Campus sent out an e-mail this week to all staff with the subject “CU Employees: Keep your pay safe; sign up for Two-Step Login”. This is a verified, legitimate e-mail communication about the upcoming change in WorkDay, which will require a two-step verification to do certain tasks within WorkDay (such as direct deposit). If you cannot find this e-mail in your Inbox and you want to read the full details about why campus is implementing this, you can view a copy of the e-mail here:
https://it.cornell.edu/verified/4611
To sign up for two-step authentication, you can go to: https://it.cornell.edu/twostep.
What is Two-Step?
Two-Step login blocks criminals from using stolen Cornell passwords by requiring something they don’t have. Something in your possession.
Starting April 20th, to do certain tasks within WorkDay, you will login into WorkDay with your NetID and password as you normally would (step 1) AND then confirm your identity (step 2) by:
- Taking an automated call on any phone you choose
- Tapping an app or notification on a smartphone
- Entering a code from a device on your keychain or a phone app
First Time Setup
Cornell is recommending that sometime between now and April 20th you enroll multiple devices in Two-Step Login. Enrolling multiple devices ensures that you always have a few options to use, in case a device is lost, forgotten, or inconvenient to access.
Step 1. Choose Your Two-Step Devices (<– Click for more information)
A few suggested options to add:
- Work Phone
- If you have a direct phone number to your work phone, enter this number in.
- If you have an auto-attendant picking up incoming calls at your office: enter in your work number plus extension number.
- If you have an administrative assistant answering incoming calls, you’ll need to use the back way into your phone’s auto-attendant:
- Niagara: Use the phone number 716-433-6731 and then your extension number
- Wyoming: Use the phone number 585-786-5538 and then your extension number
- Cell Phone
- Two options are available when using your cell phone:
- Simply add your cell phone number in so the system can call you
- Use the Duo Mobile app (Duo Push)
- Home Phone (in case you need to log into WorkDay at home)
- Two options are available when using your cell phone:
Step 2. Enroll Your Devices (<– Click for instructions)
More information
- View all instructions and more details at:
- Campus is working on creating more online training videos, which will include more information about spotting phishing e-mails and the two-step authentication. I will forward those to all staff when they become available.
- FYI: Current online training videos about spotting phishing e-mails can be found here: https://vod.video.cornell.edu/channel/IT%2540Cornell/22340752
- Cate Sirek, the Lead IT in the Finger Lakes region, has set up a Zoom webinar and has invited any staff that wish to attend:
- 2-Step Authentication Training — 2-Step authentication, a new security measure that will affect some Workday transactions, will take effect on April 20.
- Join us for a Zoom webinar on Wednesday, April 12 at 10:30 a.m. and learn how to get it set up and working for you. Connect here: https://cornell.zoom.us/j/522299148