Authentication Options for Duo MFA

There are several ways you can verify with Duo.

OIT recommends downloading Duo Mobile, which enables you to use the Duo Push Notification and Duo Mobile Passcode authentication methods. Learn how to set up Duo Mobile.

Additionally, we recommend setting up 2 or more authentication methods. This way, even if you lose access to one authentication method you will not be locked out of your account.

Authentication Methods

Duo Mobile

The following two options are available when you set up the Duo Mobile app on your mobile device.

Please note that the current version of Duo Mobile supports Android 10.0 and greater (including Android Go 10.0 and greater) and iOS 14.0 and greater (functionality is not guarenteed on preview/beta software provided by Apple).

Duo Push Notification

Install the Duo Mobile app on your smartphone or tablet to receive push notifications. Once this is installed, and you attempt to log into a Duo enabled service, you’ll receive a push notification on your smartphone or tablet. Open the notification, and you’ll see a green checkmark, and a red x. Simply tap the green checkmark to gain access.

Duo Mobile Passcode

You can use the Duo Mobile app to generate passcodes. This option does not require Wi-Fi or data, so this is a great option if you’re traveling or if you have limited or no cell/internet service. Open your Duo mobile app, tap the key icon, and it will reveal a passcode. Log into the Duo enabled service, choose the enter a passcode option, enter the code, and you’re in!

Text Message Passcode

Choose this option to receive a text with a passcode on your mobile phone.

Phone Call

Choose this option to receive a phone call on your mobile or landline phone. When you choose this option, Duo will call your phone, and you can press 1 to allow access or 9 to report a fraudulent login attempt.

Bypass Code

If you lose access to your Duo devices and are unable to log in, request this service to obtain temporary bypass codes.

Touch ID

If you have a recent MacBook with Touch ID, you can use Touch ID for Duo with the Google Chrome browser. Duo provides instructions for Touch ID here.

Please note that OIT recommends adding at least one alternative method of verification beyond Touch ID. This ensures that even if you are not using a Touch ID-enabled device or browser, you are still able to log in to your UAH account.

Requirements for Touch ID:

  • Support for Touch ID authentication is limited to web applications that show Duo's inline browser prompt.
  • A MacBook Pro or MacBook Air with a Touch ID button.
  • A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site).
  • Chrome 7.0 or later. Safari and other browsers on macOS are not supported.
  • Respondus Lockdown Browser is not supported.

Hardware Token (faculty/staff only)

A Duo hardware token is a small device the size of a keychain fob. Pressing the button on the device will generate a passcode which can be entered into the Duo prompt. Support for hardware tokens is not provided to students. UAH faculty and staff may request a hardware token from the OIT Help Desk by requesting this service.

Note that tokens can get "out of sync" if the button is pressed too many times in a row and the generated passcodes aren't used for login. If your token stops working, contact the OIT Help Desk by requesting this service.

Read more about using Duo hardware tokens here.

Security Key

The following excerpt comes from Security Keys and Duo:

"A security key plugs into your USB port and when tapped or when the button is pressed it sends a signed response back to Duo to validate your login. Duo uses the WebAuthn authentication standards to interact with your security keys. You may also see WebAuthn referred to as "FIDO2"."

OIT does not provide support for security keys. However, users may choose to use their own with Duo. Read more about using security keys with Duo here.

Have additional questions?

Check out our frequently asked questions page to learn more, or contact the OIT Help Desk for help!

Print Article

Details

Article ID: 156983
Created
Wed 7/12/23 3:18 PM
Modified
Fri 11/17/23 3:23 PM

Related Services / Offerings (1)

Need assistance with Duo (multi-factor authentication for Single Sign-On)?