2Step

Two-Factor Authentication and Security

Enroll Your Phone Now!
CSUB Home > 2Step > Home

What is 2Step & Why Do I Need It?

Passwords are increasingly insecure.

Every day passwords are guessed, hacked or stolen by email phishing attacks. When this happens the safety of our private data is put at risk. 2Step Verification for your CSUB account adds a second layer of security and keeps your account protected--even if your password is compromised.

CSUB is excited to join others in the CSU system, private industry, and financial institutions who have also secured their most sensitive data with 2Step verification.

By verifying your identity using a second factor--like a small hardware device or smart phone app--2Step prevents anyone but you from accessing your account. If someone steals your credentials and tries to access your account, your user name and password will not be sufficient to log in. The thief will also need to have access to your device to complete the log in process. If someone else tries to log in to your account, you will be notified on your device and you can deny them access instantaneously.

2Step Secure Computer

What Services Use 2Step?

All services authenticated through Shibboleth will require 2Step verification. These services include:

  • Common Financial System
  • Finance Data Warehouse
  • PeopleAdmin
  • SAP Concur
  • CSYou
  • Zoom Conferencing
  • CSU Learn (SumTotal)
  • Box.com
  • ServiceNow
  • CSU Sharepoint
  • AcademicWorks
  • Handshake
  • Digital Measures
  • Questica

  • Qualtrics
  • Cayuse424
  • eProcurement
  • Campus Marketplace
  • OrgSync
  • Lynda/LinkedIn Learning
  • Modo Labs Admin
  • Slack
  • InfoReady
  • CSUB Business Continutiy Plan (Kuali)
  • Parchment
  • Alma Library Reference
  • SumTotal Library Reference

How Does 2Step Work?

Information Technology Services has partnered with Duo Security to bring 2Step Verification to CSUB.

With 2Step + Duo, you have many options to verify your identity. When you enter your username & password online, you have the option to verify your identity using a small hardware fob, an app on your smart phone or a call to your phone.

How Duo works



Getting Started with 2Step

If your account requires 2Step verification, then this is the process for getting started:

  1. You will be contacted by ITS and together we will setup a date and time to enroll you in the 2Step service.

  2. On that date, you will receive an enrollment email from Duo Security. This email message will contain a personalized link to activate 2Step on your smart phone (if you choose). If you would prefer to use a hardware fob, then ITS will issue one to you at no cost. If you choose not to activate your smart phone, then the email link will allow you to activate a landline such as your office extension.

  3. A member of ITS will meet you on the date of your enrollment to help you get your device activated. If you would like a fob, we will bring you one at that time and confirm that you can login successfully with your new hardware fob.

Duo devices

IT Services is here to help

ITS wants you to have a positive experience using 2Step. We firmly believe in the quality, simplicity and security that 2Step provides and we use it ourselves everyday.

Please refer to our guide to getting started and frequently asked questions. If you need additional help, do not hesitate to contact us at 661-654-HELP or helpdesk@csub.edu.

Using the Duo App

If you choose to use your smart phone,

      1. From your smart phone, visit the link provided to in your enrollment email to download the 2Step app on your device, called Duo. The app is available for free for iPhone or Android devices.

      2. After you install the Duo Security app, tap the personalized link in the email message from your smart phone and follow the prompts (as pictured below) to activate your phone.

      Enter your phone number

      Select mobile phone type

      Activate Duo mobile

      Enrollment Successful!

If you choose to use a hardware fob:

  1. A member of the 2Step Team will provide you with a hardware fob or you may pick up a fob at the CSUB Helpdesk located in the lower level of the Walter Stiern Library. Members of the 2Step team are available to be sure you can login successfully and answer any questions you may have.

Frequently Asked Questions

2Step verification, also known as "two-factor authentication", provides an extra layer of security in addition to passwords. This additional step ensures that your information, transactions or online work is safer from unauthorized access by requiring a second method of authentication, such as a phone, code or other registered device, to verify your identity. Even if someone obtains your password, they cannot access your account without having your registered 2-Step device.
2Step Verification uses mobile technology to send an authentication request to your registered device. When you log into a CSUB resource with your CSUB NetID, a notification will be sent immediately to your smartphone, SMS-capable cell phone, or other registered device. You simply tap Approve on the screen, which verifies that you are the person logging in and your access will be available. If you prefer to use a small hardware fob, ITS will provide you one free of charge and activate it for you to work on your account.
2Step Verification provides extra protection for the sensitive information our systems contain in case you are a victim of phishing or hacking. If someone steals your credentials and tries to access your account, your user name and password will not be sufficient to log in. The thief will also need to have access to your device to complete the log in process. If someone else tries to log in to your account, you will be notified on your device and you can deny them access instantaneously.
All accounts that access Level 1 data and/or the Common Financial System are required to be protected with 2Step verification. This decision follows industry standards set by business, education and even the financial sector. Protection of your data and identity is of paramount importance to us. Keeping it secure is something we do not take likely and we know that 2Step is the best solution to the growing problem of password theft and account compromise.
All services that are accessed by logging in to the Shibboleth authentication server will require 2Step verification. The full list of services is located above by following this link.
No, the 2Step system is designed so that when you login you will have the option to "Remember Me for 12 hours". If you check this box, then 2Step will remember you on that specific computer, using that specific browser for the next 12 hours--across all services.

Option of login: Remember me for 12 hours

If you go to a different computer or use a different browser, then you will have to authenticate with 2Step again.

If you are required to use 2Step, then you will be contacted by ITS to activate your account. If you would like 2Step protection added to your account, please contact the 2Step team by email: 2Step@csub.edu

For full details on getting started with 2Step, please follow this Getting Started link.

2Step Verification lets you register multiple devices to your account, so you can always access your account even if one device is temporarily unavailable. For example, you can register a hardware fob, your smart phone, your cell phone voice number, and your office landline. All of these methods can authenticate you to 2Step.
Go to the Duo Device Management Portal and login with your CSUB NetID and password. On the 2Step verification page you will see your devices listed.

Click the link that says "Add another device" and you will be guided through the process of adding a device to 2Step.

Add another device

To remove a device, click the button that says "Device Options".

Device options

Next to the name of the device you wish to remove, click the red trash icon to remove it from 2Step.

Trash icon

If you have other devices enrolled in 2Step, such as a hardware fob or office landline, then use those to authenticate.

If you only have one device activated on your 2Step account and do not have access to that device, then please contact the ITS Helpdesk at (661) 654-HELP for assistance.

The Helpdesk is available at (661) 654-HELP and is open Mon-Thurs: 7am-10pm and Fri: 7am-5pm. The helpdesk is closed over the weekend.

If you get a push notification from the Duo app that you did not request, that means someone else is trying to log in using your account and your CSUB account may have been compromised.

Tap the Deny button in your Duo app. Then got to myCSUB and reset your password as soon as possible. Doing so will ensure access to your account remains secured.

As soon as possible, inform the ITS Helpdesk at (661) 654-HELP or helpdesk@csub.edu if this occurs.

    If your phone number is the same:

  • Go to the Duo Device Management Portal and remove your old device. Then add your new device using the "Add a device" option.

    • If your phone number has changed:

  • If you have already setup an alternative/secondary 2Step device, then login in to the Duo Device Management Portal. then click, "Manage Devices".

    Click "Enroll another device" to enroll your new phone. You can then remove your old phone by clicking the trash icon.

  • If you do not have an alternative/secondary device enrolled in 2Step, then call the ITS Helpdesk at (661) 654-HELP for further assistance.