Got questions? Find answers!

Web browsers have been implementing a newer technology called “Passkeys”.

Passkeys are potentially safer and an easier alternative to passwords.

Passkeys allow sign-ins to applications and websites with a biometric sensor (such as fingerprint scans, touch-id, face-id), PIN, or patterns.

Not all browsers and operating systems currently support Passkeys.

With LEA-2-Step, the following combinations of browsers and operating systems may be used with Passkeys.

• Windows 11 and Chrome 108 or later.
• macOS 13 and Safari or Chrome 108.
• iOS 16 or iPadOS 16.
• Android 10 and later.

If your computer meets this requirement and does not have a Passkey configured, you may see the “No Passkey available” message when attempting to log into an application.

To bypass this, select the "close" button.

Select "Other options" if prompted for "Use Touch ID".

For more information on Passkeys, visit the following link.

https://duo.com/blog/what-are-passkeys

All services that users log in with an LEA account (eg. jdoe@lamar.edu), will require LEA 2-Step.

The app is found in the App Store or Google Play Store.  If you have trouble finding the Duo Mobile app via search, it can be accessed through mobile app stores by visiting:

• iTunes for iOS/Apple Devices 
• Google Play for Android Devices

Android Phones, iPads, iPhones, Apple Watches, Cell Phones that can receive text messages, and Yubikey security keys.

Chrome, Firefox, Microsoft Edge, and Safari.

While it is strongly recommended that you enroll your mobile device (personal or Lamar University issued) and use the “Duo Mobile” app for Duo login, it is not required. 

Below are alternative devices. You are encouraged to enroll more than one device and/or device type:

• tablet, iPad, and Apple Watches - pushes are sent to "Duo Mobile" app.
• personal security key such as Yubikey - creates unique passcode which changes with each log-in.

LEA 2-Step decreases the risk of compromise because an attacker would need more than just your username/password to access your account.

If you still do not want to use LEA 2-Step, you will not be able to access Lamar Services such as email and LU Learn.

No, you cannot opt out of LEA 2-Step.

LEA 2-Step decreases the risk of compromise because an attacker would need more than just your username/password to access your account.

Using the app or a passcode on the app will not incur any charges from your carrier.

Text messages are sent only when you request them, and they will be billed by your carrier in the same way that any other text message or call would. Lamar will not reimburse you for these charges. If the charges, when using Duo, exceed a level that you are comfortable with, then consider switching to a security key such as a Yubikey, rather than a cell phone for the service.

You can set up LEA 2-Step on multiple mobile devices (cell phones, tablets, etc.).  It is recommended that you register at least two commonly used devices, such as a cell phone and tablet.

• On a computer, visit "https://www.lamar.edu/lea2step".
• Use the "Get Started with LEA 2-Step or Manage your registered devices", to register second device.

Security keys are currently not compatible with desktop-based applications like Office (Word, Powerpoint, Outlook and Teams).

You will need to use the PUSH (via DUO Mobile), Passcode, or Text message-based second step for these applications.

Your account is not registered with LEA 2-Step. Register one or more devices for LEA 2-step.

If you have deleted your “Duo Mobile” app or reset your mobile device, go to the app store and re-install the “Duo Mobile” app. If your device doesn't meet the minimum version that is supported by Apple or Android, you might not be able to download the app again from the app store.

If you do not see Lamar University as an option in your “Duo Mobile” app, you will need to re-activate the app following the steps from Mobile Device or Number Change “New phone - Same number”.

Most people log into the same services, from the same device, many times a day. Each log-in will require 2-factor authentication. To reduce the repeated requests, you can mark a log-in with the "remember me" feature, which will remember your device for 21 days. At the first successful log-in of the day, select "Remember me for 21 days". Subsequent log-ins on the same device and web browser will now only require an LEA username and password to access the service.

• Visit lamar.edu/lea2step.
• Click "Get Started with LEA 2-Step or Manage your devices".
• Log in with LEA username and password.
• Select "Passcode" or "Push".  

Under "My Settings and Devices".

• Default Device:- Select your preferred default device from the drop-down menu. 
• When I log in: - Select automatically send this device a duo push.
• Click on "Save".

If your device has a default language set to something other than US-English, you may receive an error message stating that CAS is unavailable. This is due to an incompatibility between Lamar's log-in system and DUO.

To rectify this, set US-English as the first language option. Additional languages can be added without interference.

