Canvas and Assessment Security

Access to Northwestern Canvas requires Duo multi-factor authentication. This critical security update adds an extra layer of identity verification and is an essential step to further protect individuals and the University.

At Northwestern, some instructors may require exams to be taken in person and without access to a phone. For an exam administered on Canvas in this fashion, Teaching & Learning Technologies recommends considering one of the options below. 

Please note: all of these options require a user to download and activate the DUO app on their mobile device (tablet, mobile phone) via Google Play or the iOS App Store. A phone call and text message authentication will not work in these scenarios. 

If you need assistance with one of these options or would like to speak with someone about them, please email canvas@northwestern.edu.

Option 1: Temporary Access to Phones

In this scenario, students would be allowed to bring their phones into the testing site with them for a specific timeframe at the beginning of the testing period for the sole purpose of accessing Canvas. Once they have successfully authenticated into Canvas, an administrator could either request that the phones be put away, collect the phones from students, or put in place a system for students to place their phones in a secure location for later retrieval (a box or cubby, for instance). 

Option 2: Passcodes 

At any time, the Duo app (iOS Links to an external site., Android Links to an external site.) can generate a single-use code to use on the Duo login screen when authenticating into a Northwestern system (like Canvas, Zoom, or Panopto). This option allows access to a Duo-protected service if access to a secondary device (cell phone) is not allowed. A user can generate a passcode in advance and then write it on a piece of paper for later use. The single-use passcode may only be used once and is good for an unlimited amount of time until it is used. 

 

To generate a single-use passcode in advance:
  • Open the Duo app on a mobile device. The app will open on the Accounts screen which will list any accounts you have connected to it.
  • In the section for Northwestern University, locate the "Passcode" section at the bottom of the box and tap the button to "Show" the six-digit code. 
  • To get a new passcode, click the "Refresh Passcode" link. Note: if you refresh the visible passcode, the previous passcode will no longer be valid even if unused. 
 Example of Duo passcode

When you have reached the Duo prompt in the authentication process: 

  • Click "Other options" on the bottom of the Duo screen
  • From the menu for other options to log in, select "Duo Mobile passcode"
  • Enter your six-digit passcode and click "Verify"
  • Once accepted, click the option to "Yes, trust browser"

Example of Duo MFA process

Using Respondus LockDown Browser with MFA

Students using Respondus LockDown Browser will encounter the same multi-factor authentication experience provided by Canvas. 

  1. Upon opening Lockdown Browser, the Microsoft sign-in screen will appear. Students should enter their primary Northwestern email address and click Next.
  2. The Northwestern Online Passport screen will appear. Students should enter their Northwestern email address or NetID and password and then click Sign-in.
  3. Students will see the "Check for a Duo Push" screen. At this point, they can either use the Duo mobile app on their phone or select "Other options" to access the "Enter your passcode" option (instructions for accessing a passcode prior to the exam are available here).
  4. After approving the Duo push or entering the passcode, the LockDown Browser will open.

PLEASE NOTE: Respondus does not utilize the "Remember Me" function of Duo so students will need to go through the MFA process each time they open LockDown Browser.