Duo Multi-Factor Authentication Overview

Multi-Factor Authentication provides an additional layer of security for validating a specific individuals credentials for accessing an application that uses Single Sign-On (SSO).  UWG has implemented Duo as its Multi-Factor Authentication (MFA) application to support this additional layer for authentication.  Applications protected with MFA will require the end user to provide additional verification of identity by accepting a push notification, receiving a text message with an authorization code, receiving a phone call to validate identity, or use of a hardware token to validate identity.  The information on the remainder of this page will provide detail on how to register your UWG user account and devices to support MFA and answer additional questions you might have.

Enrollment

Duo's self-enrollment process makes it easy to register your phone and install the Duo Mobile application on your smartphone or tablet device.

The recommended method for enrollment is to log into the Device Management Portal on a computer with your phone/tablet nearby.

Duo also prompts you to enroll when you log into a protected application.
Supported Browsers: Chrome, Firefox, Safari, Internet Explorer 8 or later, and Opera.

  • 1. Welcome Screen

    Select Start setup to begin enrolling your device

    Welcome Screen

     

  • 2. Choose Your Authentication Device Type

    Select the type of device you'd like to enroll and select Continue. We recommend using a smartphone for the best experience, but you can also enroll a landline telephone, or iOS/Android tablets. Keep in mind Duo will be used for many campus resources some of which you may want to access off campus.

    Choose authentication device type

  • 3. Type your Phone Number

    Select your country from the drop-down list and type your phone number. Use the number of your smartphone, landline, or cell phone that you'll have with you when you're logging in to a Duo-protected service. You can enter an extension if you chose "Landline" in the previous step.

    Then double-check that you entered it correctly, check the box, and select Continue.

    Enter your phone number.

  • 4. Choose Your Platform

    Choose your device's operating system and select Continue. This will be skipped if you are not enrolling a smart phone.

    Choose Your Platform

  • 5. Install Duo Mobile

    Why Use Duo Mobile?

    • fast & easy
    • Works in any country
    • Doesn't require cell service

    Duo Mobile is an app that runs on your smartphone and helps you authenticate quickly and easily. Without it you'll still be able to log in using a phone call or text message, but for the best experience we recommend that you use Duo Mobile.

    Follow the platform-specific instructions on the screen to install Duo Mobile. After installing our app return to the enrollment window and select I have Duo Mobile installed.

  • 6. Activate Duo Mobile

    Activating the app links it to your account so you can use it for authentication.

    On iPhone, Android, and Windows Phone activate Duo Mobile by scanning the barcode with the app's built-in barcode scanner. Follow the platform specific instructions for your device:

    Activate Duo MobileThe "Continue" button is selectable after you scan the barcode successfully.

    Can't scan the barcode? Select "Or, have an activation link emailed to you instead.", and follow the instructions.

    You will receive a success message when you are complete.

    After enrollment, you will be placed in device management portal if you enrolled by logging in there or you will continue on to the application that prompted you for enrollment.

    The device management options are not required but we do recommend you use them to enroll a backup device and customize your experience. You may reference the different options below at any time to come back and change your enrollment.

     

Duo Device Management

  • Device Management

    To manage your devices you must first have completed initial enrollment.

    The Duo Device Management allows you to set up additional devices or reactivate devices that
    are not working due to replacement or defect. You may come back any time after initial
    enrollment to manage devices.

    Log in to the Device Management Portal, choose an authentication
    method and complete two-factor authentication (you may need to scroll down to see all
    authentication options). Please note that you cannot get into the device management portal if you
    do not have access to any enrolled devices. If this is the case, then you will need to contact the
    service desk for help.

    For Smartphones you could use the call me or passcode feature even if the mobile app is not
    working as long as your number has not changed.

    Choose a deviceAfter authenticating you'll see the device management portal. This is where you can enroll a new
    device (by selecting Add another device and following the device enrollment steps), reactivate,
    edit, or delete your existing devices.

    Add Multiple Devices

  • Default Authentication Options

    If you authenticate with more than one device, you can specify which device you would like to be the default device. Select the Default Device: drop-down menu and pick your default device for authentication. Select Save if you're done making changes.

    Select Default Device

    If this is the device you'll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from "Ask me to choose an authentication method" to "Automatically send this device a Duo Push" or "Automatically call this device" and select Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone or a phone call to your device (depending on your selection).

    Default options will not work at the device management portal only on protected applications so you cannot test them on the device management portal.

    Automatically send this device a Duo Push

  • Manage Existing Devices

    Select the Device Options button next to any of your enrolled devices to view the actions available for that type of device. You can Reactivate Duo Mobile for an enrolled smartphone, Change Device Name for any type of phone, or delete any authentication device.

    Reactivate Duo Mobile, Change Device Name

    Reactive Duo Mobile

    Select the Reactivate Duo Mobile button if you need to get Duo Push working on your phone and it currently is not, for example, if you deleted the app on your phone and reinstalled it. After answering some questions about your device, you'll receive a new QR code to scan with your phone, which will complete the Duo Mobile activation process.

    Change Device Name

    Selecting Change Device Name will open up an interface to change the display name of your phone (hardware tokens can't be renamed). Type in the new name and select Save.

    Change Device Name

    After successfully modifying your phone's name, not only will you see this from now on when managing devices, but it will also be how your phone is identified in the authentication dropdown.

    Remove Device

    If you need to remove a device you no longer have or one you added just for a test you may wish to remove it.

    • Under Device options select the trash can button to delete a phone or token device.
    • Note: You may not remove your last device. If you wish to remove it, first add another, then delete the original. If you are unable to delete a device, contact the ITS service desk to have it removed.
    • You are given the chance to confirm or cancel deleting the authentication device.
    • The device is deleted. It can no longer be used to approve Duo authentication requests.

    **If you have lost your device and cannot access the device management portal please call the ITS Service to have it remove as soon as you are able.

    Logout of the Device Manager

    One you are done select logout in the top right corner.