Using Two Factor Authentication

After initial registration you can add additional devices from the ‘Two Factor Authentication screen on the employee ‘Profile‘ tab.

After clicking the button to manage devices, Duo will send an authentication request to your default two factor authentication device. When you respond to this request, Duo will display the device management portal:

Click the ‘Add a device’ link and follow the prompts to add your new phone to Duo.

After you save your new phone’s information, Duo will send a confirmation request to your new device.

It is recommended that you add at least one backup device to Duo to use when your primary device is unavailable.

Mobile Phone

It is recommended that users register their mobile phone with Duo. Using a mobile phone is the most convenient method of two-factor authentication because it is often readily available, especially when working away from the office.

There are three ways to use a mobile phone with Duo:

• Duo Push
  • iPhone and Android phones’ app store
  • The app may ask for access permission to the phone’s camera as it needs to scan a bar code on the computer’s monitor to activate the device.
  • During the login process to SSO, the app will ‘push’ a notification to the phone for the user to acknowledge.
    • There may be network connectivity issues that won’t allow the device to receive the notification so an alternate two-factor method should be available, such as a passcode or landline.
• Passcode
  • Passcodes are numbers entered in to SSO on the Duo authentication page. A passcode can be used as a two-factor authentication method when cellular service is unavailable.
  • A list of 10 passcodes can be texted to a mobile phone during the SSO login process.
  • A passcode can be generated on-demand from the Duo Mobile app by pressing the ‘key’ icon from the appropriate Duo account.
  • A passcode can only be used once.
  • Learn about using the Passcode feature.
• Phone Call – domestic only

Tablet

Using a tablet is similar to a mobile phone.  It requires the Duo Push mobile app to be downloaded and installed on the device.

Landline

It is a practical idea to register a landline number as a backup two factor authentication device in case there are technical issues with your mobile device.

When enrolling devices, be sure to click the ‘Landline’ option when adding a new phone number.

Duo Push is a two-factor authentication method for mobile devices that have the Duo Mobile app installed. The app ‘pushes’ an authentication request to the device for the user to approve. It is similar to how social media and news apps push notifications to a mobile device.  This feature requires network connectivity to work successfully.

When enrolling a new mobile phone, it is best to install the Duo Mobile application on the device first so it is ready to use.

First, install the Duo Mobile application from the Apple or Google Play app store.

Then open the app on the device, tap the ‘add account’ or “+” button to prepare to scan the QR code on the computer’s monitor.

When you add your new mobile device in the Duo portal, it will display a QR code for registration. Scan this barcode with your mobile device and save the new application on your phone.

NOTE: If the scan is not successful, it is possible to have have an activation code emailed by clicking the ‘Get an activation link instead’ link underneath the QR code.  To receive the link, enter an email address you have ready access to. The email must be opened and acknowledged on the device trying to be activated.

Troubleshooting the Duo Mobile app