** The following message from IT regarding changes to CFS login is being shared on Finance Connect to ensure it reaches all appropriate audiences. Please contact the IT Service Desk at 408-924-1530 with any questions. **
In support of a CSU-wide security audit finding, we are implementing an additional login security measure for all Common Financial System (CFS) users. Effective July 23, all CFS logins will require 2-Factor authentication (also known as 2-Step verification or Multi-Factor authentication). This new login process will require an additional action after you’ve entered your SJSUOne ID and Password. This second step is provided by Duo, a security application we’ve integrated with our Single Sign On solution. Using this 2-Step login process to verify your identity increases our security. Even if your identity or password is stolen, without this second factor, no one can use your account to access our Finance system.
You can find information on how to set up and use Duo, on our Duo help page. We strongly recommend the use of the Duo mobile app available free for your smartphone. This secure application is the simplest way to perform the second step of the login process. To install this app on your Android or iPhone smartphone, search for Duo Mobile from the Android Play Store or iPhone App Store and install. (Note this is not Google Duo which is an unrelated app). When logging into CFS, you will receive a notification on your phone and after one or two clicks, the login will be completed. If you don’t have a smartphone or need a different solution, we will provide a small hardware device (called a key fob or hardware token) that will generate a six digit passcode to enter in each time you login to CFS.
To get started, the IT Service Desk will setup your account for Duo. If you are using a smartphone, please sent this smartphone email; or if using a hardware token, please send this key fob email. If you send your own email, please let them know if you will be using the Duo smartphone app or hardware token/fob. Finalizing the smartphone setup for the Duo app is a self-service action described on the Duo help page. If you choose to use the key fob, when your account is ready you can pickup this device at the IT Service Desk located on the first floor of Clark Hall, along with further instructions.
You can sign up now or at any time during the next 6 weeks. On Monday, July 23, the 2-Factor authentication will be required for all users to login to CFS. I encourage you to sign up at your earliest convenience.
Please note: there is no change in how you initially connect to CFS, for example, using the CFS link on the my.sjsu.edu App Portal. The only change is the second step during the login process once you click on the CFS link.
Currently, this implementation is just for CFS, however, you can opt in now to use Duo for all of your Single Sign On applications; see the Duo help page for more information. Future plans include 2-Factor authentication as a requirement for additional applications and other use cases.
Please let me know if you have any questions or contact the IT Service Desk at 408-924-1530.
Joel D. Johnson
Director of Web and Campus Applications