Connect to IU's SSL VPN with Ivanti Secure Access (formerly Pulse Secure) from an Android mobile device

On this page:

Overview

To connect to Indiana University's SSL VPN on an Android mobile device, use the Ivanti Secure Access (formerly Pulse Secure) app.

Note:
The Pulse Secure VPN client was rebranded to Ivanti Secure Access on July 22, 2022. You may be prompted to upgrade to the new client, but either will work for connecting to the IU VPN, and your existing settings should carry over.
Important:
  • Use the IU VPN only under one of these conditions:
    • If you are trying to access a service you can't get to another way.
    • If your local UITS support person has told you that you need to use it.

    Generally, you won't need to use the VPN if you are a student. For example, you don't need a VPN connection to:

    • Use learning tools, such as Canvas, Zoom, or Kaltura.
    • Read your IU email over the web.
    • Work with your files in Microsoft OneDrive at IU or Google at IU My Drive.
  • If you have difficulty with the VPN: Try using IUanyWare (doesn't require a VPN connection).

    For example, you can use IUanyWare's Remote Desktop Connection app to remote into a device on campus. Additionally, IUanyWare's Chrome browser allows you to access sites as if you were on campus.

    In IUanyWare, search the available apps to find what may be helpful.

  • On the IU network: You cannot connect to the VPN, as it is for off-campus use only.

    If you receive a 1329 error when attempting to connect to the VPN, try connecting using a non-eduroam or non-IU Secure connection.

Notes:
  • To ensure accountability of network communication, the University Information Policy Office prohibits group accounts from connecting to IU's SSL VPN. To make a VPN connection, you must log in using your personal IU username and passphrase.
  • For general VPN usage, you can connect one device at a time. If you connect a second device while you already have a connection running to another device, you'll see a prompt asking whether you want to maintain the existing connection and cancel the new connection request, or break the existing connection and establish a new connection. Groups VPN users can connect two devices concurrently.

Install the app

  1. Open the Google Play store.
  2. In the search bar, enter ivanti secure access, and then search. Look for the Ivanti Secure Access logo:

    icon with a hand holding a key

  3. Select it, and install the app. Continue to the next section to set up the connection to IU's SSL VPN.
Note:
Ivanti Secure Access (formerly Pulse Secure) does not support USB security keys for authentication using Two-Step Login (Duo). For alternative device options, see Two-Step Login (Duo) device recommendations.

Configure the connection

  1. After the app installs, open it and, if prompted, accept the End User License Agreement.
  2. If you see a prompt to enter a "Corporate email or URL", enter https://vpn.iu.edu, and tap Submit. Then skip step 3, and fill in the other fields as described in step 4. If you don't see this prompt, skip to step 3.
  3. At the bottom of the screen, tap Add a new connection to access the "Add Connection" screen.
  4. On the "Add Connection" screen, configure the connection as follows:
    • Type: Leave as default.
    • Connection Name: Enter a name (for example, IU SSL VPN) to distinguish this connection from other VPN connections you may add (for example, for the Groups or HSN VPN; see the note below).
    • URL: Enter https://vpn.iu.edu.
    • Username: Enter your IU username.
    • Authentication Type: Make sure Password is selected.
    • Realm: Leave this field blank.
    • Role: Leave this field blank.
  5. Tap Add, and then exit/close the Ivanti Secure Access app.
Note:

If you use the IU Groups VPN or Health Sciences Network (HSN) VPN, add an additional connection using the appropriate URL:

  • Groups VPN: https://vpn.iu.edu/groups
  • HSN VPN: https://vpn.iu.edu/hsn

For more about these VPNs, see:

Connect and disconnect

  1. Open Ivanti Secure Access, and then tap Connect underneath the pre-configured IU VPN connection (see the previous section for configuration instructions).

    The first time you do this, you may see a dialog box that prompts you to check a box labeled I trust this application. Check the box, and then tap OK.

  2. The first time, you may see a security warning asking you about a certificate. Accept the certificate.
  3. You should see the Indiana University SSL VPN Service web page; enter your IU username (in most cases, this will already be filled in by the app) and passphrase.

When you're prompted for a secondary password, you need to enter your Two-Step Login (Duo) option. For example, you would enter push to push a login request to your mobile device.

In the "Secondary Password" field, enter one of the following and complete any prompts to connect:

  • A passcode (for example, 123456): Generated by Duo Mobile, an SMS text, or a single-button hardware token
  • push: Sends a push login request to the Duo Mobile app on your primary smartphone or tablet
  • phone: Calls your primary phone number (whether mobile phone or landline)
  • sms: Sends a new SMS passcode to your primary device; once you receive the passcode via SMS, enter it into the "Secondary Password" field.
    Important:
    • The sms and phone options are not available unless you have the exemption form completed and approved.
    • Entering sms will cause the initial login to fail with a "Credentials were invalid. Please try again." error message. However, you also will receive a text message with a passcode to enter in the "Secondary Password" field.
    Note:
    If you have more than one device of a certain type registered (such as a second smartphone or tablet), you can add a number to the end of your secondary password to direct login requests to a particular device (for example, push2 will send a login request to your second phone; phone3 will call your third phone).

In some versions of Android, you will see the I trust this application checkbox here rather than when you first tap Connect. Check the box, and then tap OK.

When the VPN connection is established, a key icon will appear in the notifications bar at the top of your screen. Most of the time it appears next to your clock, but it can sometimes be on the other side.

You can now exit the Ivanti Secure Access app and access IU network resources that require a VPN connection. To disconnect from the VPN, open the app, and then tap Disconnect.

This is document bcin in the Knowledge Base.
Last modified on 2024-04-17 16:48:58.