Duo Multi-Factor Authentication
What is Two-Factor Authentication? Duo Guide to Two-Factor Authentication
Two-factor authentication adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.
How It Works
Once you've enrolled in Duo you're ready to go: You'll login as usual with your username and password, and then use your device to verify that it's you.
You can use your mobile phone, landline or tablet. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, a landline and an iPad, two different mobile devices, etc. You can receive your verification code via SMS, voice call, one-time passcode, the Duo Mobile smartphone app, and so on.
Using Duo MFAStep 1: Download and Install Duo Mobile
Duo Mobile works on many devices - including smartwatches. Duo Mobile works with Apple iOS, Google Android, Palm, Windows Phone 7, Windows Mobile 8.1 and 10, and J2ME/Symbian. Download Duo Mobile for iPhone or Duo Mobile for Android - they both support Duo Push, passcodes and third-party TOTP (Time-based One-Time Password) accounts.
If you will not be using a smart device, skip to Step 2.
Duo Mobile is available from the App Store for iOS devices or from Google Play for Android devices.
Duo Mobile for iOS Devices
Duo Mobile for Android Devices
Duo Mobile for Windows Phone or Mobile Devices
Step 2: Enroll in Duo Multi-Factor Authentication
To begin the enrollment process, navigate to Duo MFA Pre-Enrollment.
Login with your OUNet ID and Password.
Choose Start setup to continue.
Choose the type of device to add and continue.
Note: Mobile phone is recommended as the primary device, but you may also choose to setup a Tablet, Landline or U2F token. (When setting up Duo, you should add two devices - for example, a cell phone and land line. This will allow you to access the Duo settings during future logins to add a new device.)
Enter the phone number in the format shown as example and continue.
Note: The instructions below document adding a Mobile phone. If adding another device, follow the prompts provided.
You may be prompted to confirm the phone number you entered is correct before you can click Continue.
If you have received this prompt, you may not receive the following prompts:
You will now be prompted to Verify Ownership of the Phone number by choosing either Call me or Text me. Follow the prompts to complete verification of Phone number and continue.
Phone number added will display. You may choose to Add another device (recommended) or Continue to Login.
If you have no yet installed Duo, you may be prompted to do so.
Enrollment is now successful!
If you do not enroll, you will need to enroll the first time logging in to one of the protected services – either on the Web or desktop clients. After logging in with your username and password, you will be prompted to setup your devices.
Step 3: Using Duo, after logging in, use your Device to Verify
Once your account is configured, use your device to verify your identity.
Choose one of the 3 options to receive a verification code:
- Send Me a Push – Sends a push notification to your device. You will receive a notification of a Login request. Open the Duo App and select “Request Waiting. Tap to Respond…” Tap Approve to verify your identity.
- Call Me – Calls the phone number you entered when you set up your account. Answer the call and follow the voice prompt to verify your account.
- Enter a Passcode – Choose either of these options for retrieving passcode to enter.
- Text me new codes – Follow the prompt to enter the requested code. Save the text for the next time you need to enter a code.
- Press the key symbol - Enter the code provided.
Step 4: Manage your Settings and Devices
Choose the My Settings & Devices option to update your settings.
Authenticate to verify your identity.
Choose Device Options to edit a registered device. Add another device to add a new device. Default Device or When I log in drop down menus for more options.
Device Options allows you to Reactivate Duo Mobile, Change Device Name or Delete Device.
Support for Duo MFA
- A comprehensive guide to using Duo can be found at Duo’s website: Duo Guide to Two-Factor Authentication
- Support is also available by contacting the Service Desk at 325-HELP or needhelp.ou.edu.
Recommended Practices for Using Duo MFA
- When possible, use the Duo Push authentication method. Set the Push as the default option in the Duo settings.
- Adding a second device is highly recommended in the event you are without your primary device.
- Some smart devices can accept the notification from the lock screen by using force touch.
- Desktop clients typically require re-authentication less frequently than web applications. When using the web application, you will have the option to choose “Remember me for 8 hours.” After the 8 hours, you will be required to use Duo again when accessing the applications on the web.
- If Duo keeps prompting for login after authenticating. Try the following:
- Close the prompt for authentication.
- Close the application and open it again.
- If you change your cell phone, but keep the number, use the 'Call Me' or 'Enter a Passcode' options to reactivate your phone.
- If you change your cell phone, and change the number, use the second device you registered to authenticate, login and add the new device.