DUO: FAQ for ASC Faculty and Staff

Overview

BuckeyePass is OSU's two factor authentication, also known as Duo.

Two factor means an second identifier, typically in addition to a password. Generally, there are three ways to authenticate: something you know (password), something you have (a token or phone app), and something you are (a fingerprint).

Two factor authentication has become much more common with banks, Gmail, and now OSU requiring it for certain services. OSU requires BuckeyePass for changing personal information and accessing more secure services, such as the ASC VPN and financial systems. 

OCIO Resources

ASCTech is happy to answer any questions you have and assist in sign up. Since this is OCIO's service they do have some good resources.

OCIO's main site for BuckeyePass is at https://buckeyepass.osu.edu.

OCIO's BuckeyePass site is the first point for initial sign up and they have videos and other documentation. Duo help from OCIO is also available at the BuckeyeBar locations or call 8-HELP.

BuckeyePass/Duo Tips for ASC

Tips and tricks for sign up and managing devices:

  • You will need to select a default device at the bottom, but if an automatic push is required it will go to the topmost push device is there is no other default.
  • When you enroll with a mobile phone, your number will be enrolled in BuckeyeAlert. If you do not want these infrequent texts, reply Stop to any alert message.
    • If you feel very strongly about not enrolling your smart phone, you can enroll it as a tablet.
  • We recommend setting up at least two devices, just in case one is unavailable. (For example, a smart phone, a tablet, or token.)
    • Make your first device your smart phone as it is the one you will use most and can do all both methods: push and passcode.

Tips and tricks for usage:

  • For services that do not redirect to the BuckeyePass login web page:
    • Services with a second password box, like the ASC VPN: you can input a passcode or type push, push2, etc. depending on the method you wish to use.
    • Services that have only one password box, like ASC Code42 (formerly CrashPlan): you can add a comma and a method after the password, for example: ,push2 .
    • SSH Jump Host: when logging in interactively, the host will display a menu with Duo options.
    • SSH Jump Host: when using the public key method, the host automatically uses your first push device.
  • When travelling without network service, your phone cannot get a push. You can hit the down arrow icon in the app next to Ohio State University to get a passcode that is usable without network. Use the refresh arrows to get a new one.
  • You can also get 10 codes texted to you. Duo will ask 'use the code that starts with X'. These codes are good for a year, and texting new codes invalidates the old 10.
  • Note that Duo texts only work to U.S. and Canadian numbers.
  • If hard token or app passcode based login reports 'Incorrect passcode' there is a chance your token or app is out of sync. To fix this:
    1. Go to the BuckeyePass site.
    2. Use 3 consecutive codes (waiting for the number to change then trying again to log in 3 times in a row)
    3. This will sync the server to be aware of the timing of the token.
    4. It's rare for the issue to happen, but is the way to resolve it. If it still fails call OCIO.
  • If Duo fails three times, you may be locked out of the system. Only OCIO at 8-HELP (614-688-4357) can unlock your BuckeyePass, or you can wait for a timeout which will eventually reset your Duo.
  • If you forget your Duo device you can call OCIO and, after verifying your identity, can provide you a one time code.
100% helpful - 1 review