All employees and retirees of the A&M System are required to use two factor authentication with SSO. Other SSO users affiliated with the A&M System can set up two factor authentication on the Profile tab, on the ‘Two Factor Authentication’ screen.
Former employees and affiliates, whose relationship with the A&M has ended, will have a two-factor status of “Optional” set by an overnight process. While it is NOT recommended, such individuals can opt out of two factor authentication.
Initial Registration
New users will be prompted to set up Duo after logging in to SSO with a TAMUS UIN credential. Users can enroll more than one mobile device and/or landline with Duo.
After two-factor authentication has been activated for the employee, the next SSO log in will prompt the user with the Duo set-up wizard.
To enroll in Duo, first install the Duo Mobile application from the Apple or Google Play app store.
Then, log in to SSO with your TAMUS UIN. Follow the Duo Universal Prompt portal’s prompts to register a mobile phone for two factor authentication and choose Duo Mobile from the screen shown below:
Next, enter your mobile phone number:
after confirming your mobile number, use your mobile phone to add a new application in the Duo Mobile app and scan the QR code displayed in the Duo web portal:
Save the new application on your mobile device.
Click Continue in the Duo web portal, then choose ‘Skip for now’ to complete the process.
To access SSO, click ‘Log in with Duo’:
Duo will send a push message to your mobile phone. Confirm the push message and Duo will send you to SSO.
Next, consider adding an additional device as a backup two factor authentication method.
Managing Devices
After initial registration you can add additional devices from the ‘Two Factor Authentication screen on the employee ‘Profile‘ tab.
After clicking the button to manage devices, Duo will send an authentication request to your default two factor authentication device. When you respond to this request, Duo will display the device management portal:
Click the ‘Add a device’ link and follow the prompts to add your new phone to Duo.
After you save your new phone’s information, Duo will send a confirmation request to your new device.
It is recommended that you add at least one backup device to Duo to use when your primary device is unavailable.
Device Types
Mobile Phone
It is recommended that users register their mobile phone with Duo. Using a mobile phone is the most convenient method of two-factor authentication because it is often readily available, especially when working away from the office.
There are three ways to use a mobile phone with Duo:
- Duo Push
- iPhone and Android phones’ app store
- The app may ask for access permission to the phone’s camera as it needs to scan a bar code on the computer’s monitor to activate the device.
- During the login process to SSO, the app will ‘push’ a notification to the phone for the user to acknowledge.
- There may be network connectivity issues that won’t allow the device to receive the notification so an alternate two-factor method should be available, such as a passcode or landline.
- Passcode
- Passcodes are numbers entered in to SSO on the Duo authentication page. A passcode can be used as a two-factor authentication method when cellular service is unavailable.
- A list of 10 passcodes can be texted to a mobile phone during the SSO login process.
- A passcode can be generated on-demand from the Duo Mobile app by pressing the ‘key’ icon from the appropriate Duo account.
- A passcode can only be used once.
- Learn about using the Passcode feature.
- Phone Call – domestic only
Tablet
Using a tablet is similar to a mobile phone. It requires the Duo Push mobile app to be downloaded and installed on the device.
Landline
It is a practical idea to register a landline number as a backup two factor authentication device in case there are technical issues with your mobile device.
When enrolling devices, be sure to click the ‘Landline’ option when adding a new phone number.
Duo Push
Duo Push is a two-factor authentication method for mobile devices that have the Duo Mobile app installed. The app ‘pushes’ an authentication request to the device for the user to approve. It is similar to how social media and news apps push notifications to a mobile device. This feature requires network connectivity to work successfully.
When enrolling a new mobile phone, it is best to install the Duo Mobile application on the device first so it is ready to use.
First, install the Duo Mobile application from the Apple or Google Play app store.
Then open the app on the device, tap the ‘add account’ or “+” button to prepare to scan the QR code on the computer’s monitor.
When you add your new mobile device in the Duo portal, it will display a QR code for registration. Scan this barcode with your mobile device and save the new application on your phone.
NOTE: If the scan is not successful, it is possible to have have an activation code emailed by clicking the ‘Get an activation link instead’ link underneath the QR code. To receive the link, enter an email address you have ready access to. The email must be opened and acknowledged on the device trying to be activated.