Indigenous SLC’s internet-accessible services are constantly subject to illicit login attempts from people seeking to install malware and ransomware, searching for mailboxes from which to send spam, hunting for data for identity theft, or attempting to steal intellectual property. Duo multi-factor authentication (MFA) is a proven technique to prevent your account from being used in these attacks. It relies on something you know and something you have.
Once your SLC account is MFA-enabled, your login to SLC.me and the applications within it are protected by Duo. This is accomplished by using your SLC username and password (something you know) and the Duo Mobile application running on a smartphone or tablet (something you have).
Should someone steal your password and attempt to use your account to access SLC.me they will be denied access without your Duo token or Duo Mobile application.
Registration steps
While you are setting up your cell phone, you will have to initiate the process from your computer/laptop. You will see a QR code on your computer as you walk through the process.
To begin, you will need to go to the SLC.me landing page on your computer.
You will be able to login with your SLC email address and password. Remember that your SLC email address ends with ‘@sl.on.ca’ (for staff) and ‘@student.sl.on.ca’ (for students). Click on ‘Next’.
Click on ‘Next’.
You will now be presented with a DUO prompt. Click on ‘Get Started’
Click on the recommended “Duo Mobile” option.
Enter your phone number here (starting with choosing your appropriate country code from the drop-down field), following the example provided in the prompt. After inputting your number, click “Continue”.
a. Note, that if your phone number is associated with another SLC account, then you will have to choose the “I have a tablet” link from the prompt.
b. Alternatively, you can choose “I have a tablet”, if your device does not have a phone number, such as using an Apple or Android tablet device.
You may be prompted to confirm your number on the next screen. Verify that it is correct, or choose “No, I need to change it” for another opportunity to enter it.
At this point, the system will prompt you to download and install the Duo Mobile app.
a. For SLC staff who have a corporate phone, the Duo Mobile app will already be on your device. For other devices, you will need to download the app.
b. The app is available from the App Store (Apple) or Google Play (Android).
The prompt will now give you a QR code to scan from the mobile app:
a. Open Duo Mobile on your device.
b. Click the “Add +” button in the upper right corner of the app.
- Provide the app permission to user your camera, if prompted.
c. Choose “Use QR code” when prompted.
d. Point your camera toward the on-screen QR code, taking care to center it in the frame – being 8 to 12 inches away is a good starting point.
- If anything is blocking the on-screen QR code, such as your mouse cursor or another window, then the app will not be able to read the code. Be sure nothing is blocking any part of the QR code.
Once your app scans the QR code, you can provide the account with a name within the app. This is optional but is recommended. Click “Save” on the app.
Once your app scans the QR code, you can provide the account with a name within the app. This is optional but is recommended. Click “Save” on the app.
Click “Log into Duo”.
You will receive a push notification to your device. Once accepted on your device, you should be logged into your SLC account.
Using Duo
Once your Duo setup is complete:
- Log into SLC.me as you normally would. You will be prompted each time you sign into SLC.me to validate your identity with Duo.
- Specify whether you’d like to receive a push notification, or passcode from your Duo Mobile app. In a situation where you do not have access to data on your device, you can still use the passcode provided in the Duo Mobile application to sign in.
- Acknowledge the notification on your device or enter the passcode as requested.
Third-Party Accounts and Services
Duo Mobile goes beyond St. Lawrence College and can be used with a variety of web services and applications, including Facebook, Twitter, Google, and more. Authentication apps such as Duo Mobile or Google Authenticator provide a more secure multi-factor method than text messages and are increasing in popularity due to their ease of use and provided security. Duo provides instructions on adding third-party accounts to your Duo mobile app: Third-Party Accounts
We recommend setting up multi-factor authentication on any online account you have and implore you to seek out the service’s instructions for adding an authentication app. Although a website may provide instructions for one authentication app – like Google Authenticator – generally they provide the same service and setup can be completed as long as you can scan the QR code they provide.
Duo Restore for Third-Party Accounts
When you get a new phone or device, you’ll find yourself reinstalling your authentication app and needing to restore the sites you had setup previously. With Duo Restore you can backup and restore those sites with the following guide from Duo: Duo Restore
Frequently Asked Questions
Multi-factor authentication (MFA) is the industry standard for login security. MFA protects your accounts and data if your password is ever compromised.
All St. Lawrence College students, staff, and faculty are required to be registered with Duo. The mobile app is available for both iOS and Android devices from their respective app stores. The mobile app supports ‘push notifications’ when logging in, as well as provide you with a rotating passcode. You can either approve or deny the login attempt via your phone.
You can use the Duo Mobile app running on a smartphone or tablet. Using the push notification on a Duo Mobile application is the most convenient method: just press 'approve' on the Duo Mobile app. Using the push notification requires data or Wi-Fi on the device running the Duo Mobile app. In a situation where you do not have access to data on your device, you can still use the passcode provided in the Duo Mobile application to sign-in.
Please reach out to the IT Service Desk to discuss accommodation for this scenario.
You can set up multiple devices with Duo such as a smartphone and a tablet. If you have lost access to your device(s) you can contact the IT Service Desk for assistance. IT Service desk hours are 8:00 AM to 4:00 PM EST Monday through Friday.
You do not require data to use the Duo Mobile application. In a situation where you do not have access to data on your device, you can still use the passcode provided in the Duo Mobile application to sign-in. Push notifications do require data.
Contact the IT Service Desk. The staff can help you access your account and get you set back up.
Yes, you can utilize multiple authentication devices with your SLC.me account.
When you log into SLC.me, before entering your authentication method (push notification or passcode), click onto Settings then Add a new device to proceed with setting up another device on your account.
There are some phone number restrictions: you can only use your phone number with one account, but you can use multiple phone numbers with one account. That is, if you use 613.555.5555 on your account, you wouldn’t be able to add that to another SLC.me account. But if you also have 613.544.5544, you can add that as a second phone number on your account.
You can always add another device as a “tablet” when choosing your device type – tablets do not need phone numbers to be setup.
Need Help?
The ITS Service Desk is here to help! If you encounter any issues, please call 613.544.5400, ext. 4357 or email us at ITS@sl.on.ca.