�ֻ�ֱ��

All UA employees (including student employees) are required to enroll in MFA. UA students are encouraged to enroll in MFA, and can opt-in by changing their security settings at . MFA helps to protect your account (and by extension the University) from the risk of account compromise and data breach.  Phishing attacks resulting in account compromise are happening with increasing frequency.  By ensuring that network logins at UA require something you know (your password) and something you have in your posession (your MFA-enabled device), we can dramatically reduce the risk of an unauthorized entities accessing your account and the information within.

The list of MFA-supported applications and services is growing, but popular applications and services include UAOnline, GSuite (Google), Modern Campus CMS, DocuSign, TDNext , ClientAmazon Web Services, RAVE, and remote access services.  Most services accessible via single-sign-on (SSO) also support MFA.

Starting Oct. 31, Duo MFA will be required for all accounts using the University Virtual Private Network (VPN) and Virtual Desktop Infrastructure (VDI) services.

You can self-enroll by logging into ELMO at , selecting “Security Settings”, and then choosing the “Multi-Factor Authentication” option.  You may be prompted to enroll when you login to certain UA services.  Please follow the instructions available at and

We recommend you enroll at least two devices and that one of those is a mobile device such as a smartphone with Duo Mobile, or portable security key, such as a YubiKey that you take with you wherever you go.

More than likely, you’re using a different computer or different web browser (or both).  “Remember Me” remembers the device and web browser you used.  For example, if you use Microsoft Edge to access UAOnline and choose “Remember Me”, but then use Google Chrome or Mozilla Firefox to access you UA email, you’ll be prompted a second time.

Temporary Bypass codes can be generated from elmo.alaska.edu, by logging in via your security questions.

To generate a bypass code:

1. Go to and select the Forgot password button. 
2. Enter your username or ID number, then select the Reset password button.
3. After that, answer your security questions. 
4. If successful, continue by selecting the Security Settings button in the top left. Then select the Generate one-day passcode button. The code can then be used an unlimited number of times for the next 24 hours.

If you experience any issues with ELMO or answering your security questions, contact the Nanook Technology Service Desk for assistance.

When installing apps on your smartphone, it's a very good idea to only install them from the authorized store ("App Store" on iOS/Apple; "Play Store" on Android).  Phone calls will come from 907-455-2100 (you can call that number back to confirm that it's maintained by UA).  If in doubt, contact the NTS Service Desk for assistance.

Please DO NOT approve any unexpected Duo request.  If you don't recognize it and didn't initiate it, please report it as fraudulent (follow voice prompt instructions or tap "Deny" in the app).  Reporting suspicious MFA attempts will allow UA Information Security to promptly investigate any potential issues.

It depends.  For most people, the "Duo Push" to their smartphone is the fastest and most convenient method of MFA.  For others, phone calls to a landline can be faster or easier.  We encourage you to enroll multiple devices and try various options to see what you prefer.

You can set up and use “platform authenticators” such as Windows Hello or MacOS TouchID; these are very convenient on a computer you control, but be aware that they are restricted to that computer. You almost certainly also want a method for MFA on other computers you do not control, for example a security token (YubiKey or similar) or enrolled security key that generates a passcode. In a pinch, you can get a bypass code at  and enter that in the Duo dialog.

We don't have access to your phone - the only information we see is some demographic information - make (brand), model, telephone number, and version of the Duo Mobile app installed.

The Duo Mobile app will work with a Wi-Fi connection if a cellular connection isn’t available.  If you have no data connection at all, you can still use the app - just open Duo Mobile, find the relevant MFA-protected application (“Duo-Protected University of �ֻ�ֱ��”), tap it to expand the entry and show a one-time code you can enter at the MFA prompt.

First, check to see if the notification is appearing in the app – open the “Duo Mobile” app on your smartphone and look for a green bar at the top indicating that you have requests pending.  If you don’t see the green bar, please contact the NTS Service Desk for assistance.