Manage Multi-Factor Authentication

ACCESS uses Duo for Multi-Factor Authentication (MFA).

Please see https://guide.duo.com/universal-prompt for details about managing your Duo MFA options using the Duo Universal Prompt.

To add additional verification methods or manage your existing devices, please see https://guide.duo.com/universal-prompt#add-or-manage-devices.

Initial Enrollment in Duo for ACCESS

To enroll with Duo for ACCESS:

  1. Visit https://cilogon.org/me/ and click the “Delete ALL” button.
  2. Visit https://registry.access-ci.org/registry/auth/logout and click the “LOGIN” button.
  3. In the “Select an Identity Provider” box, choose “ACCESS CI (XSEDE)” and click the “Log On” button.
  4. Enter your ACCESS username and password on the idp.access-ci.org login page. (To set/reset your ACCESS password, visit https://identity.access-ci.org/password-reset.)
  5. You will be prompted to enroll in Duo. Install the Duo security app on your phone and configure it to use Duo Mobile / Duo Push. We do not recommend the Phone Call option, because it is unreliable.
  6. You should see the “ACCESS Identity Dashboard”.

Now you should be able to log in to any other ACCESS website such as ACCESS Allocations.

Manage (Add/Delete) Devices/Authentication Methods used by Duo for ACCESS

To re-visit the Duo Universal Prompt to manage your devices/authentication methods after logging in:

  1. Open a private browser window in Chrome, Firefox, Safari, or your preferred web browser. Using a private browser window ensures that Duo will display the Universal Prompt even if you have previously logged in.
  2. Visit https://cilogon.org/?selected_idp=https%3A%2F%2Faccess-ci.org%2Fidp&skin=access to log in using the ACCESS Identity Provider.
  3. Click the “Log On” button.
  4. Enter your ACCESS username and password on the idp.access-ci.org login page.
  5. You will be prompted to authenticate with Duo. DO NOT AUTHENTICATE! Instead, click the “Other options” link near the bottom of the duosecurity.com window.
  6. In the "Other options to log in" window, click “Manage devices”.
  7. You will be prompted to authenticate with Duo (again). Select an existing method to authenticate with Duo.
  8. You will be redirected to the "Devices" page. Here you can add new authentication methods such as another phone or a hardware token (e.g., YubiKey).
  9. Close your private browser window when done.