Got questions? Find answers!

Choose a topic below:

General

Where can I download the Duo Mobile app?

The app is found in the App Store or Google Play Store.  If you have trouble finding the Duo Mobile app via search, it can be accessed through mobile app stores by visiting:

What applications require LEA 2-Step?

All services that users log in with LEA will require LEA 2-Step for Faculty and Staff after June 21, 2021, and for ALL users after September 13, 2021. 

Starting Date Affected Users Affected Services
June 21, 2021 Faculty and Staff All Services requiring LEA
September 13, 2021 All Users All Services requiring LEA

Which devices are supported by LEA 2-Step authentication?

 Android Phones, iPads, iPhones, Cell Phones that can receive text messages, and Yubikey hardware tokens.

Which browsers are supported by LEA 2-Step authentication?

Chrome, Firefox, Microsoft Edge, and Safari.

What versions of Android and iOS are supported by Duo Mobile?

Am I required to use my personal mobile device for LEA 2-Step?

While it is strongly recommended that you enroll your mobile device (personal or Lamar University issued) and use the Duo Mobile app for Duo login, it is not required. 

Below are alternative devices. You are encouraged to enroll more than one device and/or device type:

  • tablet or iPad - pushes are sent to "Duo Mobile" app.
  • personal hardware token such as Yubikey - creates unique passcode which changes with each log-in.

What do I do if my phone is not supported by Duo Mobile?

You can use text (SMS) or a hardware token, such as Yubikey, with LEA 2-Step.

What if I don't want to use LEA 2-Step?

LEA 2-Step decreases the risk of compromise because an attacker would need more than just your password to access your account.
If you still do not want to use LEA 2-Step, you will not be able to access Lamar Services such as email, LU Learn.

Can I opt out of LEA 2-Step?

LEA 2-Step decreases the risk of compromise because an attacker would need more than just your password to access your account.
No, you will not be able to opt out of LEA 2-Step.

Will I receive spam calls/notifications if I use my personal device for LEA 2-Step?

No, Lamar University will only use the information provided for Duo purposes. 

Will I be able to use LEA 2-Step on my non-smartphone?

Yes, any cell phone that can receive text messages will work, but it will not include the advantages of the Duo Mobile app (passcodes, prompts, etc.) and may result in regular cell phone charges for SMS depending on your phone service. 

Does it cost me anything to use LEA 2-Step via my smartphone?

Using the app or a passcode on the app will not incur any charges from your carrier.

Text messages and voice calls are sent only when you request them, and they will be billed by your carrier in the same way that any other text message or call would. Lamar will not reimburse you for these charges. If the charges, when using Duo, exceed a level that you are comfortable with, then consider switching to a hardware token such as a Yubikey, rather than a cell phone for the service.

Can I use multiple devices, or am I restricted to one device?

You can set up LEA 2-Step on multiple mobile devices (cell phones, tablets, etc.).  It is recommended that you register two different devices, such as a cell phone and tablet.

  • On a computer, visit "https://www.lamar.edu/lea2step".
  • Use the "Get Started with LEA 2-Step or Manage your registered devices", to register second device.

Which hardware tokens are supported by LEA 2-Step?

LEA 2-Step currently supports DUO branded key fobs, and Yubikey models that support FIDO, FIDO2/WebAuthn protocols. 

Where can I buy hardware tokens?

While we strongly recommend the use of the Duo Mobile app for LEA 2-Step, you can purchase Yubikey tokens from online retailers such as Amazon.com and Newegg.com.   

Are there known limitations to hardware Tokens?

Hardware tokens are currently not compatible with desktop-based applications like Office (Word, Powerpoint, Outlook and Teams).

You will need to use the PUSH (via DUO Mobile), Passcode, or Text message-based second step for these applications.

Why can I no longer access Lamar services or get the error "access denied"?

Your account is not registered with LEA 2-Step. Register one or more devices for LEA 2-step.

Why is email no longer updating on my mobile device?

Lamar enabled LEA 2-Step for all services, including email. This would have disrupted email delivery to mobile devices like phones and/or tablets. In most cases, you will just need to re-login on your email app (outlook) on the mobile device, when prompted. If your mobile device doesn’t prompt you to re-login with LEA 2-Step, remove your account from your mobile device,  follow the instructions to re-add the account to your device.

Can I reset Duo Mobile?

If you have deleted your Duo Mobile app or reset your mobile device, go to the app store and re-install the Duo Mobile app. If you do not see Lamar University as an option in your Duo Mobile app, you will need to re-activate the app following the steps from Mobile Device or Number Change “New phone - Same number”.

How does “Remember me for 21 days” work?

Most people log into the same services, from the same device, many times a day. Each log-in will require 2-factor authentication. To reduce the repeated requests, you can mark a log-in with the "remember me" feature, which will remember your device for 21 days. At the first successful log-in of the day, select "Remember me for 21 days". Subsequent log-ins on the same device and web browser will now only require an LEA username and password to access the service.

How can I set up to automatically use "preferred default device"?

  • Visit lamar.edu/lea2step.
  • Click "Get Started with LEA 2-Step or Manage your devices".
  • Log in with LEA username and password.
  • Select "Passcode" or "Push".  

Under "My Settings and Devices".

  • Default Device:- Select your preferred default device from the drop-down menu. 
  • When I log in: - Select automatically send this device a duo push.
  • Click on "Save".

Why do I get the error message "CAS Unavailable"?

If your device has a default language set to something other than US-English, you may receive an error message stating that CAS is unavailable. This is due to an incompatibility between Lamar's log-in system and DUO.

To rectify this, set US-English as the first language option. Additional languages can be added without interference.

