FIU uses Two-Factor Authentication (2FA) for our Virtual Private Network (VPN). Learn more about Two-Factor. 

VPN is used at FIU to establish a secure connection to our domain, which is useful if you are not on campus and need access to University resources. A VPN program (like Cisco AnyConnect Secure Mobility Client) is required to use VPN. Learn more about FIU's VPN.

To log in to FIU's VPN with Two-Factor:

1. Enroll in Two-Factor Authentication (View our step-by-step enrollment instructions). Skip this step if you are already a 2FA user.

2.  Open the VPN program (Cisco AnyConnect Secure Mobility Client)

To open:

• On Windows 10: Click on the Start Menu> All Apps> Cisco > “Cisco AnyConnect Secure Mobility Client”
• On Mac: Go to Applications Folder> Search for “Cisco AnyConnect Secure Mobility Client” > Open program

3. The Cisco AnyConnect Secure Mobility Client will prompt you to enter a server address.

• Type vpn.fiu.edu
• Click Connect

4. You will log in on the next window. You will need three pieces of information. 

• Username: Your FIU username (your FIU email address without @fiu.edu).
  
• Password:  Your FIU password.
• Second Password: Your second password will be the type of authentication method (either a push notification, entering a code, or answering a phone call) you will use when connecting to FIU.
  Note: If you are using a YubiKey, make sure have clicked in the Second Password field and use your key. Learn more about YubiKey.
  
  The keywords are push, sms, a one-time numeric code and phone, and are further explained in the following table: 
  
  

  Keyword	Method	Action
  Push	DUO App	Accept the push notification sent through the DUO Mobile App on your smartphone.
  SMS	Text Message	A text message with a numerical code will be sent to your phone. The program will then prompt you again - this time, enter the code received into the Second Password field.
  One-Time Numeric Code	Duo App Code Generator	This method is available at all times - no phone signal or WiFi necessary. Simply open your DUO app and click on the key icon. This will generate a six-digit numeric code. Enter the code in the "Second Password" field.
  Phone	Phone Call	You will receive a phone call. Dial any number to log in.

  Note: When entering the second password, each character will appear as dots. Please make certain that you are entering the correct characters. 

Advantages and Disadvantages of the different authentication methods:

If you do not have access to your phone: 

• Our Manage Your Account page gives you the option to generate 9-character codes to use to access your VPN account. Once you have logged in, the option will be available at the bottom of the page.
• Once you use this code, you will not be able to use it again.
• The code will only work for VPN and will be valid for 30 minutes.

Locked out from Two Factor Authentication?

• Send a text from your two factor cell phone number from either WhatsApp or SMS to (866) 305-0092 with the word: unlock

Other important information to keep in mind:

• Users should white-list the first 6 numbers from the phone number which sends codes for DUO
  
  • Phone number – 386-267-XXXX
  • Last four numbers may change and come in differently, but you will always receive a set of codes from a phone number beginning with numbers (386) 267

Helpful Links

• Learn more about Two-Factor Authentication
• Getting Started with VPN
• Learn more about Cisco AnyConnect
• Download Cisco AnyConnect
• Learn more about the VPN Posture Module
• Troubleshooting VPN Posture