FAQs

In a few instances, an employee's UIN or date of birth has been updated in Workday but is out of sync with their SSO account information. The employee's hiring manager or HR office should be able to help resolve this issue for the employee.

Starting with the release of Workday in December 2017, SSO has new rules for when an employee's email address can be updated. If an employee has a Workday record, his/her email… Read more: What are SSO’s rules for updating an employee’s email address?

Anytime a new mobile device is used with Duo, it must be enrolled in SSO. In particular, this is true when changing phones even though the phone number has not changed.… Read more: Why doesn’t my new phone work with Duo?

The Duo Mobile app requires a smart phone or tablet and access to a data network.  After the app is installed on a device, it must be activated and associated SSO.… Read more: Why isn’t my Duo Mobile app working?

Yes. Once a smart phone is registered with the Duo app and SSO, it can be used to receive push notifications, to receive a phone call, or with a Passcode. Note… Read more: Can I use my mobile phone as regular phone and with the Duo Push app?

There are several ways to use the Duo two-factor authentication and a smartphone is only one option. Some employees use their office phone because it is convenient to use and they… Read more: I am required to use two-factor authentication but I don’t have a smartphone, what should I do?

Duo Mobile The Duo Mobile app requires a smart phone or tablet and access to a data network.  Limited data network availability may prevent the mobile app from pushing the notifications… Read more: Why isn’t my landline, mobile phone, Duo Mobile app working?

The 'Trust Browser' feature works by the browser setting a cookie on the computer.  If the browser can't find the cookie or the cookie has expired, it will be necessary to… Read more: Why do I still have to use two-factor even though I have checked the ‘Trust Browser’ box?

Starting August 1st of 2021,all active SSO users, retirees, and surviving dependents will be required to sign in to SSO using Duo two factor authentication. This includes: Active employees Working retirees… Read more: Is Two-Factor Authentication required in SSO?

What is a passcode? Duo two factor authentication passcodes are 7-digit numbers that are unique to an individual and used as the second factor during the SSO 2FA process. Passcodes are… Read more: Where do I get my passcode?

Because of the potential for the exposure of personal data and saved passwords, losing your smart phone is a serious problem that extends beyond Single Sign On.  It is recommended that… Read more: How can I change my Two-Factor device or log in to SSO after losing my phone?

Not necessarily.  While it is strongly recommended that all SSO users use two factor authentication every time they log in to SSO, it is very easy to limit two factor logins.… Read more: Do I have to use two-factor authentication every time I log in?

In the same way that SSO administrators can perform password resets and email address changes, they can also handle certain Two-Factor security activities on behalf of an employee. For instance, if… Read more: As an administrator, how do I help an employee who has lost or can’t access his/her Two-Factor device?

Two-factor authentication (2FA) is the process of combining two separate forms of identification to uniquely identify an individual. It is often used as a second layer of security for protecting login… Read more: What is Two-Factor Authentication?

Yes.  Once the initial implementation is complete, the plan is to allow other web based computer applications to use SSO as their authentication system.  We expect the list to grow over time.

Contact SSO Administration  for more information about adding your web-based application to SSO.

You may need to be given authorization to access that application.   This usually requires contacting the central HR or payroll office.

The Single Sign On (SSO) application is designed with minimal expectations from a user’s browser. However, your browser should support and accept cookies. Please review the Privacy Statement regarding cookies. Applications… Read more: What is the minimum browser requirement to use Single Sign On?

When originally implemented, the TAMU CAS system was designed only to support the College Station campus based employees and students.  It is used to authenticate to generally available campus IT services… Read more: Why did you create the Single Sign On System when Texas A&M already has the CAS (Central Authentication System)?

Your SSO administrator is usually the administrative support person in your department that handles HR, payroll, and related issues. If you are able to logon, you will see your SSO administrators… Read more: The web pages refer to "your administrator" – how do I find out who my administrator is?

Your departmental or Agency administrator should be able to provide you with your UIN.  A list of HR contact numbers is provided here.

If you have entered your credentials into the SSO login page without receiving an error message and you still can't log in to see the menu then there may be a… Read more: I am using Internet Explorer and after I enter my UIN and Password correctly, I still can’t log in. Could it be my browser?

The reason is that we do not store a plain text copy of passwords.  We use a one-way encryption process when storing passwords on our database.  When you logon, we encrypt what you type and compare it to what is on the database.  In short, we simply do not know what your password is.

If your SSO password is between 8 and 15 characters, it will expire after 1 year. If it is greater than 15 characters, it expires after 4 years. When your password… Read more: What are the SSO password requirements?

The 'Recent Logon Activity' list on the 'Home tab' lists the five most recent logon actions for your SSO account. Each action is color-coded as a visual cue that there may… Read more: What should I do if an action on my ‘Recent Logon Activity’ is highlighted yellow or red?

Two things you should look at when trying to determine the legitimacy of a logon attempt are the timestamp and the ISP name. Is this a 'normal' time that you log… Read more: My Security Log shows I logged in from a different city, should I report it?

The 'Log' tab and the 'Recent Logon Activity' section of the 'Home' tab each have a 'Report Problem' button at the bottom of the list of logon actions. This button is… Read more: How do I report a questionable logon activity?