Lamar is currently working to resolve this issue.

We have identified that certain extensions, with certain browsers, can interfere with the log-in process. In particular, the following extensions with the following browsers are known to cause issues:

• "Read&Write for Google Chrome” on Chrome (Mac, PC and Chromebook).

To rectify this, temporarily disable the extension during log-in and re-enable it after you have logged in.

If you have lost your phone, or any other mobile device enrolled in Duo, unfortunately, you will not be able to access applications requiring Multi-Factor Authentication, without the registered device.

Choose one of the following options:

• If you have a secondary device enrolled (e.g., a tablet or security key), log into the LEA 2-Step Device Management Portal at lamar.edu/lea2step, with the secondary device. Click My Settings and Devices. Next to your mobile device, click Device Options, and then click the trash can to delete that device. 
• If you do not have any other devices enrolled in Duo, contact the IT Service Desk at 409-880-2222 or servicedesk@lamar.edu for a bypass code to enroll a new device.

With increasing security attacks across higher education institutions, passwords alone are not a sufficient way to protect resources.

LEA 2-Step decreases the risk of compromise because an attacker would need more than just your password to access your account.

• Deny the request to authenticate.
• Report the incident as fraudulent.
• Change your password immediately by visiting "https://passwordreset.lamar.edu"

Please contact IT ServiceDesk to escalate a support request to IT Security.

  
The IT ServiceDesk can be contacted on 409-880-2222 and emailed at servicedesk@lamar.edu.

In cases where cell coverage is not available, use the “Duo Mobile” app to generate a passcode.  To generate a passcode, open your “Duo Mobile” app click on the down arrow next to “Lamar University” and the passcode will be displayed. Use the passcode as your second step.  

Note: The passcode generated changes periodically and will be different for each login.

Be aware of your cell service carrier’s international rates. If you are planning to use your device normally while traveling, then using the device as the second step will not change.  If you are traveling abroad and will not have cell phone service use the passcode from the “Duo Mobile” app. 

To generate a passcode, open your “Duo Mobile” app click on the down arrow next to “Lamar University” and the passcode will be displayed. Use the passcode as your second step.  

Note: The passcode generated changes periodically and will be different for each login.

Bypass codes are codes given to you when you call the ServiceDesk.

  
Passcodes are generated by you, either using the “Duo Mobile” app or sent to you via text message. 

If the Push does not work, you can use your passcode or bypass code as your second step.  

For example to connect to the campus network via FortiClient: 

• Enter LEA username in the Username.
• Enter LEA password followed by a "," (comma), and then the passcode E.g. "MySecure1@Password,913171".
• Click on "Connect".

• Download the "Duo Mobile" app on your new phone
• On a computer, visit "https://www.lamar.edu/lea2step".
• Click on "Get Started with LEA 2-Step or Manage your registered devices".
• Log in with your LEA username and password. 
• Click “Enter a passcode”. 
• Click “Text me new codes”. 
• Enter one of the 7-digit passcodes offered from the text.
• Enter and click “Log In”.

Under "My Settings and Devices"

• Click on "Device Options", next to listed device.
• Click on "Reactivate Duo Mobile".
• Follow the activation wizard.

• If you do not have a second device registered, call the Service desk for a bypass code.

• Download the "Duo Mobile" app on your new phone.
• On a computer, visit "https://www.lamar.edu/lea2step".
• Click on "Get Started with LEA 2-Step or Manage your registered devices".
• Log in with your LEA username and password. 
• Click “Enter a passcode”.
• Open "Duo Mobile" app on the OLD phone and click on the down arrow next to "Lamar University".
• Enter the displayed 6-digit number in the computer and click "Log In".

Under "My Settings and Devices"

• Click on "Device Options", next to listed device.
• Click on "Trash can" icon followed by "Remove" to delete the old phone.
• Click on "Add Another Device".
• Follow the activation wizard.

• On a computer, visit "https://www.lamar.edu/lea2step".
• Click on "Get Started with LEA 2-Step or Manage your registered devices".
• Log in with your LEA username and password. 
• Open "Duo Mobile" app on the phone and click on the down arrow next to "Lamar University".
• Enter the displayed 6-digit number in the computer and click "Log In".

Under "My Settings and Devices"

• Click on "Device Options", next to listed device.
• Click on "Trash can" icon followed by "Remove" to delete the old number.
• Click on "Add Another Device".
• Follow the activation wizard.