Duo Multi-Factor Authentication
What is Two-Factor Authentication?
Two-factor authentication adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.
How It Works
Once you've enrolled in Duo you're ready to go: You'll login as usual with your username and password, and then use your device to verify that it's you.
You can use your mobile phone, landline, tablet, or USB security device. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, a landline and an iPad, two different mobile devices, etc. You can receive your verification code via SMS, voice call, one-time passcode, the Duo Mobile smartphone app, and so on.
Using Duo MFAStep 1: Download and Install Duo Mobile
- Duo Mobile works on many devices and operating systems - including smartwatches.
- Download Duo Mobile for iOS or Android from their respective app stores.
Step 2: Enroll in Duo Multi-Factor Authentication
- To begin the enrollment process, navigate to Duo MFA Pre-Enrollment.
- Login with your OUNetID and password. Choose Start setup to continue.
- Please note: the following instructions use an Android smartphone as an example. Selecting other devices should offer similar prompts.
- Choose the type of device to add and continue. Mobile phone is recommended, but other device types are supported and may be necessary for certain situations.
- Enter the phone number in the format shown and select Continue.
- You will be asked to choose a type of phone.
- Please note: if you do not wish to install Duo Mobile, select Other (and cell phones).
- You will be instructed to Install Duo Mobile for whichever type of phone you selected in the previous prompt. Once it is installed, select I have Duo Mobile installed.
- Activate Duo Mobile for your phone. There are two ways to do this:
- Scan the barcode from within the Duo Mobile app by tapping the "+" button.
- Have an activation link emailed. Please note: the following instructions use this method as an example.
- Enter an email address that you can access on the device being enrolled.
- This does not have to be your OU email.
- Find the email and click the link.
- Open the link with Duo Mobile if you are asked to make a choice.
- Once you have been enrolled, you will see an "Enrollment Successful!" message.
- Click Dismiss in order to see all of your enrolled devices.
For a quick video of the above steps, please see the attachment at the bottom of this article.
- From My Settings & Devices, you can:
- Add additional devices and select a default device
- Re-name or re-activate devices under Device Options
- Set preferences on the authentication method when you log in (e.g. receive a phone call or push, or be asked to choose a method)
- My Settings & Devices can be accessed by going to ou.edu/duo
Step 3: Verify your Enrollment
- Verify your enrollment by going to ou.edu/duo, signing in with your OUNetID and password, and then choosing an authentication method to approve the login request. If successful, you should be at the My Settings & Devices page.
- For more details about using Duo to authenticate login requests once your device has been enrolled, visit this article.
Support for Duo MFA
- A comprehensive guide to using Duo can be found at Duo’s website: Duo Guide to Two-Factor Authentication
- Support is also available by contacting the Service Desk at 325-HELP or needhelp.ou.edu.
Recommended Practices for Using Duo MFA
- When possible, use the Duo Push authentication method. Set the Push as the default option in the Duo settings.
- Adding a second device is highly recommended in the event you are without your primary device.
- Some smart devices can accept the notification from the lock screen by using force touch.
- Desktop clients typically require re-authentication less frequently than web applications. When using the web application, you will have the option to choose “Remember me for 8 hours.” After the 8 hours, you will be required to use Duo again when accessing the applications on the web.
- If Duo keeps prompting for login after authenticating. Try the following:
- Close the prompt for authentication.
- Close the application and open it again.
- If you change your cell phone, but keep the number, use the 'Call Me' or 'Enter a Passcode' options to reactivate your phone.
- If you change your cell phone, and change the number, use the second device you registered to authenticate, login and add the new device.