Login Guide for First-Time Users

To ensure the security of your digital information, SJSU uses Duo Multi-Factor Authentication (MFA). There are two required procedures and two optional procedures for your SJSU account activation and setup of Duo MFA:

Set Up Your SJSUOne Password for the First Time

  1. Go to the SJSUOne Password Set/Reset page
  2. Enter your nine-digit SJSU ID.
  3. Read and accept the CSU Responsible Use Policy [pdf]
  4. Click Continue.
  5. Choose one of the following methods to verify your identity:
    • Provide your birth date and the last four digits of your SSN
    • Send a reset link to your email address
  6. Click Continue.
  7. Enter your new password.
    Passwords should adhere to the following requirements:
      • Passwords must be between 15 - 64 characters
      • Capital letters, numbers, spaces, and special characters are optional
      • Do not use your name, SJSU ID, date of birth, any part of your SSN, SJSU-specific terms, or keywords associated with the university
      • Do not use common words

You will receive a prompt notifying you that your password has been successfully changed.

Set Up Duo Mobile MFA

The following procedure is for setting up the Duo Mobile multi-factor authentication app on a mobile device. For security, Duo MFA is required for accessing your SJSU digital content. If you do not have a smartphone or tablet, or you do not want to install Duo on your device, contact the IT Service Desk (408-924-1530) to request a hardware token (key fob).

  1. On your mobile device, download and install the Duo Mobile application from the App Store or Google Play.
    Duo Mobile icon in the Google or Apple App Store.
  2. On your mobile device, open your internet browser and go to one.sjsu.edu.
  3. Tap the menu in the upper right.
    One.sjsu.edu Mobile Menu Button with words "Tap This"
  4. Click Sign In.
  5. Enter your SJSU ID and password, then tap Sign In.
  6. When prompted to “Protect Your San José State University Account,” tap Start Setup.
  7. Select the type of device you’re adding, Mobile Phone or Tablet, then tap Continue.
  8. Complete one of the following:
    • If you selected Mobile Phone for your device:
      • Enter and confirm your phone number (including area code), then tap Continue.
      • Select the type of device (iOS or Android) and tap Continue.
    • If you selected Tablet for your device:
      • Tap Continue.
  9. Within one.SJSU, tap I have Duo Mobile.
  10. Tap Take me to Duo Mobile.
    Prompt from DUO Mobile to complete set up.
  11. Within the Duo app, tap Save.
    By default, the account name is set to “San Jose State University.”
    DUO Mobile Prompt to name the account being set up.
  12. Go back to your internet browser and tap Continue from the Duo screen.
  13. If the settings and devices are correct, tap Continue to Login.
  14. Choose one of the following:
    • Select Send Me a Push to send a quick approve-or-deny prompt to your device.
    • Select Enter a Passcode to use the six-digit passcode displayed in the Duo app.
  15. Complete login.
  16. When prompted by OKTA, complete the following:
    • Choose a security question from the drop-down menu, or create your own question, then provide an answer (Required).
    • Add a secondary email (Optional).
      NOTE: If assigning a secondary email, the secondary email should match the email you used when you applied to SJSU. If you need to update your secondary email, you must first complete all OKTA steps. For instructions on changing your secondary email, see Set My Preferred Email Address.
  17. Tap Create Account.

Set Up Recovery with Duo Restore

This procedure is optional but recommended to ensure that you maintain access to your SJSU account if you get a new device or need to reset your device to factory settings.

Enable Auto-Push for MFA

You can streamline your multi-factor authentication process when logging in by enabling auto-push to automatically prompt you to authenticate using your method of choice via the Duo Mobile app.

This procedure is optional.

To enable auto-push:

  1. Visit the Multi-Factor Authentication Profile page.
  2. Enter your SJSU ID and password and click Login.
  3. Before authenticating with MFA, select Settings > My Settings & Devices.
    Duo Mobile Screen with options to select My Settings & Devices.
  4. Complete multi-factor authentication as normal.
  5. Under Default Device, select your default device from the drop-down list.
  6. Under When I log in, select Automatically send this device a Duo Push.
    Duo Mobile Push Selection
  7. Click Save.

NOTE: To turn off auto-push for MFA, select Ask me to choose an authentication method.


Frequently Asked Questions


Login support is provided by the IT Service Desk. You may:
Because login and MFA are security services, the IT Service Desk must confirm your identity before providing assistance.