Two-Factor Authentication
The two-factor authentication system provides an additional level of security when signing in to Ryerson web applications via Ryerson’s Central Authentication Service. When you enter your username and password for a system, if the two-factor authentication is enabled, you will get another prompt to enter a time sensitive pass code. The pass code is generated by an application on your mobile device (Ryerson Authenticator).
• How to Activate Two-Factor Authentication
• How to Update or De-activate Two-Factor Authentication • How to revoke all trusted devices
• What to expect after Two-Factor Authentication is activated
How to Activate Two-Factor Authentication
1. Go to the my.ryerson portal and click on the link: Log into my.ryerson
under Personal Account Security Settings.
Note: This option allows you to set up this added layer of security to your mobile device. The Personal Account Security Settings under the Self Service options module now consists of:
• Change Password • Activate Google Token • Update Challenge Phrase • Two-Factor Authentication
4. Next, you will see the Two-Factor Authentication screen
5. Click on Set up button to choose the supported Mobile Devices
Note: Click here to access the instructions for users without the required mobile device.
6. Once a mobile device is clicked, the instructions specific to that mobile device will be shown next. For
illustration purposes, iOS (iPhone, iPod Touch, iPad) option is selected. Detailed instructions for installing the Ryerson Authentication app on your mobile device can be found here:
1. Android
7.
If your device cannot scan the Quick Response Code (QRC) for any reason, please click the
Can’t scan the Quick Response Code? link. The section expands with instructions on
manually setting up your mobile device. The secret key shown in Step 4 is randomly
generated.
8.
You have the option to enforce two-factor authentication for either:
• every CASified application (as long as you are logged into CAS, you will only need to enter your two-factor authentication once), or
secret key, the mobile application will generate a time-sensitive, auto-refreshed, 6-digit number. This code is to be entered into the text field, and you must then click Verify and Save to save your Two-Factor Authentication factor settings.
9.
Once the QR code is scanned or the secret key is manually entered correctly, you will get the
confirmation screen.
By using the option Show/Generate Backup Codes, you can generate backup codes in the event you are not able to access your mobile device for any reason. These are one-time use, randomly generated codes.
At this point, you can click "Generate New Backup Codes" to generate a new set of codes, or click Back to return to the Two-Factor Authentication menu.
How to Update or De-activate 2-Factor Authentication
3. Under the Self Service group of resources, click on Two-Factor Authentication placed under Personal Account Security Settings.
4. When you click for Two-Factor Authentication screen, you will be presented with the Revoke mobile
device or Show Backup Codes. You may want to revoke your device if you have either lost or replaced your mobile device or if you no longer wish to use Two-Factor Authentication.
How to Revoke All Trusted Browsers/Devices
1. Login to the my.ryerson portal
2. Under the Manage My Resources, click on Self Service.
3. Under the Self Service group of resources, click on Two-Factor Authentication placed under Personal Account Security Settings.
4. When you click for Two-Factor Authentication screen, at the bottom of the screen, you will see Revoke
all trusted browsers/devices button. You may want to click this button if you have either lost or
1. Go to the my.ryerson portal and click on the link at the top: Log into my.ryerson
NOTE: The verification code is the code you are supposed to get from the Ryerson Authenticator app on your mobile device each time you login.
3. Click in the box for I trust this device... option, if you don't want to enter a verification code everytime you login to CAS.
5. The One-Time Verification form contains links to various questions. Please use them to find out more.
