This communication is intended for WUSM VPN users and Legacy PCF Citrix users.
May 23: Two-factor Authentication Requirement for remote access to WUSM systems
As the result of an identified vulnerability, we are proactively accelerating our plan to improve security around VPN access to Washington University School of Medicine (WUSM) systems.
Starting at 1:00 p.m. tomorrow, May 23rd, two-factor authentication (2FA) will be required for remote access to all WUSM systems. We will be upgrading to an improved Virtual Private Network (VPN) system at that time. After this change, some VPN users may encounter additional steps as they get set up in the new system.
WashU 2FA two-factor authentication services, provisioned by Duo, enable identity verification through the use of a second device to protect your WUSTL Key ID. Currently, WashU 2FA authentication is required for off-campus access to the WashU HRMS system and other applications.
If you have not already enrolled in WashU 2FA, please do so today. You can find more on WashU 2FA and watch the short enrollment video tutorial here.
If you are completing this process using a browser, please take care to disregard the additional information you will see on the right pane during setup. The documentation linked below is the most current and best source for completing this process.
We have been moving toward a better solution for secure remote access WUSM systems for some time now and we are happy to be in a position to provide you with that solution on an expedited timeline.
We appreciate your patience as we continue to enhance our services.
If you experience any issues with this new process, please don’t hesitate to reach out to our Service Desk at 314-933-3333.
You will find links to guidance documentation for this change below:
TRAVELERS: If you will be using 2FA on slow WiFi networks (e.g. airplane or hotels), use the code method for best results. Open Duo Mobile on your phone, click the down arrow, and use the code generated in the “Second Password/DUO 2FA Method” field. Codes can also be texted to you via the SMS method, or you can call the helpdesk for assistance.