How to Log In to WRDS Using Two-Factor Authentication (2FA)

Learn how to register your smartphone and use Duo Mobile two-factor authentication

Getting Started

Two-Factor Authentication (2FA) at WRDS

To better protect your data–as well as our data–from unauthorized access, WRDS will require two-factor authentication. This requirement will be implemented in phases. You will know when you need to register a device for two-factor authentication if, when you log in to WRDS, a message appears alerting you that you need to enroll.

Logging in to WRDS using Duo Mobile is quick and easy to set up, and enhances WRDS security on your account. If you have any questions that are not covered in the following materials, please visit the documentation at Duo Guide.

Enabling Two-Factor Authentication Using a Smartphone

We recommend you use a smartphone for the verification process. To do so, you need to install the Duo Mobile app on your phone. This free app can be downloaded for iPhone, Android, or Windows phone through the device’s app store.

I. Begin By Verifying Your Email

Email Verification Duo

II. Register Your Smartphone to Your Duo Account

If you do not have a smartphone, skip to the section below entitled, "Registering for Two-Factor Authentication Without a Smartphone."

2FA Steps 1-2-3
2FA Steps 4-5-6-7
2FA Steps 8-9

III. Log in to WRDS Using Your Smartphone and Duo Mobile

2FA Steps 10-12

Remembered Devices

If you use the same computer, same browser, and same IP address to log in to WRDS, and you do not clear your cookies, the system will remember you for 30 days. After 30 days you will be prompted for reauthentication.

WRDS Class Accounts

WRDS Class Accounts will not require multi-factor authentication at this time. WRDS Class Accounts are special accounts set-up for student usage that is associated with a specific class. As of now, all students in the class will continue to share the same password.

Top of Section

Selecting Other Smartphone Options

How to Change Your Smartphone's Verification Method

2FA Other Options 1
2FA Other Options 2

Top of Section

Registering with Two-Factor Authentication Without a Smartphone

Registering Using an SMS passcode or Via a Phone Call to a Landline

If you do not have a smartphone, you can still register with Duo by selecting the "Phone number" option. You can either receive a text message with the SMS passcode, or you can recieve an automated phone call to a landline.

2FA Select the Phone Number Option

Top of Section

How to Connect with SSH Using Duo 2-Factor Authentication

SSH (Secure Shell) is used to connect to the WRDS Cloud. If you wish to connect to WRDS using SSH you will need to first install the Duo app on a device, verify your email, and register a device (such as a smartphone) through the WRDS website. If you have not yet registered for Duo two-factor authentication and you attempt to log in to wrds-cloud.wharton.upenn.edu via SSH, you will receive an “Access Denied” message.

Instructions

  1. First, follow these steps to register your device and set up Duo 2FA: How to Log In to WRDS Using Two-Factor Authentication.

    A mobile device is not required; it is also possible to register a landline. Any problems? Review the Troubleshooting section and FAQ.

  2. If you currently use SSH keys to connect, you will need to use the following new hostname to log in: wrds-cloud-sshkey.wharton.upenn.edu. If you currently use SSH with your username and password, you will continue to use the same hostname as you do now: wrds-cloud.wharton.upenn.edu.

  3. After entering your username and password, you will be prompted to choose a two-factor authentication method. You will be presented with the options that you selected when you registered your device. Follow the directions on the screen. (See sample prompt below).
Duo SSH Prompt

At the prompt, you can either:

  1. Enter a passcode if one has been sent to your device. You should now be successfully logged in to the WRDS Cloud.
  2. Enter 1 to receive a Duo Push alert to your device. An alert is sent to your device, asking if you are logging in to a UNIX application. Open the Duo Mobile app on your device and acknowledge the message. You should now be successfully logged in to the WRDS Cloud
  3. Enter 2 to have a passcode sent to your device. You will receive a text message with the SMS passcode. Enter the passcode. You should now be successfully logged in to the WRDS Cloud.

If you are having trouble receiving the Duo Push, check the settings on your device to ensure that the Duo Mobile app has notifications enabled. In addition, verify that you are connected to a reliable Wi-Fi or cellular connection.

Top of Section

Managing Your Devices

To manage enrollment of your duo devices, please log in from an unremembered device and select "Other Options" instead of continuing to log in. If you do not have an unremembered device, you may try using incognito mode on your browser. If you cannot do either of these, please contact WRDS support.

manage-devices
2FA Managing Other Devices (2)

Top of Section

Troubleshooting

Having trouble? Verify that you are connected to a reliable WiFi or cellular connection and try again.

What if I lose my phone?

Please contact WRDS Support at: https://wrds-www.wharton.upenn.edu/contact-support/

IMPORTANT: When opening your support ticket you must use the email associated with your WRDS account.

What should I do if I'm not receiving the verification on my phone?

Check your smartphone's settings to make sure that the Duo Mobile app has the ability to send notifications.

Verify that you are connected to a reliable WiFi or cellular connection, as a weak connection can delay a push or can cause you to not receive a push notification.

What if I need a bypass code?

Bypass codes will be used sparingly and only in extreme cases. If you need a bypass code, please contact WRDS support at https://wrds-www.wharton.upenn.edu/contact-support/

IMPORTANT: When opening your support ticket you must use the email associated with your WRDS account.

What if I have a WRDS Class Account?

WRDS Class Accounts will not require two-factor authentication at this time. WRDS Class Accounts are special accounts set up for student usage that is associated with a specific class. As of now, all students in the class will continue to share the same password.

What if I cannot use a personal cell phone at work?

You can use a landline telephone to both register for Duo and use it to log in to WRDS. See the instructions above on Registering with Two-Factor Authentication Without a Smartphone.

Can I use Okta (or another 2FA provider) for the two-step verification process?

No. You must download the Duo Mobile app and use that app to complete the verification process and log in to WRDS.

How Do I Add Another Device for Authentication?

In order to add another device you must still have access to a device registered with Duo. If you still have access to a device enrolled with Duo, you can add your new device, such as a smartphone, to your Duo account. See the instructions in the section above, entitled Managing Your Devices. If you no longer have a device registered with Duo, contact WRDS Support at: https://wrds-www.wharton.upenn.edu/contact-support/

Still Need Help?

Check the Frequently Asked Questions (FAQ) on Using Duo 2FA at WRDS.

Top of Section

Top