In order to decisively counteract the risk of cyber attacks and to intensify the protection of data and devices, the University of Cologne is introducing multi-factor authentication (MFA) for logins to IT services.
This involves one or more independent factors that must be used in addition to the user name and password when logging in with a staff, student or guest account. This increases protection against unauthorized access to services, software and data.

Multi-factor authentication (MFA) is implemented at the University of Cologne with Cisco Duo. Cisco Duo is a system that includes several authentication options as a so-called second factor.

The Cisco Duo authentication option we recommend is the “Duo Mobile” app, which is available for the Android, iOS, iPadOS and watchOS operating systems. You can use the app on your smartphones or tablets to confirm your identity to systems and services when logging in.

Using the app as a second factor offers you the advantage of being able to use Cisco Duo anywhere, as smartphones or tablets are carried almost everywhere. It is also very easy to use compared to the other authentication options. Another advantage is the access protection of your smartphones and tablets, which are usually protected by PIN, facial recognition or similar.

Sollten Sie kein Smartphone benutzen können oder wollen, besteht für Beschäftigte der Universität zu Köln die Möglichkeit, die Authentifizierung über ein Zusatzgerät, ein sogenanntes Token, durchzuführen. Diese Tokens können kostenfrei ausgeliehen werden. Weitere Informationen finden Sie hier.

Für technisch versierte Nutzer ist grundsätzlich auch die Nutzung von bereits vorhandenen FIDO2-fähigen Tokens  (wie bspw, Yubikey) möglich. Aufgrund der Vielfalt der Geräte können wir zu diesen kkeinen Support im Einzelfall anbieten. Entsprechende Informationen dazu finden Sie hier.

Before you can use Cisco Duo, you need to register. You can find all the information you need here:

Instructions: Initial registration in Cisco Duo

Currently, only our VPN service is secured by Cisco Duo. If you would like to use VPN, it is therefore essential that you also use Cisco Duo when logging in.

Please note: The mandatory use of Cisco Duo for the VPN service currently only affects certain groups of people who will be informed directly.

In the future, there will be other services that will use Cisco Duo.