Accessibility statement

Making the Student Enquiry Screen more secure

Posted on 1 October 2020

Following the successful rollout of Duo two-factor authentication on the VPN, Virtual Desktop and SSH services, we are now working to add this protection to the Student Enquiry Screen.

What is the Student Enquiry Screen?

The Student Enquiry Screen is a system used by staff to get current student information.

Academic staff automatically have access. Other staff need to request access.

Students do not have access.

Why we're doing this

At the moment, anyone with a valid username and password can login to many University services - even if they’ve got hold of that information maliciously (eg via a phishing attack). This type of attack has already happened, so this simple additional step will have a big impact on everyone’s digital safety.

With this in mind, Duo two-factor authentication will be required to log in to the Student Enquiry Screen from Monday 19 October.

What will happen

From Monday 19 October to log in to the Student Enquiry Screen you will first need to enter your University username and password as normal. You will then be prompted for your second factor authentication method by Duo (eg responding to a push notification from the Duo app, entering a passcode you receive by SMS text message).

If you have used Duo to log in to the VPN, then this process will look and work much the same.

What you need to do

If you have already registered for Duo (in order to log in to the VPN, Virtual Desktop or SSH services) then you’re all set - there is no need to register again.

If you have not registered for Duo, please do so now - even if you are not a user of the Student Enquiry Screen. We will be rolling out this protection to other University services in the coming months, and we recommend that all staff register for Duo in preparation for these changes.

It’s quick and easy to register - log in to the site using your University username and password, then follow the instructions:

More information on registering and using Duo can be found on our website:

If you have any questions concerning two-factor authentication please contact IT Support - email itsupport@york.ac.uk or call (01904 32) 3838.