April 20th 2017, five sections of Workday will require employees to use Cornell's Two-Step Login. Enable this service before you need it!
Why enroll in Two-Step Login?
You don't have to.
However, here are two reasons to consider enrolling sooner than later.
(A) Until you enroll, you will shortly not be able to access limited portions of your Workday data:
Beginning April 20, 2017, the university will require Two-Step Login to access your most sensitive data in Workday:
- Tax forms
- Payment elections (direct deposit)
- Address changes
- Changes to dependents
- I-9 (Employment Eligibility Verification form)
(B) Enrolling now prevents a hacker with your password from enrolling first and thus getting to the above sensitive Workday pages.
How do I enroll in Two-Step Login?
1) Sign in to start the process:
2) Choose and enroll your Two-Step devices (2 or more!)
Common devices are:
- Your office desk phone.
- Your mobile device, such as an iPhone, iPad, or Android device.
- Your flip-phone.
- Your home phone.
TIP: If using a mobile device and you cannot or don't want to download and use the Two-Step application (the Duo Mobile app), enroll the phone as a "Landline" device, not as a Mobile device.
- This also applies to any "non-smart" phone, such as a flip-phone.
- As with a Landline, your mobile phone can respond to a "Phone Callback" from Duo.
- The Duo Mobile app is necessary for the extremely handy "Duo Push" service.
2B) Enroll subsequent devices:
3) Optional step: Expand where you use Two-Step Login
CIT states that doing this extra, optional step "is one of the best measures you can take to safeguard your personal information and protect the university against hackers."