URMC Two-Factor Authentication FAQ

What is Two-Factor Authentication?

Two-Factor Authentication is a secondary validation of a user prior to granting system access. Similar to requirements of financial services, this improves security around information and systems.

Why do I have to enroll?

All remote access users are being required to enroll in two-factor authentication for URMC systems due to increasing and persistent attacks on security and to ensure the privacy of patient information. Remote access users (community physicians, ePartner, eRecord,eView, and VPN) must enroll and setup at least one device by August 6, 2014.

When do I have to start using two-factor authentication?

As soon as you enroll, you will begin to receive prompts when you log in to provide the second authentication via phone call, text message, or through the Duo app.

How do I enroll?

Complete the following steps to enroll and setup your device(s):

Community Providers and Partners

See our Referring Providers website for instructions to enroll.

Faculty and Staff

  1. Connect to the URMC network through VPN (web or Cisco AnyConnect client) or log on to a URMC computer.
  2. Go to the URMC Two-Factor Authentication Enrollment site.
  3. Enter your user name and password; select URMC-SH as the Domain and click Submit.
  4. Read through the information on the screen and initiate your enrollment by clicking Start setup.
  5. Follow the on-screen instructions; for assistance, you may access an enrollment guide by clicking the Need help? link.
  6. Enroll your device per the on-screen instructions. It is strongly recommended that you enroll more than one device and be sure to choose ones that are accessible when and where you require access to URMC remote systems. To setup additional landline phones, mobile phones, or tablets, click Enroll another device.
  7. When all devices are enrolled, click Done

After setup, you will be asked to authenticate your device via the authentication prompt. You may select the device and method to complete this step.

If I can't connect to the URMC network or VPN, how do I enroll?

Please call the ISD Help Desk at (585) 275-3200 for assistance.

What happens after I enroll?

You will be prompted to authenticate your login each time you attempt to connect to a URMC Remote Access system and each time a new computer or device is being used to connect. You may choose which device you'd prefer and method to complete the authentication (i.e., your cell phone number and text message, or home phone line and phone call).

When you authenticate your login, you may select the option to Remember this device for 60 days. This will allow your computer, tablet, or other device to be remembered for 60 days and skip the added authentication step when you sign in. You will be prompted at the end of 60 days, at which time you may select the extension option again when you respond to the authentication prompt.

Can I change my devices after I enroll?

Yes. You may log back in to URMC Two-Factor Authentication Enrollment site at any time to manage, add, or remove devices.

What is Duo?

Duo Security, Inc is a two-factor authentication service provider. URMC users enrolling in two-factor authentication will have the option of utilizing the Duo app on a smartphone or tablet.

Need Help?

For any issues with accessing systems remotely with two-factor authentication, call the ISD Help Desk at (585) 275-3200.