Every day passwords are guessed, hacked or stolen by email phishing attacks. When this happens the safety of our private data is put at risk. 2Step Verification for your CSUB account adds a second layer of security and keeps your account protected--even if your password is compromised.
CSUB is excited to join others in the CSU system, private industry, and financial institutions who have also secured their most sensitive data with 2Step verification.
By verifying your identity using a second factor--like a small hardware device or smart phone app--2Step prevents anyone but you from accessing your account. If someone steals your credentials and tries to access your account, your user name and password will not be sufficient to log in. The thief will also need to have access to your device to complete the log in process. If someone else tries to log in to your account, you will be notified on your device and you can deny them access instantaneously.
What Services Use 2Step?
All services authenticated through Shibboleth will require 2Step verification. These services include:
Common Financial System
Finance Data Warehouse
CSU Learn (SumTotal)
Modo Labs Admin
CSUB Business Continutiy Plan (Kuali)
Alma Library Reference
SumTotal Library Reference
How Does 2Step Work?
Information Technology Services has partnered with Duo Security to bring 2Step Verification to CSUB.
With 2Step + Duo, you have many options to verify your identity. When you enter your username & password online, you have the option to verify your identity using a small hardware fob, an app on your smart phone or a call to your phone.
Getting Started with 2Step
If your account requires 2Step verification, then this is the process for getting started:
You will be contacted by ITS and together we will setup a date and time to enroll you in the 2Step service.
On that date, you will receive an enrollment email from Duo Security. This email message will contain a personalized link to activate 2Step on your smart phone (if you choose). If you would prefer to use a hardware fob, then ITS will issue one to you at no cost. If you choose not to activate your smart phone, then the email link will allow you to activate a landline such as your office extension.
A member of ITS will meet you on the date of your enrollment to help you get your device activated. If you would like a fob, we will bring you one at that time and confirm that you can login successfully with your new hardware fob.
IT Services is here to help
ITS wants you to have a positive experience using 2Step. We firmly believe in the quality, simplicity and security that 2Step provides and we use it ourselves everyday.
1. From your smart phone, visit the link provided to in your enrollment email to download the 2Step app on your device, called Duo. The app is available for free for iPhone or Android devices.
2. After you install the Duo Security app, tap the personalized link in the email message from your smart phone and follow the prompts (as pictured below) to activate your phone.
If you choose to use a hardware fob:
A member of the 2Step Team will provide you with a hardware fob or you may pick up a fob at the CSUB Helpdesk located in the lower level of the Walter Stiern Library. Members of the 2Step team are available to be sure you can login successfully and answer any questions you may have.
2Step verification, also known as "two-factor authentication", provides an extra layer of security in addition to passwords. This additional step ensures that your information, transactions or online work is safer from unauthorized access by requiring a second method of authentication, such as a phone, code or other registered device, to verify your identity. Even if someone obtains your password, they cannot access your account without having your registered 2-Step device.
2Step Verification uses mobile technology to send an authentication request to your registered device. When you log into a CSUB resource with your CSUB NetID, a notification will be sent immediately to your smartphone, SMS-capable cell phone, or other registered device. You simply tap Approve on the screen, which verifies that you are the person logging in and your access will be available. If you prefer to use a small hardware fob, ITS will provide you one free of charge and activate it for you to work on your account.
2Step Verification provides extra protection for the sensitive information our systems contain in case you are a victim of phishing or hacking. If someone steals your credentials and tries to access your account, your user name and password will not be sufficient to log in. The thief will also need to have access to your device to complete the log in process. If someone else tries to log in to your account, you will be notified on your device and you can deny them access instantaneously.
All accounts that access Level 1 data and/or the Common Financial System are required to be protected with 2Step verification. This decision follows industry standards set by business, education and even the financial sector. Protection of your data and identity is of paramount importance to us. Keeping it secure is something we do not take likely and we know that 2Step is the best solution to the growing problem of password theft and account compromise.
No, the 2Step system is designed so that when you login you will have the option to "Remember Me for 12 hours". If you check this box, then 2Step will remember you on that specific computer, using that specific browser for the next 12 hours--across all services.
If you go to a different computer or use a different browser, then you will have to authenticate with 2Step again.
If you are required to use 2Step, then you will be contacted by ITS to activate your account. If you would like 2Step protection added to your account, please contact the 2Step team by email: 2Step@csub.edu
For full details on getting started with 2Step, please follow this Getting Started link.
2Step Verification lets you register multiple devices to your account, so you can always access your account even if one device is temporarily unavailable. For example, you can register a hardware fob, your smart phone, your cell phone voice number, and your office landline. All of these methods can authenticate you to 2Step.