2FCTR is available without cost to all students and employees through our enroll/login above; sync to the downloadable Duo app free from your preferred app store.
Am I required to use/sign up for UL2FCTR/Duo?
Yes, all users who need to access various university systems are required to sign up for and use UL2FCTR/Duo.
ULink’s Student System, WorkdayHR, Workday Finance, Blackboard and our VPN all require UL2FCTR/Duo. We are eventually adding this requirement to all systems to provide better protection for everyone’s personal information and increasing the security of campus data assets.
How much does Duo/UL2FCTR cost?
UofL’s UL2FCTR is available without cost to all students and employees through our enroll/login above; sync to the downloadable Duo app free from your preferred app store.
UofL is not liable for costs associated with the use of a device for SMS messaging, phone calls, data usage or roaming charges.
What types of two-factor authentication does UL2FCTR/Duo support?
UL2FCTR/Duo supports the following two-factor authentication methods, in order from most secure authentication method to least secure authentication method:
- WebAuthn/FIDO2 security keys (roaming authenticators)
- Platform authenticators (passkeys/biometrics via WebAuthn)
- Duo push (verified push/number matching)
- Smartphone app passcodes (TOTP/Duo Mobile passcodes)
- Hardware OTP tokens (HOTP tokens)
- SMS passcodes
- Phone call (callback authentication)
- Bypass codes
More information about each authentication method can be found on our knowledge base: Types of Two-Factor Authentication Supported by UL2FCTR/Duo
How do I register for UL2FCTR/Duo?
Before You Begin
- Make sure you have your UofL login credentials.
- Prepare a smartphone, tablet or phone for Duo authentication.
- Update your operating system and browser to the latest version.
- Signing up for UL2FCTR/Duo for the first time is part of the account claim process. When claiming your account, you will be prompted to enroll in UL2FCTR/Duo.
- If you have not yet claimed your account, follow the instructions on our knowledge base: How to Claim Your Account.
Instructions - Can be accomplished 3 different ways
1. Step-by-step instructions are available on our Knowledge Base and on the UofL ITS Youtube page:
2. Manual Setup
- After accepting the Terms of Use and setting up your recovery information as part of the account claim process, when prompted, begin Duo Device Registration.
- When prompted, begin Duo Device Registration.
- Select a device type (e.g., mobile phone or tablet).
- Enter a device name (e.g., "My iPhone" or "Samsung").
- Enter and confirm your phone number.
- Click Submit.
- Choose a verification method:
- Download the free Duo Mobile application from your preferred app store.
- Send a secure link to your phone.
- After you complete Duo registration, your user ID will appear. Make a note of your user ID.
- After you complete the UL2FCTR/Duo registration process, follow the steps to set your password.
2. Use the Device Management Portal
- Go to UL2FCTR
- Click LOGIN.
- Log in with your UofL login credentials.
- Follow the prompts to begin Duo enrollment.
- Choose your authentication method:
- Download the free Duo Mobile app from your preferred app store.
- Set up SMS text message verification.
- Provide a phone number for confirmation calls.
- Verify your device by responding to a Duo push, SMS or call.
- Set up at least one backup authentication method (highly recommended).
- Complete enrollment and test your authentication method.
- Use UL2FCTR Duo for logging into ULink, WorkdayHR, Blackboard, VPN, and other university systems.