Case Study: What It Is Like to Use Two-Factor for Weblogin

Wondering what it might be like if you turn on two-factor for Weblogin? My name is Janet, and I work for ITS. This is what it's like for me. Your experience may be different, depending on the devices you use and the things you log in to.

Contents

The Devices I Use

I have a personal iPhone, iPad, and MacBook Air. My U-M work computer is a MacBook Pro.

The Things I Log In To Via Weblogin

  • U-M Google for Mail, Calendar, and Drive
  • Employee Self Service on Wolverine Access
  • Time Approval on Wolverine Access
  • Drupal content management system (for updating web pages)
  • MCommunity Directory
  • ITS intranet

My Duo Enrollment Options

  • App on my iPhone. I installed the Duo Mobile app on my iPhone and enrolled that in Duo two-factor.
  • Office landline phone. I also enrolled my office desk phone as a backup option in case I forget to take my phone to work someday.

What Happens When I Use My Phone or iPad

Using apps—two-factor not needed. When I log into my U-M Google Mail from my iPhone or iPad, I don't see two-factor at all. I tap the Gmail app icon and get directly into my mail without logging in. The same thing happens when I use U-M Google Drive or other apps, such as iCalendar, that I have connected to my U-M Google account.

Using a web browser—must approve the login. When I open Chrome to get to the MCommunity Directory to set my Away Message, I am prompted to log in via Weblogin.

  1. I enter my uniqname and UMICH (Level-1) password and click Login as usual.
  2. Then the two-factor screen appears as a second login step. I have not set Duo up to do anything automatically because I like to be able to choose the option I will use when I log in. I usually click the Send Me a Push button, because that is the quickest option. If I check the Remember me for 12 hours box, I won't need to use Duo from that web browser for the rest of the day. What happens when I log in via Weblogin
  3. My iPhone lets me know I have a login request. I swipe the request notification to the left to open it, and then tap Approve. I unlock my phone, then I am logged in.

What Happens When I Use My Computer

When I log into my U-M Google Mail from either my home or work computer:

  1. I open the Chrome web browser and go to mail.google.com/a/umich.edu.
  2. On the Weblogin screen, I type my uniqname and UMICH (Level-1) password, and click Login.
  3. On the two-factor screen (see screen shot above), I check the Remember me for 12 hours checkbox, then click Send Me a Push.
  4. My iPhone notifies me that I have a login request. I swipe the request notification to the left to open it, and then tap Approve. Because I have a passcode set for my phone, I must enter my phone passcode. Then I am logged in.

Using My Backup Options

  • Using a phone call. If I get a new phone and don't have the Duo Mobile app set up on it, I can approve my login via a phone call. I choose Call Me and then get a phone call on my iPhone. I answer and am prompted to press 1 to approve the login.

    Using a phone call

  • Using a passcode. If I don't have cellular or internet connectivity, I can use the Duo Mobile app to generate a passcode. I choose Enter a Passcode. Then I open the Google Mobile app on my phone and tap the Key icon to get a passcode to enter to login.

    Using a passcode

  • Using a different phone number or device. From the Device menu at the top, I can choose my office landline.

    Using a different phone number or device

    Next, I click Call Me. My office phone rings. I answer and am prompted to press 1 to approve the login.

What a Typical Day Is Like

I am prompted to use two-factor about twice a day because I routinely use two different web browsers. Some examples:

Monday, May 14, 2017
Checked email throughout the day from my phone and iPad and did not need to log in. Visited multiple sites protected by Weblogin from my computer. Was prompted for two-factor three times.

  • 8:15 a.m. Used two-factor when logging in to Google U-M Mail from Chrome. Forgot to check the Remember me for 12 hours box.
  • Noon. Went to Time Approval in Wolverine Access from Chome and was prompted to log in and use two-factor.
  • 1:40 p.m.: Used Firefox to go to Backstage, the ITS intranet. Was prompted to log in and use two-factor. Checked the Remember me for 12 hours checkbox.

Tuesday, May 15, 2017
Checked email throughout the day from my phone and iPad. Used multiple sites that use Weblogin. Was prompted for two-factor twice.

  • 8:30 a.m. Used Chrome to go to Backstage. Was prompted to log in and use two-factor. Checked the Remember me for 12 hours checkbox.
  • 2:30 p.m. Logged in to Drupal from Firefox to edit a website and was prompted to log in and use two-factor.

Wednesday, May 16, 2017
Checked email throughout the day from my phone and iPad. Used multiple sites that use Weblogin. Was prompted for two-factor once.

  • 11:00 a.m. Used Chrome to go to a Drupal page to edit a web page. Checked the Remember me for 12 hours checkbox. Was prompted to log in and use two-factor.
Last Updated: 
Monday, May 22, 2017