New to MFA
- Prepare your device for Duo Mobile.
- Open the enrollment link included in your email from Duo.
- Follow enrollment instructions for mobile device and install Duo Mobile.
- Optional: Enroll a second device, such as a hardware token. This ensures that if any of your devices are forgotten at home, you have a secondary method to authenticate with.
- Obtain a hardware token in-person from one of the following locations:
UWM Campus: The UWM TechStore
UWM at Washington County: The Library Information Desk
UWM at Waukesha: The Library Information Desk
- Follow enrollment instructions for hardware token.
- Optional: Enroll a second device, such as a mobile device. This ensures that if any of your devices are forgotten at home, you have a secondary method to authenticate with.
- Utilize the Duo Dashboard to make changes to your devices.
- Have a new phone? Set up your new phone and replace the old phone with the new phone.
- Save time authenticating by checking the Remember Me box when logging in. You will stay authenticated for 12 hours or 14 days depending on the platform.
- Prevent lock-outs by registering more than one device (Ex. Hardware Token + Phone, Hardware Token + Tablet, Phone + Tablet)
- Generate a bypass code if you loose or misplace your device.
- Multi-Factor Authentication adds an additional layer of security to your login process to prevent your credentials from being compromised.
- By using more than one method of authentication, your identity is verified and kept safe from phishing and other cyber security attacks.
- By using Duo for MFA, you will be using something you know (your password) with something you have (your device or hardware token) to confirm your identity.
- All UWM Faculty and Staff must be enrolled with Duo as part of Information Security Administrative Procedure 1030.A.
Depending on the application you are logging into, you will either need to use your ePantherID or your UWM email address (ePantherID@uwm.edu).
For instance, when logging into PAWS you will need to use your UWM email address (ePantherID@uwm.edu) and password to gain access to your account.
For your convenience, please consider enrolling at least two devices. This can be a phone and a tablet, a mobile device and a hardware token, or whatever combination works best for you. This ensures that if any of your devices are are forgotten at home, you have a secondary method to authenticate with.
If you are unable to use the Duo Mobile App for MFA, please enroll a free hardware token. Please follow the instructions on the webpage above for “Enrolling a Hardware Token”. Please note: Individuals are limited to the use of one hardware token.
If you have a secondary authentication device, please use that in the event of a lost or stolen device. If you do not have a secondary device, you can use the UWM Duo Bypass Code page to generate a bypass code that you can use to login to Duo protected services and applications for up to 12 hours, after which your bypass code will expire and a new one will need to be generated.
In order to generate a Duo bypass code, you will need to provide your Campus ID number, your birth date, and answers to your security questions in order to verify your identity. For instructions on generating Duo Bypass Codes, please visit the UWM KnowledgeBase: https://kb.uwm.edu/page.php?id=84490
If you have not previously set responses to your security questions or cannot provide any of the requested information to verify your identity, please contact the UWM Help Desk.
If you have lost your Duo two-factor authentication device (a smartphone or hardware token), or experience any other issues authenticating, contact the UWM Help Desk to generate a bypass code using this process.
If you choose to use the Duo mobile app, UWM will not be able to see the personal information on your device. The only data collected is related to the use of the app (operating system, application version, IP address of authentication attempt, etc.). Please feel free to review Duo’s data and privacy information in more detail here: https://help.duo.com/s/article/2939?language=en_US
If you enroll a smart phone or tablet with the Duo Mobile App, and have a cellular connection or a WiFi connection, you can authenticate as you normally would. If you enroll a hardware token, that does not require an internet connection although the services you are trying to authenticate with (Microsoft 365, Canvas, etc.) do. If you are able to access these services with a cellular or WiFi connection, you will be able to authenticate. If you work remotely or are out of state and require a hardware token please contact the UWM Help Desk (email@example.com) to coordinate receiving one through the mail.
The contents of strictly personal communications (texts, emails, voice messages) or data are not subject to the Wisconsin Public Records Law simply by using the app to verify your identity. Strictly personal means that it is not related to university business. If you were using your personal device to conduct university business (such as responding to emails, texting a colleague about a work-related issue or leaving or receiving voice messages on work related subjects, or accessing UWM digital assets) those communications which relate to the university business could be subject to the Wisconsin Public Records Law or could be the subject of a university-related subpoena. The contents of your personal communications that do NOT involve university business would not be subject to the Wisconsin Public Records law or to a university-related subpoena for university business records.
Faculty and Staff can pick up their free hardware tokens in-person at the following locations:
- UWM Campus: The UWM TechStore located in the Panther Shop in the Union
- UWM at Washington County: Library Information Desk
- UWM at Waukesha: Library Information Desk
If you work remotely or are out of state and require a hardware token please contact the UWM Help Desk (firstname.lastname@example.org) to coordinate receiving one through the mail.
Enrollment for all UWM Faculty and Staff is required as part of Information Security Administrative Procedure 1030.A.
Yes. Currently, enrolled students at UWM must authenticate using Microsoft MFA when logging into Office 365 applications and PAWS.