How Does UCLA Logon MFA Benefit Me?

On October 31, 2017, Multi-Factor Authentication (MFA) became mandatory for all campus employees when using UCLA Logon ID. All UCLA campus employees include faculty, staff, student workers, visiting scholars, graduate student researchers, and others with an active appointment at UCLA. Using MFA will help prevent others from accessing your accounts, even if your password is compromised. 

Multi-Factor Authentication (MFA) combines two or more independent credentials in order to gain access to a system. These credentials include something the user knows (e.g., password), something the user has (e.g., token device/smart card/smart phone) or something the user is (e.g., biometric verification).

The goal of MFA is to create a multilayered approach that makes it difficult for any unauthorized person to gain access to a system. If one factor is compromised, such as a password, the attacker will still need the other factor—for example, a smartphone—in order to gain access to the system.

UCLA has partnered with DUO to provide MFA capabilties. You can find out more about DUO on their website.

 

All UCLA faculty, staff, student workers, visiting scholars, graduate student researchers, and others with an active appointment at UCLA need to enroll in UCLA Logon MFA.

Multi-Factor Authentication for UCLA Logon ID is designed to work with your existing devices and network connections. We support the following devices/methods:

  • Push notification via the free Duo Mobile app on your smartphone or tablet
  • SMS text messages via a cell phone
  • Voice calls to a cell phone or landline
  • Hardware token

The Duo Mobile app is free and downloadable from your cell phone's app store (e.g., iTunes or Google Play). Standard data or phone charges may apply when using push notification, sms text, and/or voice calls. 

To obtain a hardware token for your account, please contact your departmental IT support staff. If you need assistance locating your IT support, please contact the Bruin Online Help Desk at: consult@ucla.edu.

Each department is responsible for the cost of department-issued cell phones. Find out more about UCLA’s discount mobile cellular program.

Department IT teams: Please visit the MFA Resources for Departments page for departmental cost information.
 

 

You will not be able to access web applications using your UCLA Logon ID until you’ve enrolled. To learn how to enroll in MFA now, visit the "How Do I Enroll in MFA” page.
 

 

If you prefer not to use your personal smartphone, or you don’t own a compatible device, don’t worry: There are alternatives. You can choose to enroll and receive a text message or call to your cell phone, or you can receive a call to your landline. In exceptional cases, departments might be able to provide you with a hardware token.

Many universities and other institutions have chosen DUO to provide reliable and trustworthy MFA services to their employees. You can read more about DUO and their privacy policy at the DUO website

Yes. Before you leave home, be sure to request a batch of 10 one-time-use passcodes to be texted to your mobile phone. Simply log onto an application using UCLA Single Sign On and, at the MFA window, choose “Enter a Passcode.” At the bottom of the next window, choose “Text me new codes.” These passcodes will enable 10 secure logons even if your phone has no internet connection.

From any location, you can also open the DUO app on your phone and choose the key icon near the top right. This generates a code that you can type into the MFA window. You will not incur any network charges for this option.

You can also register a landline or, in special circumstances, request a token. For further details, please read our knowledgebase article.

MFA for UCLA Logon
Woman using laptop and smartphone

Protect accounts associated with your UCLA Logon ID by enrolling in multi-factor authentication (MFA) now.