To: OSU faculty and staff

From: Edward Feser, Provost and Executive Vice President

January 29, 2019

Dear OSU faculty and staff,

At OSU, we are committed to the security of all university information - especially employee and student data.

Last year, the Division of Information and Technology began offering a two-step login protocol for all ONID accounts. In April 2018, two-step login was made mandatory for accessing sensitive payroll and tax documents. This solution, powered by Duo, protects your sensitive and confidential university information. By using Duo two-step login, you can protect yourself from:

  • Attempts to change your paycheck direct deposit setting without your knowledge
  • Criminals attempting to commit identity fraud
  • Unauthorized access to read and send your email

In recent months, there has been a dramatic increase in the rate of compromised OSU accounts. This represents an unacceptable level of risk to institutional data and sensitive information. To mitigate this risk and protect our community, the Duo two-step login will be mandatory for all employee ONID accounts by the end of May 2019. Two-step login will be made mandatory for students over the course of the 2019-2020 academic year.

We acknowledge that this represents a change in the way that you will interact with the University online, and we are working to make the change as seamless as possible by offering two choices for how you use two-step login: via a mobile device or an optional hardware token.

Please take a moment to visit http://beav.es/duo and sign up for Duo two-step login. You can also find a detailed timeline, event information, frequently asked questions, and helpful instructional videos on the site. A campus forum to discuss this transition is scheduled for February 4. Please see the website for details.

Thank you for your attention to this shared priority and for all you do here at Oregon State University.

Sincerely,

Edward Feser
Provost and Executive Vice President