Service Overview
To protect against phishing and other exploits of stolen passwords, Information Services has implemented Duo Security two-factor authentication. Duo two-factor authentication is required when signing in to certain resources from off-campus, including: Bannerweb, VPN, Cyberark, Apex applications, Slate, Maxient.
Two-factor authentication (2FA) strengthens security by requiring two factors to verify your identity, such as something you know (NetID/password) plus something you have (mobile device/app).
How Duo Works:
Duo authentications are completed via the Duo app on a mobile device or a Duo hardware token. When you try to access a resource that requires Duo to login (i.e. BannerWeb), you will need to approve the login via the Duo app or with your Duo hardware token. This prevents someone who has compromised your account and has your netID and password from being able to log into a resource like BannerWeb.
Available To
Faculty, Staff, and Students
Getting Started
First Time Users - Enroll with Duo
If you have never used Duo at UR before, you will need to Enroll in Duo. Duo Enrollment can be done by visiting https://duo.richmond.edu
Request Hardware Token
Hardware tokens are an option that can be used for Duo MFA if you don't have a mobile device that the Duo App can be installed on. Faculty, Staff, and Students can request one free hardware token to use with Duo by submitting the Request Hardware Token form.
Reactivate Duo App
If you previously had used Duo, but the Duo app on your device needs to be reactivated, you can reactivate a smartphone or tablet with Duo by visiting https://duo.richmond.edu
Using Duo
For step-by-step instructions on how to login to a service with Duo, please visit the links below:
Issues and Questions
If you have are experiencing a problem using Duo use the Report a Problem button to let us know.
Request ByPass Code
If you are enrolled with Duo, but are unable to use the Duo app to authenticate to Bannerweb or the VPN, you can request a temporary bypass code by submitting the Request Bypass Code form.