Lamar is currently working to resolve this issue.

Why am I unable to select “Push”, “SMS” or “Passcode” on the DUO screen, when I try to log-in?

We have identified that certain extensions, with certain browsers, can interfere with the log-in process. In particular, the following extensions with the following browsers are known to cause issues:

  • "Read&Write for Google Chrome” on Chrome (Mac, PC and Chromebook).

To rectify this, temporarily disable the extension during log-in and re-enable it after you have logged in.

What should I do if I lose my mobile device and cannot log into Duo?

If you have lost your phone, or any other mobile device enrolled in Duo, unfortunately, you will not be able to access applications requiring Multi-Factor Authentication, without the registered device.

Choose one of the following options:

  • If you have a secondary device enrolled (e.g., a tablet or yubikey), log into the LEA 2-Step Device Management Portal at lamar.edu/lea2step, with the secondary device. Click My Settings and Devices. Next to your mobile device, click Device Options, and then click the trash can to delete that device. 
  • If you do not have any other devices enrolled in Duo, contact IT ServiceDesk at 409-880-2222 or sevicedesk@lamar.edu for a bypass code to enroll a new device.

Security

Why do I need a second layer of security on my account?

With increasing security attacks across higher education institutions, passwords alone are not a sufficient way to protect resources.

LEA 2-Step decreases the risk of compromise because an attacker would need more than just your password to access your account.

Why have I received a notification from Duo but haven’t tried to log in anywhere?

I tried to register a device but already see one I do not recognize. What do I do?

Please contact IT ServiceDesk to escalate a support request to IT Security.  
The IT ServiceDesk can be contacted on 409-880-2222 and emailed at service@lamar.edu.  

My account is locked out. What should I do?

The most common reason why your account is locked is that you have entered an incorrect password multiple times.  You may reset your password by visiting Password Reset or contact the Service Desk at (409) 880-2222 or servicedesk@lamar.edu. If you email, be sure to include a screenshot of the error message. 

Location/Travel

I’m in a location where I have poor cell coverage. How can I use LEA 2-Step?

In cases where cell coverage is not available, use the “Duo Mobile” app to generate a passcode.  To generate a passcode, open your “Duo Mobile” app click on the down arrow next to “Lamar University” and the passcode will be displayed. Use the passcode as your second step.  

Note: The passcode generated changes periodically and will be different for each login.

How can I continue to use LEA 2-Step authentication when traveling abroad?

Be aware of your cell service carrier’s international rates. If you are planning to use your device normally while traveling, then using the device as the second step will not change.  If you are traveling abroad and will not have cell phone service use the passcode from the “Duo Mobile” app. 

To generate a passcode, open your “Duo Mobile” app click on the down arrow next to “Lamar University” and the passcode will be displayed. Use the passcode as your second step.  

Note: The passcode generated changes periodically and will be different for each login.

Passcodes

What is the difference between a "bypasscode" and a "passcode"?

Bypass codes are codes given to you when you call the ServiceDesk.  
Passcodes are generated by you, either using the “Duo Mobile” app or sent to you via text message. 

I have an account but am not able to get passcode. What do I do?

If you have activated your LEA account with DUO and do not have access to the device registered for the second step (Cellphone, hardware token, etc.), you will need to call the ServiceDesk at 409-880-2222 to obtain a bypass code. 

Why is Push is not working?

If Push does not work, you can use your passcode or bypass code as your second step.  

For example to connect to the campus network via FortiClient: 

  • Enter LEA username in the Username.
  • Enter LEA password followed by a "," (comma), and then the passcode E.g. "MySecure1@Password,913171".
  • Click on "Connect".

Mobile Device or Number Change

New phone - Same number

  • Download the "Duo Mobile" app on your new phone
  • On a computer, visit "https://www.lamar.edu/lea2step".
  • Click on "Get Started with LEA 2-Step or Manage your registered devices".
  • Log in with your LEA username and password. 
  • Click “Enter a passcode”. 
  • Click “Text me new codes”. 
  • Enter one of the 7-digit passcodes offered from the text.
  • Enter and click “Log In”.

Under "My Settings and Devices"

  • Click on "Device Options", next to listed device.
  • Click on "Reactivate Duo Mobile".
  • Follow the activation wizard.

New phone - New number (Old phone no longer accessible)

  • If you do not have a second device registered, call the Service desk for a bypass code.

New phone - New number (Old phone still accessible)

  • Download the "Duo Mobile" app on your new phone.
  • On a computer, visit "https://www.lamar.edu/lea2step".
  • Click on "Get Started with LEA 2-Step or Manage your registered devices".
  • Log in with your LEA username and password. 
  • Click “Enter a passcode”.
  • Open "Duo Mobile" app on the OLD phone and click on the down arrow next to "Lamar University".
  • Enter the displayed 6-digit number in the computer and click "Log In".

Under "My Settings and Devices"

  • Click on "Device Options", next to listed device.
  • Click on "Trash can" icon followed by "Remove" to delete the old phone.
  • Click on "Add Another Device".
  • Follow the activation wizard.

Same phone - New number

  • On a computer, visit "https://www.lamar.edu/lea2step".
  • Click on "Get Started with LEA 2-Step or Manage your registered devices".
  • Log in with your LEA username and password. 
  • Open "Duo Mobile" app on the phone and click on the down arrow next to "Lamar University".
  • Enter the displayed 6-digit number in the computer and click "Log In".

Under "My Settings and Devices"

  • Click on "Device Options", next to listed device.
  • Click on "Trash can" icon followed by "Remove" to delete the old number.
  • Click on "Add Another Device".
  • Follow the activation wizard.