UNG 2FA FAQs and Troubleshooting

Yes. For UNG 2FA enabled applications, secondary verification will be required before access is allowed.

No. There are multiple options available for verification that do not involve a smartphone. Some options are the use of a basic cell phone that can receive calls or texts, or the use of a landline phone to receive a call. A smartphone is only recommended for its mobility and the various options it provides.

If no cell service or wifi connectivity is available, the DUO Mobile app can be used to generate a passcode.

Currently, DocuSign is the only system requiring UNG 2FA verification. Prior to the OneUSG conversion in March, UNG 2FA will be enabled for the OneUSG Connect system and SkillSoft. As additional systems are identified for conversion to UNG 2FA, this web page will be updated and announcements produced.

No. Enrollment is a one-time action. The preferences you choose will be used by all applications that are converted to UNG 2FA. 

Depending on several factors a person may, or may not, be prompted to provide the 2FA verification. The general expectation is that if you sign out of a UNG 2FA application and close the web browser, you will be required to perform 2FA verification when signing in again.

Training materials and setup instructions will be provided prior to the OneUSG Connect conversion. Should you need additional assistance, contact the Service Desk at x1922.

Duo requires access to your phone's camera if you are setting it up to use the Duo mobile app. It will be used to scan a barcode presented during the setup. Duo's access to the camera can be disabled once the setup is complete. Disabling camera access is done through the phones App Settings screens (Generally: Settings > Apps > Duo Mobile > Permissions).

The phone number used to enroll is maintained solely within the UNG 2FA system, and only used for UNG 2FA notifications. It is not used for any other purpose by any department.

• Smartphone: if service is available, it can be used as normal. If no service or wi-fi connectivity are available, the Duo Mobile app can be used to generate a passcode.
• A hardware token can be taken along to produce a passcode.
• A "bypass" code can be generated for use during the duration of the trip. Special approvals will need to be obtained for this option.

The Duo Mobile app can be used to produce a passcode - even without cell or wifi service. Once you've accessed a 2FA application and are prompted for authentication, select the option "Enter a Passcode", the open the Duo Mobile app and click the "key" icon to the right of the UNG logo. A passcode will be created and displayed on your phone.

There is a cost associated with hardware tokens. To obtain a hardware token you must gain departmental approval and contact the Service Desk for assistance.